last executing test programs:

5.805419452s ago: executing program 0 (id=1804):
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0xc000400)
mknod$loop(0x0, 0xfff, 0x1)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x0, 0x1a0, 0x1a0, 0x360, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0xffffffff], 'ipvlan0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x560)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket(0x2, 0x80805, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000300)=[@wrmsr={0x65, 0x20, {0x40000091, 0x3}}], 0x20})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x82, 0x4}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1})
io_uring_enter(r6, 0xd44, 0x44c1, 0x7, 0x0, 0x0)
memfd_create(&(0x7f0000000180)='\x00', 0x4)
getpid()

5.338119259s ago: executing program 0 (id=1809):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
io_setup(0x2, &(0x7f0000000000))
eventfd(0x800)
ioprio_set$pid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0xaf96, 0x0, 0x0, 0x0)

4.21368288s ago: executing program 2 (id=1819):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0xa, 0x4e21, 0x6747, @mcast1, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x5, 0x0, [@remote]}}}], 0x28}, 0x0)
r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004748290895130003758100000001090236004100000000092fd3090b502f7e0009050f10200001ff080904013d8e"], 0x0) (async)
syz_usb_connect$uac3(0x2, 0x102, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x60, 0x40, 0x4d, {0x8, 0xb, 0x1, 0x0, 0x1, 0x25, 0x30, 0x99}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x31, 0x9}, [@source_unit={0xc, 0x24, 0xb, 0xd, 0x0, 0x1ff, 0x40}, @selector_unit={0x5, 0x24, 0xc, 0x9}, @selector_unit={0x9, 0x24, 0xc, 0x5, 0x4, "5f66e870"}, @power_domain={0xd, 0x24, 0x10, 0x5, 0x9, 0x100, 0x10, "e149b380"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x7, 0xe, "6696", "52bfad"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0x3, "bbfaab43"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8d, 0xfb, 0xb, {0xa, 0x25, 0x25, 0x4, 0x15, 0xa758}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x4, 0xe, "8eb3b3"}, @as_header={0x17, 0x24, 0x1, 0x3, 0x2, 0x1, 0x0, 0x40, 0x5, 0x8001, 0x3}, @as_header={0x17, 0x24, 0x1, 0x4, 0x5, 0x442, 0x2, 0x0, 0xb4, 0xaa3, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x67, 0x14}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x6, 0x5, {0xa, 0x25, 0x25, 0x400, 0x2, 0x2}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x6, 0x7, 0x3, 0x20, 0x2}, 0x1c, &(0x7f0000000880)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2c39e8a55b6be14c691e5f57344bd018"}, @ptm_cap={0x3}]}, 0x2, [{0x7a, &(0x7f00000008c0)=@string={0x7a, 0x3, "ce10c353acada412efffdf0bc790f4f986ba8f49d3a6b96887413ba69ef5be130a8ab430dfda1cddebdcfbb846d3679764fbab79aded672a2c02fcb3c949df87e0b8bda7ef72b5aef4398df14396bbe5f1896bfa0b68f3329cc6382551b3bfa6fa08bf80166cf7bc9092bf769489e3732941d72b07983062"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x300a}}]})
recvfrom$l2tp6(r0, &(0x7f0000000c00)=""/4096, 0x1000, 0x10020, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x20) (async)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x23, 0xc3, {0xc3, 0xe, "e3341a67a2b105d73fc69979e8bb3a15eb1ef42e6b4df3394ccc7f6eaf9d7b403614c19ff5d2e5cb60c3ad746d7dcd553a638000f5f4a9cfe2473671fcef4f2b15751d025cf7105345805d88ff7548adf605caa5a6aec12ae1876dd91625ab9ac357155f68f190707d3f33a6c112399ab6f1268a34a292438efaf2cd9966262d2583a373485c5a5eee5115e6ed748b3a8ffaa55ce52b606f9824f358181f6d9e25c03e2fee5a44643f989e94f0f1d5c5e0fb5e40488696e0975c88e78bcb839730"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000600)={0x0, 0x13, 0x31, "921d157bd6a39ea682c46538080a092bb3e14278574bf41a3e0baf1c23a1b7fd399a17c25eb4760047bbc7eadc36685b93"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x208, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x1ea, 0x70, 0xd8, 0x0, {0x390, 0x8f00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) (async)
syz_usb_connect$cdc_ecm(0x1, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x3607774f28303553, 0x2, 0x0, 0x0, 0xe7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x81, 0xc0, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x80, {{0xb, 0x24, 0x6, 0x0, 0x0, "6f32997cb53c"}, {0x5, 0x24, 0x0, 0xfe01}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x8a, 0x0, 0xa}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x1, 0x7f, 0x7}, @dmm={0x7, 0x24, 0x14, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x98d3a076b247e466}, @dmm={0x7, 0x24, 0x14, 0x4, 0x466}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x7, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x9, 0xff}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x81, 0x9, 0xe, 0x0, 0xc0}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3001}}, {0x18, &(0x7f00000009c0)=@string={0x18, 0x3, "84f5ca4dc6711c03e04611c50d40b9b62254c1161ae0"}}, {0xff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44d}}]})

4.010859541s ago: executing program 2 (id=1822):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,', @ANYRESDEC=0x0])
r5 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x2, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x2000000000000003}]})
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

3.695243426s ago: executing program 0 (id=1823):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="a51d484e080005000020f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d8", 0x24}], 0x2)

3.665527286s ago: executing program 4 (id=1824):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sg(0x0, 0x0, 0x230040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000e4f40)={0x2, [], 0x80, "91605e962f046c"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000e7fc0)={0x1, [], 0x0, "f55bd596e372ec"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e9fc0)={0x4, [], 0x2c, "a9d6884da746dc"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000ec080)={0x0, 0x0, "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", "f5e63bcfa12f5f44d9235bf1b0ba15e6ec6c690e001133a81d0d5fc0702b3c3fd290661d0e6287d1a54ec22d8f52759d663c678d2a33ddfb99d54d0a527fa283f4666ebd95f84b52500009ef675611a9fbf1c5b069d90335cc9c136c97c2ae105a9b4e712fce486d6fb03075f47d49f3956c855ed3bb70cf4282dfdf54884e6116808aa402f26e1f46fab7621759383f95d5ae1cfd5bb1202eed692a5bc81615772c261362b08ae2de4c5fd68cc74f4f09300d4b07c23c1b870256c00314fcbac06896830425f3b3d9baf934936a87e9a411740cbccc98272caa4effbbd79553d7ff622c9b7e820922722876045dd42d790defb369419a9880ebd923d42907ea0bb665c0601facde99ab4cdb87806d9ee0336ebb48cbe573a42fc7984f90bf033f80ff0c636816ec5502443ec49b140d2f8401e6c2afbc07d94bdd952d3bb41975c0ceaccc0b187b52cebf109034255ef004d3222729bde9252bf52607d0deb4f91351117970945e86015eac36d960d0e9ccb85fbd16bfb9e82bcf17a1c980bdbc235dbb7df97360fe238abddce08da4f54ca805c9c0c72bfb1431d115345c751452acf1adc41be7201ce2ccc799c5534647885b3746800dc2b9b55eab29a4ab4f2e57dd49a7519426b4cf058cbe972c49b7e99684feb78eb47bd467d12cefaac1fd31711f093581276fcd1b320edbd2f70b07c05ea9f3d54fce85f7d70dfe59768edbe69dbd6d9da9efb86323d99322cc02906bfe811e2c2b9ba7585559c3fbd7285174e95d1faaf934a21cd675f8e398322ffa8362eb935dafdcc4ba926a6027e5a17a797dad2bbc0bf66af53f8ff23942df04192a10ad98e73c1abbcf741a442bd47552866d960d811ca5e11cb6ca2163215223ac19b16be5c1ced7721932604fe9c7c144e76408ab585f6a1766e7f924b087ee5af40c364b2ddd3c7f64810b640a3dfd1413182c0503992727de5766da0215cab0fae78433887a8f75aa1fee94b9b72980b4f0bdf22fa9dbf51c3a18d48d2a99b97794170694248ddb20adadd35ceb88f31dfe886cddecc0096c857f6f192ecdd129636e919928e4482352ff1d1f6a70e98cd221afa412bf265d078a83d9e3a9dad8f5a000b0bc782093538a62859490f135f8e724cf3ac3dc42670c4b350d4082844c5547345ef36cc8d0e2fb5fcb78066c0e068525e1228ec0e36d17980abc13162e16952ecb93fc2a9ba99f023f24c509a959e4c3c39a296e544eb2e61d4137fa12c6d41a6c36a020f64b206f85ba3a986fb3b024866aec7f49b76236ab777d4bc1afe641869b1e30dba7c8d07d9306d647dbf55cbd1262dd5486de863166bbfd3843212c0b6906dbd76bb8ec7b865e0f81e8e2e0be54f04593eba7f376cde93a9d1b8d0ad1735bb3d95e758f0a240c1a75b7a2c370051a7f16fa55d925ac4f1e1912ba3df3211d7f81d72c61c6f3e8b94980515d60c1a99b699a877957b1f1f74e8cd60d503b64d2ac36e161238bfa6effa96f053c7a0f4cdd0a74f90a934880ea73bb8ca067b28704643ebc55167503acbb2263666cce3ec0dbeabbbe746cdbbcdd8b7cfdee20e8367249fe36c829b1bf1dcff952a4271ef69d3a0a01c142f13444003d181d5d24457da026d07a61e2f34669f0f0e12f84b9297b1af3e8a6cef51e9075de19d54da72e59ddaf2924a908cca65036c62b116a1e86cceaa7a3b46e2f170f188d867c217f5b54d9b8d4510ab960c70d2820d1fd3a8d0b10289f107a67aab1b8316d22a5e3d56fb5bbb54d434874ed75e8da42adfd0efd7e65181950c1e47f00f06a9c8a7a0492d63ac0674a1e1653651aff75e55bd9422c77eed03d7d08cbedd66bc98afe533fa2d865e1b441bb80e845589eea81c30cfadc028f85053e9493189bbdf9b0666081fdb147095651a84caad43707747e6c892640d8713d554a47ae90213edefb552ba7013efd6c819e3c244b2872ba4c2ca710a01e51c0cd8b7272377aa95922ce9bf3f63ad959133b00f560c53191b3ae6652ffad373b7ac7e45daaff67b4894693f954b5d47b4371976cd9b9babec76499c23f52c09dfb71e432f0c6bb0921c6f0afb14d0d53f2dbaa41fcdbcbd465789511b2e618dfd3cdfdae48171c1daa12c64ac10fc32a8b311ba4b1b6da081981e6330677fd298afb889318b6ea75ce8b91843c5ff5461da29162cdbe23690036f99137f8ab6c4a21bd6bf6d7e09e4855c88b866fb9205dc720dd1bffb532f2c90c8c1203fd424c8cf444f931fc6011ce3007f7784627c9ae99ae97b1b74f898b0cd11cca5ac39345c96929550f33d6455f72df8959c29bb60cf04afabbc55752061d9e50cad479d1daa0f6f75e541b6fb7a17fa0c8c1c60a0682be14851d522d62e474e0ae95e5b4a2b27d64296f4d08c5dc55ac69599ee134b29b6adb517047bbffd4109260f8415fb8550f2b04bcfd2cc373ff708f974d150b51e763f514238733a1e6910e900af8086642596bfa35f2f6f3a62d81cfc4ae2c32014097389dfa6c18b72d549f694af0f258e533e5c9ab0bdc0e43a47ac0c1b3a583d47041b8333539aa8e0c56363018dfef3e7ebedaefcde342b20c335849dd3cf3126ea9597d689b01d663d115f98d00c1e28ba1a784c2da564c712fc174ce87a62f0b5e8f34492147392ba7ca9e044a222bbce160c5cd3967e87017f85fc8de0fb1e97502bc4e421d07628e888c77bad4f80e04fa2a6cfe539185556217323fe1792260164cba3105a606555922a13fb8c5eb7ed42a132b7d36ff3d325f76ea84d9a7dcd72f05b4c7e9bea4e58fc4d4d948d6a69cefbc3ed27d14fe3465abe0c7c97830630ecde1c4c03e1b09bf4d86fb4186c4b0167d6e7a3fa549900058cd97d30c1a6188f2a42be2a848b421582c99b6c9decc964f22ec3270c537d623a9ac17ac977e8bea5d9cac3e165ff3b27a608cf6363268e58247fd81e800772df3aac3a4f753eba2b4fc2186d9310692f55911bd806fa33e775f2b6294ecbaaa44dac9fc0c88da8b39d87fd66db8558d84711bfd97ef1470a9168e57ce392c6cc26e8c2cf3dbf2fdc6e5d33392d46456a0bfadfa3e3e8d43bdfb3d6429ae66a8766f07ead811863d6ffc96de1249a710643b418af1911d4332782d6fb5ef08ba53f6074f778aa547de8541ca44069c88ccf9b8afec3c490e8f0e8a8575b0d6dabe8f9fa028adb98e0c08a6f6e5d8d45ca33f1ce5e8e8058e6daa868648228b7d620b1893b326958a5e1c0f255aeb427dbdf6072115df3dde9e0d8480897d66bdc307eb261199cb6b60b54d2ab225ef2b33d5b1d3aac442ffeacd2c448b2c6a4499de55a119bd6509cb14558d8ce008de6f4d16bdd9e94adf48e27df14b885e389436f04a5a7bdcbcf6a4b3caccdeddad03290dafc5b793b69a7d7cf9962e6cfb1059e25db6ca244d1b3722e48dff510b5c00ed4a06e2a9d64078f1078bdcb2a14ab22d5753bca72944945f0e7a233c666959faa8915dd46093bb6ec69f86172fb79346a01925da3e8b6ba3d53a54f353dd7eb3e9af3d58dfaec7f658c2a4cf7b987de22eb2a98a8b2b9670180d012790afb79ea49a531ab7e29e8efb59fd0a133d1c627cfb34a2369413b1dbe06bc3cb3628f79668de3ac008941c4d57b9622d02979ee4f944e4f2a588cc286619413a970cde91c20055093dddc94b5f17d0d0f3fd4ee137b89124c4aa0b484d4b79f140da641951303bd4840bba9e1e8c39d5764359301f62dcee0a2a8bc6a56de08ad24a00ce16f1cbffa928157801a30287591ad6a52e51a2f15346bc925889e1e65b9d50188f1eafa69519b90ae5052c45b61fa4e49ef2855dd262ffca38926ea7fa5b6faec7f6fb1f886ff6f3fb35cd8040335607306be90e381292db7ef5149ca1d291de8f2d9683541ac3720e66c1b6c16aaaa6c5a23b1ec482fa892d27fb703a4577216c40ed478768fb99c674a99e00b6a177b6219189b3787ca045010d6f4f7fa6530e1878d4afc18366cbe82516c13e776e210d251846495e6054f4422e27bb468b2042537400300d41d93df300ca37ac073f7b8e6212e4d4af24337374100fe236ca3d47ffce4a31546ad9c9dcfc586e1840e6ba9af09430148a610af7cc7d646e0f5c407afc8fab14430c2aa492bd711168e15d2bb4f653c79ef1cf355d0bee806970518dbe7f8b48bfc3ce7bc4b13e69d6f5287bbbeaa745ebede49b92cddd7ecee9d2ce404f544a5297ca02ddeba5ca2aa3b2f1c43b3ac2d2d8e2d1aa4ee21cbec422838bb50c280aebf024f6832f47a8b47bb2bb77fe51715f721db7aeb4b1896e787b96b58a8666dfc84523689dcadd146931dbe67776bd02da13f8fa5e33d48a812445223e1c275c30c402961fc079e95704405396bdbabe3b0395752727ac7aedd4df3da22105236fdaab0ae9f935aace7f0a70481b4201cda2b769db475a59337000a0e02dac2f47b090728cdd6b6c74db137f2612bf2ea5ff04f4efd6f67aa7c32e0de188ceec8e0c8e6b615eb3f44ee602c8b8112e8547c2b1704f3411beeb9a087e42b2df6fc2c232abec2539fb941537cac7d99338b40e5629ca909912c9ac867588c5d125c35adeecfdfce1aad7dcf8cb15fab733219c4dddbabcbcf5a35c19d9b43c65d4603cec80f4116e61b575ca484865b2ebd14bc2469cbf66585b10cb7482e3569da5293c5b9353a40ecc4ade9680c318d487c3a1921764c1d833f1a1d2da72ac8b831b474f018f9ebd98ba37d7fdbd113bf9d1979474afed0f6cac1e03c5a4247c75fd6d401bedc9e798b157dac7cf480093aa20232b563922f255e8060a0f8feca0ce5859e09268ece3e7e97d41252eb99e973037c59bf6e441239c97e6f1fbe545673d7b6211e41c92ee0d8d6d357d101ab5c7d5f782a006684e161009914f228512f95e778eafa020fd7fdd2d66e552e3d2d214e1b76280fb6360691f32b35c14b167c4410b7754acba40b78a1226db1c90d8435a0d582124d46ba4e05806e2d8b359beef239d192058526ca1522e340abd47da005d81bfee74f455900729816696fd01af73b48ed316fb73ba6ed13b3937f61ada613d76dc0c9a32e1d25ae3d765af465d410874c9f72ddc94ac4b8f5c2e69296cc054c141246f440007a80160ef55c7dc1d6369c228241d55370497992cac22f2a45b42632f67e1602dae1145b612bded096aa254ce3b5f7cc712690099c8b78cb51cea102909289968825f7ea12d4ff73e844ee882763355a1b037e8dadc65a20f8bd1f1722cafaf7359eceac6bfb1ce2c2d6e8673bf5f2b4c921cc53d7bd5a5d2e7e311219e5f0ad9952d0374445ff24d24d65b0ee2867bdf60585c19a5579b38851f18dbc7224058ffb5e8abfb3aa10e02a708279c24b60fdd4ea58923a9f201e189b429d6941e81c1f0f73c683400"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000)

3.498618614s ago: executing program 0 (id=1826):
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1000000, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

3.118245564s ago: executing program 4 (id=1828):
unshare(0x2a000200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x4, 0x802)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000440)={0x3, 0x73180600, 0x3, 0x10, 0x2f, 0x2, 0xff, 0x9})
gettid()
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xc, 0x6, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0xb, 0x3, 0x7, 0x8, 0x5, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xc, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0xb, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
close_range(r1, 0xffffffffffffffff, 0x0)
r11 = socket$inet(0xa, 0x801, 0x84)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="20000100", @ANYRES32=r13, @ANYBLOB="010200007f00000100"/24], 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0)
getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54)
ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000000)={r11, 0x7, 0xb01, 0xcc})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

3.022531297s ago: executing program 3 (id=1829):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf24810000000000000080ff000014000100fc000000000000000000000000000001140002"], 0x44}}, 0x884)

2.863135788s ago: executing program 3 (id=1831):
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async)
modify_ldt$write(0x1, &(0x7f0000000640)={0x6, 0x20000800, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x12, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r4 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000400)='uid', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) (async)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
syz_open_procfs(0x0, 0x0) (async)
r8 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) (async)
recvmmsg(r8, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/119, 0x77}], 0x2}, 0xac2}], 0x2, 0xcb, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20)

2.64935008s ago: executing program 3 (id=1833):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008881}, 0x4800)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x4, 0x12, 0x5392, 0xfb9d, 0x9, {0x0, @in6={{0xa, 0x4e23, 0xb, @private0, 0xff}}, 0x81, 0xb57, 0x0, 0x3, 0x10000009}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
syz_emit_vhci(&(0x7f0000000cc0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x2, 0xc9, "9c9182049b2029cd"}}}}, 0xf)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x29, 0x0, &(0x7f0000000540))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010600000000000000000700000007"], 0x18}], 0x1}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

2.385854552s ago: executing program 3 (id=1835):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5, 0x1}, &(0x7f0000000000)={0x1f, 0x4, 0x701, 0x2, 0x40000006, 0x0, 0x7, 0x9}, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x408442, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}})
io_uring_enter(r4, 0x3514, 0x9141, 0x69, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000580)={{}, "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"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000072009fb326bd7000ffdbdf25"], 0x18}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040)
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ASSERT(r7, 0x29, 0xcf, 0x0, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000001", @ANYRES16=r8, @ANYBLOB="040025bd7000fbdbdf25210000000c009900c3ffffff1700000006009800d405000031002a0068040800100083254006d2080211000000a10c00000802110000013400000088000000080211000000b33000000000000400ff00"], 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x0)

1.982834722s ago: executing program 0 (id=1837):
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xd0, 0xe6, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x800}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xc}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffebb, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x1, 0x80}, @ssp_cap={0x10, 0x10, 0xa, 0xe4, 0x1, 0x9, 0xf000, 0x400, [0x30]}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x403}}]}) (async)
syz_usb_connect$uac2(0x0, 0x10b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x4, 0x8, 0x10, 0x81}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@generic={0xf, 0x10, 0x3, "80f7cba46ef96a051f6587a8"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8, 0xf00, 0x8, [0x804030]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4ff}}]})

1.973263549s ago: executing program 1 (id=1838):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f0000000040))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000240)={r0, &(0x7f0000000300)='/de\x01\x00\x00\x00dio#\x00\xb2\xe2\xd5\xa7\x801\xe4p\n\xa4\xafw\xbd\x7f\xea\xbf\xe4\xc2P\xd3EN\xe7\x8c\xd07\xf5\xb8)\xc9\xd8Q\x11\xaa\x8c\xdd;\xa5\xc6\xf9|e\x03\x00\x1d\x1e*\x1d\x04\xab\xcdH8\xc9\xefU\xed\xf8\xd0\xb5K\xb4\xa8|\\\xc3\x8fa\f|\xc6\xb4\xa1I@R:\x9d\xf4\xdeU\x8d\xf2J\xe7b\xe9@\xc4\\\xd4l\xbb\x83\xc7\xf3V\x00\xcbc\x92-\xbf;g`>E\xa2qYBOL:zl\xb2\xad5\x83>\xe0\xec\x9b8\xa5F\x00J\x0e4\xf4)r\xfa\xf5_!2f\x8a*On\xe7\xab\xba\xb5k\x81\xbduz\xc7\xfc\xb3\xbb\xafo\xbf\x9b\x9b\x91\xbd\xb6\xa6Q\xa2\xb0\x15;\x9f\x8b\xc4\x18I\x7f\xc7\xc2\x8c\\n\xa0\xb48*\xb0\xd9\x9a6A[2\xe1\x1c\xce\xf9\xe8\x8d\xe0\xbdu\xbf\xd3Q\r\xba\f\xe2\xc5\x9d\x95 X\xe4\xe0\x9a\x95\xc4~V]\xb9\xf7F\'F0\xcb\x1c\xa6\'q\x94\xdd\x176\xdf\xe36\vW\x9d\x9d\x96\xd5\x92\x01\r\xbb\x93U\xa6\x8e\xd6\x13\xd1<\xf0\xdf\x83\xa1sO\xda|', 0x20903, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x1]}, {0x4, 0x9, 0x3ff, 0x9}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x53144aca})
sendmmsg$unix(r1, &(0x7f00000108c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)="46ed9ca76773a372d8ca3a0be75503d048a7b9", 0x13}, {&(0x7f0000000640)="2713c6f65cfe991fa9de891fc58ce8cf6407e28fdf99ae77b35bf7afade7d8080405b1ef6e571cd85505ab5796174162", 0x30}, {&(0x7f0000000680)="e0a8fb811d3163fc0ed9a08a592aaa3c8b3578769e2d1cfb5824b54fac20e81d106adaa6a10adabaf329f8df8a89417920c672e0562f68128c56358c7d57981710e25fd3f0a038874c9455b18612d3ee173e0cb3b4d4ab6e1c98ab1fb7a69560ce", 0x61}, {&(0x7f0000000700)="9d78d3944755b34831f8d9030073ca95b3ea85e26ee3567c7eeed0bb3c28411c2368badafbc37fd5922f05437cc2698a1ea8a1d9953469afbad1510a70bc2a924985644240811a43582ab8d5ebc1b15b5308155f88cf44c96cbcb8a39d14ad69fbdbd08906c0edb42180863875605a64cc369d660c261078fb286e3a0d27271a40461a726637fb6ccc06705f802c756e4178c1178b045375ae1cd641a1cef2f98f27308201c357020817b2c06ea1ef5a236437a3b698f70e1349bac06e6aa68439058c39e2bf3658b112fde5e017615c1c28afe3f254737dfa7b94ec81685979fe75b6c73416", 0xe6}], 0x4, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r2, r0, r0, r1, r1, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x150, 0x20000815}}, {{&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001380), 0x0, &(0x7f0000001a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x801}}, {{&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000001b80)="9d3f8d1aa0814a2a5a2a5cdaa2a8938a8724d9bcd3dd9451be29dd93b7743991329c3583816885c9193ccaed0b4913e15e19dd07a4ea428aecb7bb67a9edf7802007eb6fe98cc28f91eff53cc9280e4dcc96d7d4130bdf389ed6a0779aac99db01bf180d1aad5a32b12755283000fca747e99ebd680e910039bddd", 0x7b}], 0x1, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0xb0, 0x4000800}}, {{&(0x7f0000001d80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001e00)="dd02bfe91f008c24490fd5531870a341e8f44543b6bed91d20ed550ce0a07ade7fd4fff8c9188e4bb3b7c0fd478601e4b9abedbf7570bff5a1a859fa1fb800d923c58b3fd06f1abf0b994886d1d325c539222380b8188a45b4b01877408309ebf60929f34fdd5f9f55bcc6eaf7d8ee6621ac5b7ff5d703fd7900dec27248c3f8d2186791cf22ac0f32a3ca84f484c5e93a8087c88bdfc3dd4208fd75d449f141ed06b86561d8bd8910", 0xa9}], 0x1, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x80}}, {{&(0x7f0000001f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010600)=[{&(0x7f00000102c0)}, {&(0x7f0000010300)="a8530cf7b35902108035c40238515ea0ddb5b917538c28fe9b7daecfa6db11855db68669f3faf63fd589b69dd6a9168218037366", 0x34}, {&(0x7f0000010340)="f7f80b2a4a5caf26e6476266361d01c69b103a366ef6a6d22badb4c3500dab1970df5b6cc0e39bdf81ec6dfe7ac106e9308aeb1e9fcd", 0x36}, {&(0x7f0000010380)="6a9265b466530f52e3831061b62e4f258729100e3a55005dfb69f8a9e40f6ae36b5ddd2988ff3c5bcab959b6be45035f49fd78330f07f832e32b5f95cfbe4fb426da3e7e9b6d3c489ca26c65f8f63c5bc64106ccbefdbc8adfc52be8405c2e0ca6cebcce96f412a7535a7d1c548120", 0x6f}, {&(0x7f0000010400)="7b9cdeb001a6ee8631a2441e540f83bda6aab152ea697cde5183b7b539bf4a2b2dc1a3a7ce8c199339634c", 0x2b}, {&(0x7f0000010440)="ec0eb4e4b53c69d6041186fc142a78a2a49a6bbd46a06a955976fd4598310c0cb975f0e1b14e79819cda4106a1523d5fbbf82e37e2864e14", 0x38}, {&(0x7f0000010480)="0ccc065cd76e8119ef78bb0987d51f17c42445d15e80249ca30845eca588d571fa5a66d0e03b1e842597895439d272610b600064f653857e94a65a09998a6332f666cf336a75464ac3e74599f49ccdc0a74d0ea7736e66bce82ca960f1349ae4292d222058e630118e3723", 0x6b}, {&(0x7f0000010500)="3a21da1e3d6af8f9dab46d43de7b6b418eb559cc2a3822b516a23eac2ea319a2e82f5cd34ec89320b7c770573afdcfb88316df6708de5d2bbf7b8cf2673a32e5cc5515ce32b9ef7e923e55db61a706040fb18386f158fa0efe60e4c97d6e1c777ecaa99b4fc5faa5dd4508a29fc9d95b4976a2fb90cb", 0x76}, {&(0x7f0000010580)="741f45ecb02f53b4f723c78f4d38e3427a339a7701d3df9bcd0d05e015a0019cd7f7c466a26c7864e6733eff3a052a7a79cd487acc89bc9922501683e6ae143a3bef2f3043872337a417d66beb2e97c187771f8ec929c2881037b477827dfac6ec1c9cdd5101a4b5ae", 0x69}], 0x9, &(0x7f0000010840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x60, 0x8c0}}], 0x6, 0x0)
r3 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0xa00)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r4=>0x0})
write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f00000002c0)=r3)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000440)=0x9)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f00000004c0)=0xfffffffe, 0x80000000000b, 0x2, 0x0, &(0x7f0000000180)=0xffffffff, 0xfffffffd)
r8 = socket$packet(0x11, 0x2, 0x300)
mq_timedreceive(0xffffffffffffffff, &(0x7f00000001c0)=""/39, 0x27, 0x2cdd, &(0x7f0000000d00)={0x0, 0x3938700})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'ipvlan0\x00', &(0x7f0000000540)=@ethtool_drvinfo={0x3, "e6e924ae4f06f5c22f4c65dc2f834756f75e98492301c0a2fdfd67caf3e867e9", "b5b14daa71854979a17ba8aa24c9da79d3b98f4f483c7922bbbd9b3a04ff75ef", "8046a5d47197cce8fa1c4b25cb4165fb82b493c000", "d0778ad9ec384cf0004000000000000000f3fe00", "72d8970f24f40aca9455c8d4273d73f486f1bcf25ca72f7dc66e6cf100509525", "3bcd6e41dd6ec3612d14ec7c", 0x6, 0x4, 0xfbfffff6, 0x5, 0xbb}})
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
futex(0x0, 0xf, 0x10000, &(0x7f0000000040), &(0x7f0000000480)=0x801, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)

1.760181194s ago: executing program 2 (id=1839):
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000002000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004)

1.590233216s ago: executing program 2 (id=1840):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES16, @ANYBLOB="0000000060000000580012800800010067"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x1000000bfffff1f}]}, 0x68)

1.326266287s ago: executing program 3 (id=1841):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x327, 0x4)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x40001)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, &(0x7f0000000040)={0x1f, 0x500000000000000, 0x80000005, 0x0, 0xfffffffffffffff8, 0x7, 0x8}, 0x0, 0x0, 0x0)

1.164132263s ago: executing program 2 (id=1842):
syz_emit_ethernet(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340)="2a084c80a304", 0x0, 0x9, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x250, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)

893.843639ms ago: executing program 1 (id=1843):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0xfffe, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000006c0)="a1c0ffff000039a9029e2d347a0000000666eeee", 0x14}, {0x0, 0x26}], 0x2}}], 0x1, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0xfffe, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000006c0)="a1c0ffff000039a9029e2d347a0000000666eeee", 0x14}, {0x0, 0x26}], 0x2}}], 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400fa001000f10000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540002100020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000abb89f8bcce5b60011f65bbeda27e33fd585514b8939b7997cbca96e1bf23a88ef24b7ab58c376fea9dc776f51eccf4160899550f4b1b29ecf042d6bea757f8d646016620e5b5d05afb4d687b9937620fe34b375b513316c7a61dba677a5c56c5eae05883eccca5cc9ac3caa0bd35f5bc"], 0x64}}, 0x24000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000340), 0x15, 0x8ea49012a88fcbb3)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x11)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4401002fe4b122390581a65250962c04f3000000000000000092b1dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001040000240012800b00010067656e65766500001400028005000c0001000000060005004e210000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4401002fe4b122390581a65250962c04f3000000000000000092b1dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001040000240012800b00010067656e65766500001400028005000c0001000000060005004e210000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x7fffffff}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8d, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000500), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf250500000034000680080003007f0000e5050002000800000008000600100000000800060001000000050002007f000000081003007f0000011c000180060001000a00000008000700", @ANYRES32=r6, @ANYBLOB="0500020015000000"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtaction={0x14, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtaction={0x14, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) (async)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x3}, 0xfffffe06)
socket$kcm(0x10, 0x2, 0x0)

880.792984ms ago: executing program 2 (id=1844):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r2 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64=r1], 0x1c}}, 0x20040000)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
socket(0x10, 0x3, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff70)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$TCXONC(r5, 0x540a, 0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100))
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@ifindex, 0xffffffffffffffff, 0x1b}, 0x20)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x3a, 0x40, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r7, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000240)="12", 0x1}], 0x2)

573.19486ms ago: executing program 0 (id=1845):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_usb_connect(0x0, 0x17e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000965bb108a1172801f6050102030109026c0101000000000904"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x10db, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x400008, 0x29})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
r1 = io_uring_setup(0x5c97, &(0x7f0000000100)={0x0, 0x1a9d, 0x20, 0x3, 0x15b})
io_uring_enter(r1, 0x2217, 0x7721, 0x16, 0x0, 0x0)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080))
syz_open_pts(0xffffffffffffffff, 0x103100)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="0200000200200000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4044)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x30f880, 0x0)

526.651265ms ago: executing program 1 (id=1846):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x3e, &(0x7f0000000240)=0x7fff, 0x61)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newtclass={0xa0, 0x28, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xa, 0xe}, {0xe, 0xfff1}, {0x1, 0x9}}, [@tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x54, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x80007ff, 0x401, 0x8000}}, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0xf0177012, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0xf59f, 0x427}}, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x5, 0xacf8}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @tclass_kind_options=@c_mq={0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44030)
close_range(r1, r4, 0x2)
r7 = fsopen(&(0x7f0000000200)='omfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000280)={0x5, 0x0, 0x2, 0x0, 0x25})
r8 = creat(&(0x7f00000016c0)='./file0\x00', 0x63)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r8}, 0x68)

459.383927ms ago: executing program 4 (id=1847):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000700)=""/195, 0xc3}], 0x2}, 0x10000)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000840)="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", 0x131}], 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000004480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e22, 0x4e26, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1a, 0x4, 0x0, 0x3}}}}}}}, 0x0)

415.294585ms ago: executing program 1 (id=1848):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in6=@loopback, 0x8000, 0xff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x4, 0x2, 0x2}, 0x800}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x600, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x400000, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x10001, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

330.755265ms ago: executing program 3 (id=1849):
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xa, 0x2, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2801000017000100000000000000000000000000000000000000ffffac1efe01000004d400000000ac1414bb00000000000000000000000000000000000000000000ffffac1e0001fe8000000000000000000000000000aa00000000000000060000200000000000", @ANYRES16, @ANYRES32=r2, @ANYBLOB="ac1414aa000000000000000000000000ff0100000000000000000000000000014e2400004e220000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000530000000000000000005fac08f3e3a83971511f55fa10351e0000000000000000000000000000000000000000000003000000000000005fee00000000000000000000000000000000000000000000020000000000000004000000bf6b6e000000000000000000feffffff00000000000000000000000099f011c7d37b7adc962543e58bfca1353143f3f03b739850650d54c16e4c66c5f5d52948c18d0577324ac179c201c3d64b5bcda350157a690b30feae82ed0aa75bcb4b44986b2c41deb7c05f5f649c0de946fa1b4e0b81a59f6cc9fa712d9945b06c4e0f5a40d9b294a3a9ee7535b85c8049dfc6528bc637a8450b2eff1ae552faf1b9208d6b9d7b7db12857d88f405f5ef54426945877b26a1e37825566bd717869552de866d5420911a058331eabd65f119213555e6ddf85f0d68bd9d5de67af44c97b957dc2ec503f0cffcbf65ac43579f484153d477f25f3a61173c03f78d36d9e6a01a040c49cd0de3e9e9356fb407ba01246f409160b3b687373aec33d5e273d051963dadabd460eee3b39e40517c18dc8f222b13a2865ff09970b831fa151b6bd1f65c9129f1e9de0df30744ae8e9474c5cafecc9c300"], 0x128}, 0x1, 0x0, 0x0, 0x41}, 0x4040)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000050004000000000009000200736b7a3000000000050001000700000005005f65641631fcbb8e07800800114000000001080012400000ffff0d000300686173683a6e657400000000b5e9a0c56b5df3d4357010e75f2cc0ad6b"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000002010100000000000000000a0000004a7314804c8f8735f043e30181606418fc9f685b1d7675386f4617ef3f744358212db5be1d02a6e85198c23c036a072ea20c9683ca"], 0x14}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000206050000000000000000000000000005000100070000000900020073797a3100000000040007800c000300686173683a697000050005000a0000000500040001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000fcffff0000000000000005000100a1e4390cc8000000000000000000000000072694decdeca93700"], 0x1c}}, 0x0)
r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x3, 0x4, 0x3, {0xa, 0x4e24, 0x4, @local, 0x2}}}, 0x3a)

280.011404ms ago: executing program 4 (id=1850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000f10000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff0008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

264.547324ms ago: executing program 1 (id=1851):
r0 = socket$inet6(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c)
listen(r0, 0xb)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0x2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}, 0xe0ffffff}], 0x1, 0x20080058)

82.373639ms ago: executing program 4 (id=1852):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00')
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0)
io_setup(0x501, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000000)='hy', 0x2, 0x310d, 0x0, 0x0, r0}])

81.831579ms ago: executing program 1 (id=1853):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
socket(0x1000000010, 0x80002, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1f)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000014000200"/40], 0x40}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xee01, <r8=>0xee00}}, './file0\x00'})
fchownat(r1, &(0x7f0000000080)='./file0\x00', r6, r8, 0x1000)
mount$fuse(0xedc000000000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00f3823a2fe86b711eb087e66d0a6c6eebe4299c94dadefbf6a63439e907184aa46e354ade59f9c709aeb489c7a8f9ecb6dfd30db483221e93486d348326c33e27eaacef3a71a4230d66faa527402a1cc12c1503f887434fe9351531c9593f11ed61b1ddf631d01ab857d8bc660740dcc7d69caf47d8c2bf03f1749825e80b4980e6bfa1df9de9224eae8d368d994b4d1751ef928796c1a6486f550a7cc640ec86222ba2bb098d56cda7fbaefa275f17216701e6d5fa3cba7a0d3b4374b53ec66ed6b5ad8d0d5a97d123e1ecf50fc93ea82577cbe92ebaa8922e594b8e75cda5ad3735"])
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="0c009900080000004b000000"], 0x28}}, 0x0)

0s ago: executing program 4 (id=1854):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r4, 0x0, 0xd1, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6})
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000300)={"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"})
close_range(r0, 0xffffffffffffffff, 0x20000000000000)

kernel console output (not intermixed with test programs):

uous mode
[  387.521087][T10800] team0: Port device team_slave_0 removed
[  387.554555][T10800] team0: Port device team_slave_1 removed
[  387.580054][T10800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.609001][T10800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.641660][T10800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.667464][T10800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.703426][T10800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  387.776443][T10802] vlan0: entered promiscuous mode
[  387.783619][T10802] syz_tun: entered promiscuous mode
[  388.091313][T10820] FAULT_INJECTION: forcing a failure.
[  388.091313][T10820] name failslab, interval 1, probability 0, space 0, times 0
[  388.117414][T10822] netlink: 'syz.0.1383': attribute type 4 has an invalid length.
[  388.125251][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.3.1382 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  388.125287][T10820] Tainted: [L]=SOFTLOCKUP
[  388.125295][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  388.125308][T10820] Call Trace:
[  388.125317][T10820]  <TASK>
[  388.125327][T10820]  dump_stack_lvl+0xe8/0x150
[  388.125373][T10820]  should_fail_ex+0x412/0x560
[  388.125404][T10820]  should_failslab+0xa8/0x100
[  388.125470][T10820]  __kmalloc_cache_noprof+0x88/0x660
[  388.125498][T10820]  ? sctp_add_bind_addr+0x8c/0x370
[  388.125614][T10820]  sctp_add_bind_addr+0x8c/0x370
[  388.125646][T10820]  sctp_copy_local_addr_list+0x314/0x4f0
[  388.125707][T10820]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  388.125735][T10820]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  388.125765][T10820]  ? sctp_v6_is_any+0x64/0x80
[  388.125821][T10820]  ? sctp_copy_one_addr+0x93/0x360
[  388.125852][T10820]  sctp_bind_addr_copy+0xb3/0x3c0
[  388.125881][T10820]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  388.125935][T10820]  sctp_connect_new_asoc+0x2ff/0x6b0
[  388.125995][T10820]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  388.126036][T10820]  ? __local_bh_enable_ip+0xd0/0x130
[  388.126077][T10820]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  388.126102][T10820]  ? security_sctp_bind_connect+0x7e/0x2c0
[  388.126164][T10820]  sctp_sendmsg+0x1528/0x2c10
[  388.126212][T10820]  ? __pfx_sctp_sendmsg+0x10/0x10
[  388.126250][T10820]  ? aa_sk_perm+0x6d5/0x900
[  388.126314][T10820]  ? __pfx_aa_sk_perm+0x10/0x10
[  388.126350][T10820]  ? sock_rps_record_flow+0x19/0x400
[  388.126419][T10820]  ? inet_sendmsg+0x2f4/0x370
[  388.126445][T10820]  ____sys_sendmsg+0x80a/0x9f0
[  388.126490][T10820]  ? __pfx_____sys_sendmsg+0x10/0x10
[  388.126557][T10820]  ? import_iovec+0x73/0xa0
[  388.126601][T10820]  ___sys_sendmsg+0x2a5/0x360
[  388.126629][T10820]  ? __pfx____sys_sendmsg+0x10/0x10
[  388.126656][T10820]  ? kstrtouint+0x6e/0xe0
[  388.126711][T10820]  ? __fget_files+0x2a/0x420
[  388.126742][T10820]  ? __fget_files+0x3a0/0x420
[  388.126785][T10820]  __sys_sendmmsg+0x27c/0x4e0
[  388.126813][T10820]  ? __pfx___sys_sendmmsg+0x10/0x10
[  388.126832][T10820]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  388.126883][T10820]  ? ksys_write+0x242/0x270
[  388.126909][T10820]  ? __pfx_ksys_write+0x10/0x10
[  388.126941][T10820]  __x64_sys_sendmmsg+0xa0/0xc0
[  388.126965][T10820]  do_syscall_64+0x14d/0xf80
[  388.126997][T10820]  ? trace_irq_disable+0x3b/0x150
[  388.127029][T10820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.127051][T10820]  ? clear_bhb_loop+0x40/0x90
[  388.127078][T10820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.127100][T10820] RIP: 0033:0x7f3fef39c799
[  388.127122][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.127141][T10820] RSP: 002b:00007f3ff0343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  388.127165][T10820] RAX: ffffffffffffffda RBX: 00007f3fef615fa0 RCX: 00007f3fef39c799
[  388.127181][T10820] RDX: 0000000000000001 RSI: 0000200000007f80 RDI: 0000000000000004
[  388.127194][T10820] RBP: 00007f3ff0343090 R08: 0000000000000000 R09: 0000000000000000
[  388.127207][T10820] R10: 00000000000480c1 R11: 0000000000000246 R12: 0000000000000002
[  388.127221][T10820] R13: 00007f3fef616038 R14: 00007f3fef615fa0 R15: 00007f3fef73fa48
[  388.127256][T10820]  </TASK>
[  388.690331][T10825] netlink: 'syz.0.1384': attribute type 1 has an invalid length.
[  388.717958][   T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  388.872990][   T24] usb 5-1: device descriptor read/64, error -71
[  389.023011][ T6866] usb 3-1: USB disconnect, device number 51
[  389.116921][   T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  389.199247][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'.
[  389.256389][   T24] usb 5-1: device descriptor read/64, error -71
[  389.366758][   T24] usb usb5-port1: attempt power cycle
[  389.716390][   T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  389.748166][   T24] usb 5-1: device descriptor read/8, error -71
[  390.027109][   T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  390.047007][   T24] usb 5-1: device descriptor read/8, error -71
[  390.145035][T10856] gretap0: entered promiscuous mode
[  390.155836][T10856] gretap0: left promiscuous mode
[  390.162032][   T24] usb usb5-port1: unable to enumerate USB device
[  390.397248][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'.
[  390.417154][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'.
[  390.423281][T10868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1397'.
[  390.446892][T10862] 8021q: adding VLAN 0 to HW filter on device bond4
[  390.464759][T10862] bond4: entered promiscuous mode
[  390.489728][T10862] bond0: (slave bond4): Enslaving as an active interface with an up link
[  390.562409][T10868] team0: Port device macvlan3 removed
[  390.604185][T10868] bond0 (unregistering): (slave bond4): Releasing backup interface
[  390.633475][T10868] bond4: left promiscuous mode
[  390.648793][T10868] bond0 (unregistering): Released all slaves
[  390.839329][T10884] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  390.941456][T10890] syzkaller0: entered promiscuous mode
[  390.948421][T10890] syzkaller0: entered allmulticast mode
[  390.958685][T10890] tipc: Started in network mode
[  390.963586][T10890] tipc: Node identity c223bf9971ac, cluster identity 4711
[  390.972225][T10890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.976759][ T6866] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  390.989592][T10889] tipc: Resetting bearer <eth:syzkaller0>
[  391.020585][T10889] tipc: Disabling bearer <eth:syzkaller0>
[  391.063209][ T6876] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  391.126399][ T6866] usb 3-1: device descriptor read/64, error -71
[  391.238082][ T6876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.249470][ T6876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  391.260926][ T6876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  391.271200][ T6876] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  391.285130][ T6876] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  391.294798][ T6876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.316048][ T6876] usb 1-1: config 0 descriptor??
[  391.376367][ T6866] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  391.516356][ T6866] usb 3-1: device descriptor read/64, error -71
[  391.527414][ T6864] usb 1-1: USB disconnect, device number 47
[  391.626765][ T6866] usb usb3-port1: attempt power cycle
[  391.967369][ T6866] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  391.995180][ T6866] usb 3-1: device descriptor read/8, error -71
[  392.248547][ T6866] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  392.287058][ T6866] usb 3-1: device descriptor read/8, error -71
[  392.311588][T10919] Cannot find del_set index 2 as target
[  392.426914][ T6866] usb usb3-port1: unable to enumerate USB device
[  392.566497][ T6866] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  392.740032][ T6866] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  392.758340][ T6866] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  392.774594][ T6866] usb 5-1: config 0 interface 0 has no altsetting 0
[  392.795880][ T6866] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  392.827929][ T6866] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  392.854340][ T6866] usb 5-1: Product: syz
[  392.877814][ T6866] usb 5-1: Manufacturer: syz
[  392.890703][ T6866] usb 5-1: SerialNumber: syz
[  392.919335][ T6866] usb 5-1: config 0 descriptor??
[  392.970387][ T6866] usb 5-1: selecting invalid altsetting 0
[  393.386722][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.453913][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.541403][T10930] netlink: 'syz.1.1418': attribute type 9 has an invalid length.
[  393.864904][T10939] xt_bpf: check failed: parse error
[  393.927346][T10940] fuse: Unknown parameter 'fd0x000000000000000a'
[  394.056827][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  394.278351][   T24] usb 4-1: config index 0 descriptor too short (expected 30768, got 36)
[  394.504992][   T24] usb 4-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  394.522891][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'.
[  394.629244][   T24] usb 4-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[  394.699945][   T24] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  394.736329][   T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  394.760997][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.108622][   T24] usb 4-1: string descriptor 0 read error: -71
[  395.167639][   T24] usb 4-1: USB disconnect, device number 40
[  395.187498][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'.
[  395.364899][T10961] syzkaller0: entered promiscuous mode
[  395.370978][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1428'.
[  395.560255][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'.
[  395.948416][    C1] sd 0:0:1:0: [sda] tag#97 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  395.958752][    C1] sd 0:0:1:0: [sda] tag#97 CDB: Read(6) 08 0f ff ff ff 00
[  395.996511][ T6866] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  396.114730][T10982] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1436'.
[  396.160799][ T6866] usb 1-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config
[  396.186406][ T6866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  396.209479][ T6866] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  396.229057][ T6866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  396.238583][ T6866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.249275][ T6866] usb 1-1: Product: syz
[  396.253496][ T6866] usb 1-1: Manufacturer: syz
[  396.276572][ T6866] usb 1-1: SerialNumber: syz
[  396.292261][ T6864] usb 5-1: USB disconnect, device number 43
[  396.337597][ T6866] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  396.371450][ T6866] cdc_ncm 1-1:1.0: bind() failure
[  396.506765][ T6877] usb 1-1: USB disconnect, device number 48
[  396.918507][T10997] netlink: 'syz.3.1442': attribute type 1 has an invalid length.
[  397.116833][   T24] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  397.296083][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  397.334654][   T24] usb 3-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44
[  397.401497][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.457468][   T24] usb 3-1: config 0 descriptor??
[  397.502608][   T24] pwc: Samsung MPC-C30 USB webcam detected.
[  397.905351][   T24] pwc: recv_control_msg error -71 req 02 val 2b00
[  397.965178][   T24] pwc: recv_control_msg error -71 req 02 val 2700
[  397.998479][   T24] pwc: recv_control_msg error -71 req 04 val 1700
[  398.023899][   T24] pwc: recv_control_msg error -71 req 02 val 2c00
[  398.054673][   T24] pwc: recv_control_msg error -71 req 04 val 1000
[  398.079108][   T24] pwc: recv_control_msg error -71 req 04 val 1300
[  398.099096][   T24] pwc: recv_control_msg error -71 req 04 val 1400
[  398.121820][   T24] pwc: recv_control_msg error -71 req 02 val 2000
[  398.138094][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  398.151406][   T24] pwc: recv_control_msg error -71 req 02 val 2200
[  398.172979][   T24] pwc: recv_control_msg error -71 req 06 val 0600
[  398.213052][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  398.231426][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  398.254313][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  398.271670][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  398.279209][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  398.293515][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  398.319676][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  398.340855][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  398.381723][   T24] pwc: Registered as video103.
[  398.438451][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28
[  398.590199][   T24] usb 3-1: USB disconnect, device number 56
[  400.306387][ T6864] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  400.501140][ T6864] usb 5-1: Using ep0 maxpacket: 32
[  400.523334][ T6864] usb 5-1: unable to get BOS descriptor or descriptor too short
[  400.558983][ T6864] usb 5-1: config 128 has an invalid interface number: 127 but max is 3
[  400.586309][ T6864] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  400.619287][ T6864] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4
[  400.656671][ T6864] usb 5-1: config 128 has no interface number 0
[  400.663060][ T6864] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  400.713763][ T6864] usb 5-1: config 128 interface 127 has no altsetting 0
[  400.749300][ T6864] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  400.756917][ T6877] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  400.779371][ T6864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.781634][T11057] netlink: 'syz.3.1462': attribute type 5 has an invalid length.
[  400.815727][ T6864] usb 5-1: Product: syz
[  400.816007][T11057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1462'.
[  400.840305][ T6864] usb 5-1: Manufacturer: syz
[  400.845001][ T6864] usb 5-1: SerialNumber: syz
[  400.947016][ T6877] usb 2-1: Using ep0 maxpacket: 16
[  400.979441][ T6877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.006033][ T6877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  401.062045][ T6877] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  401.090786][ T6877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.093658][T11046] bridge0: port 3(syz_tun) entered blocking state
[  401.111279][T11046] bridge0: port 3(syz_tun) entered disabled state
[  401.120615][ T6877] usb 2-1: Product: ⠉
[  401.123687][T11046] syz_tun: entered allmulticast mode
[  401.124836][ T6877] usb 2-1: Manufacturer: 、
[  401.124857][ T6877] usb 2-1: SerialNumber: ᰊ
[  401.410777][ T6877] usb 2-1: USB disconnect, device number 45
[  402.435024][T11095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1476'.
[  402.488053][T11100] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  402.685072][ T6864] usb 5-1: USB disconnect, device number 44
[  402.761045][T10581] udevd[10581]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.915611][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'.
[  402.996442][ T6863] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  403.180501][ T6863] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  403.210581][ T6863] usb 4-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config
[  403.245095][ T6863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  403.276420][ T6863] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12499, setting to 64
[  403.330160][ T6863] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  403.356460][ T6863] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  403.389604][ T6863] usb 4-1: Product: syz
[  403.393850][ T6863] usb 4-1: Manufacturer: syz
[  403.437242][ T6863] cdc_wdm 4-1:1.0: skipping garbage
[  403.458184][ T6863] cdc_wdm 4-1:1.0: skipping garbage
[  403.463651][ T6863] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  403.770059][T11136] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1491'.
[  404.126442][ T6866] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  404.266466][ T6866] usb 5-1: device descriptor read/64, error -71
[  404.516311][ T6866] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  404.666418][ T6866] usb 5-1: device descriptor read/64, error -71
[  404.777128][ T6866] usb usb5-port1: attempt power cycle
[  404.806313][ T6877] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  404.846340][ T6863] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  404.968332][ T6877] usb 3-1: Using ep0 maxpacket: 16
[  404.982970][ T6877] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  404.994413][ T6877] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  405.003329][ T6877] usb 3-1: Product: syz
[  405.010454][ T6877] usb 3-1: Manufacturer: syz
[  405.015227][ T6877] usb 3-1: SerialNumber: syz
[  405.016506][ T6863] usb 1-1: Using ep0 maxpacket: 32
[  405.035812][ T6877] usb 3-1: config 0 descriptor??
[  405.050489][ T6863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  405.082676][ T6863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  405.111524][ T6863] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  405.124157][ T6863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.134027][ T6866] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  405.142449][ T6863] usb 1-1: Product: syz
[  405.148487][ T6863] usb 1-1: Manufacturer: syz
[  405.153954][ T6863] usb 1-1: SerialNumber: syz
[  405.167039][ T6866] usb 5-1: device descriptor read/8, error -71
[  405.174325][ T6863] usb 1-1: config 0 descriptor??
[  405.197714][ T6863] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  405.301370][ T6877] usb 3-1: USB disconnect, device number 57
[  405.363278][T10491] udevd[10491]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory
[  405.416368][ T6866] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  405.428928][T10491] udevd[10491]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  405.458711][ T6866] usb 5-1: device descriptor read/8, error -71
[  405.567468][ T6866] usb usb5-port1: unable to enumerate USB device
[  405.712604][ T6877] usb 4-1: USB disconnect, device number 41
[  406.110015][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1502'.
[  406.180133][T11176] FAULT_INJECTION: forcing a failure.
[  406.180133][T11176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  406.219761][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.2.1503 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  406.219804][T11176] Tainted: [L]=SOFTLOCKUP
[  406.219819][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  406.219833][T11176] Call Trace:
[  406.219841][T11176]  <TASK>
[  406.219850][T11176]  dump_stack_lvl+0xe8/0x150
[  406.219889][T11176]  should_fail_ex+0x412/0x560
[  406.219914][T11176]  _copy_to_user+0x31/0xb0
[  406.219954][T11176]  simple_read_from_buffer+0xe1/0x170
[  406.219991][T11176]  proc_fail_nth_read+0x1bb/0x230
[  406.220073][T11176]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  406.220122][T11176]  ? rw_verify_area+0x2a6/0x4d0
[  406.220146][T11176]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  406.220178][T11176]  vfs_read+0x20c/0xa70
[  406.220197][T11176]  ? fdget_pos+0x246/0x320
[  406.220231][T11176]  ? __pfx___mutex_lock+0x10/0x10
[  406.220247][T11176]  ? __pfx_vfs_read+0x10/0x10
[  406.220277][T11176]  ? __fget_files+0x2a/0x420
[  406.220314][T11176]  ? __fget_files+0x3a0/0x420
[  406.220345][T11176]  ? __fget_files+0x2a/0x420
[  406.220381][T11176]  ksys_read+0x150/0x270
[  406.220399][T11176]  ? __pfx_ksys_read+0x10/0x10
[  406.220438][T11176]  do_syscall_64+0x14d/0xf80
[  406.220470][T11176]  ? trace_irq_disable+0x3b/0x150
[  406.220501][T11176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.220525][T11176]  ? clear_bhb_loop+0x40/0x90
[  406.220544][T11176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.220559][T11176] RIP: 0033:0x7fdcf835cfce
[  406.220588][T11176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  406.220608][T11176] RSP: 002b:00007fdcf91c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  406.220630][T11176] RAX: ffffffffffffffda RBX: 00007fdcf91c26c0 RCX: 00007fdcf835cfce
[  406.220646][T11176] RDX: 000000000000000f RSI: 00007fdcf91c20a0 RDI: 0000000000000003
[  406.220658][T11176] RBP: 00007fdcf91c2090 R08: 0000000000000000 R09: 0000000000000000
[  406.220675][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  406.220684][T11176] R13: 00007fdcf8616038 R14: 00007fdcf8615fa0 R15: 00007fdcf873fa48
[  406.220706][T11176]  </TASK>
[  406.576652][ T9130] usb 1-1: Failed to submit usb control message: -110
[  406.591576][ T9130] usb 1-1: unable to send the bmi data to the device: -110
[  406.602969][ T9130] usb 1-1: unable to get target info from device
[  406.613178][ T9130] usb 1-1: could not get target info (-110)
[  406.625716][ T9130] usb 1-1: could not probe fw (-110)
[  406.676106][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'.
[  407.186430][ T6863] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  407.348863][ T6863] usb 5-1: Using ep0 maxpacket: 16
[  407.362922][ T6863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  407.383146][ T6863] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  407.397920][ T6863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.426408][ T6863] usb 5-1: Product: syz
[  407.436429][ T6863] usb 5-1: Manufacturer: syz
[  407.443210][ T6863] usb 5-1: SerialNumber: syz
[  407.455436][ T6863] usb 5-1: config 0 descriptor??
[  407.484063][ T6863] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  407.494504][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'.
[  407.506407][ T6863] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  407.670086][ T6865] usb 1-1: USB disconnect, device number 49
[  407.943659][T11210] lo: entered promiscuous mode
[  407.949061][T11210] tunl0: entered promiscuous mode
[  407.955021][T11210] gre0: entered promiscuous mode
[  407.964020][T11210] gretap0: entered promiscuous mode
[  407.978820][T11210] erspan0: entered promiscuous mode
[  407.987674][T11210] ip_vti0: entered promiscuous mode
[  408.001446][T11210] ip6_vti0: entered promiscuous mode
[  408.024015][T11210] sit0: entered promiscuous mode
[  408.041471][T11210] ip6tnl0: entered promiscuous mode
[  408.074712][T11210] ip6gre0: entered promiscuous mode
[  408.100656][ T6863] em28xx 5-1:0.0: unknown em28xx chip ID (152)
[  408.116759][T11210] syz_tun: entered promiscuous mode
[  408.133598][T11210] ip6gretap0: entered promiscuous mode
[  408.153455][T11210] bridge0: entered promiscuous mode
[  408.187861][T11210] vcan0: entered promiscuous mode
[  408.217047][T11210] team0: entered promiscuous mode
[  408.261090][T11210] dummy0: entered promiscuous mode
[  408.280279][T11210] nlmon0: entered promiscuous mode
[  408.303459][T11210] caif0: entered promiscuous mode
[  408.317114][T11210] batadv0: entered promiscuous mode
[  408.324542][T11210] vxcan0: entered promiscuous mode
[  408.335843][T11210] vxcan1: entered promiscuous mode
[  408.350880][T11210] veth0: entered promiscuous mode
[  408.368068][T11210] veth1: entered promiscuous mode
[  408.385269][T11210] wg0: entered promiscuous mode
[  408.410985][T11210] wg1: entered promiscuous mode
[  408.425726][T11210] wg2: entered promiscuous mode
[  408.438976][T11210] veth0_to_bridge: entered promiscuous mode
[  408.453587][T11210] bridge_slave_0: entered promiscuous mode
[  408.476011][T11210] veth1_to_bridge: entered promiscuous mode
[  408.496048][T11210] bridge_slave_1: entered promiscuous mode
[  408.515715][T11210] veth0_to_bond: entered promiscuous mode
[  408.535164][T11210] bond_slave_0: entered promiscuous mode
[  408.548297][T11210] veth1_to_bond: entered promiscuous mode
[  408.565356][T11210] bond_slave_1: entered promiscuous mode
[  408.583691][T11210] veth0_to_team: entered promiscuous mode
[  408.600848][T11210] team_slave_0: entered promiscuous mode
[  408.622106][T11210] veth1_to_team: entered promiscuous mode
[  408.649509][T11210] team_slave_1: entered promiscuous mode
[  408.676130][T11210] veth0_to_batadv: entered promiscuous mode
[  408.696724][T11210] batadv_slave_0: entered promiscuous mode
[  408.714682][ T6863] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  408.727686][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  408.755586][T11210] veth1_to_batadv: entered promiscuous mode
[  408.766367][ T6863] em28xx 5-1:0.0: board has no eeprom
[  408.785735][T11210] batadv_slave_1: entered promiscuous mode
[  408.787723][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  408.827976][T11210] xfrm0: entered promiscuous mode
[  408.833704][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  408.851129][T11210] veth0_to_hsr: entered promiscuous mode
[  408.857391][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  408.886568][T11210] veth1_to_hsr: entered promiscuous mode
[  408.894868][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  408.938870][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  408.945554][T11210] veth1_virt_wifi: entered promiscuous mode
[  408.952540][T11210] veth0_virt_wifi: entered promiscuous mode
[  408.982488][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  408.997483][T11210] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  409.015347][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  409.036667][T11210] vlan0: entered promiscuous mode
[  409.047493][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  409.064244][T11210] vlan1: entered promiscuous mode
[  409.074629][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  409.093295][T11210] macvlan0: entered promiscuous mode
[  409.107666][T11210] macvlan1: entered promiscuous mode
[  409.142172][T11210] ipvlan0: entered promiscuous mode
[  409.175881][T11210] ipvlan1: entered promiscuous mode
[  409.218104][T11210] macvtap0: entered promiscuous mode
[  409.259854][T11210] macsec0: entered promiscuous mode
[  409.267240][T11210] geneve0: entered promiscuous mode
[  409.276474][T11210] geneve1: entered promiscuous mode
[  409.282631][T11210] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  409.323454][ T6863] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  409.337478][ T6863] em28xx 5-1:0.0: dvb set to bulk mode.
[  409.348906][T11210] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  409.365489][ T6866] em28xx 5-1:0.0: Binding DVB extension
[  409.377535][ T6863] usb 5-1: USB disconnect, device number 49
[  409.404595][T11210] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[  409.424704][ T6863] em28xx 5-1:0.0: Disconnecting em28xx
[  409.449278][T11210] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[  409.457883][T11210] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  409.479024][T11210] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  409.498291][T11210] gtp0: entered promiscuous mode
[  409.507374][T11210] bond1: entered promiscuous mode
[  409.521095][T11210] geneve2: entered promiscuous mode
[  409.547278][T11210] vxcan2: entered promiscuous mode
[  409.556774][T11210] vxcan3: entered promiscuous mode
[  409.566763][T11210] bond2: entered promiscuous mode
[  409.571990][T11210] bridge1: entered promiscuous mode
[  409.597671][T11210] macvlan2: entered promiscuous mode
[  409.606647][T11210] bond3: entered promiscuous mode
[  409.612887][T11210] pimreg: entered promiscuous mode
[  409.632777][T11210] erspan1: entered promiscuous mode
[  409.647124][T11210] vxlan0: entered promiscuous mode
[  409.664743][ T6866] em28xx 5-1:0.0: Registering input extension
[  409.672990][T11210] macvlan4: entered promiscuous mode
[  409.686795][T11210] macvlan5: entered promiscuous mode
[  409.692650][ T6863] em28xx 5-1:0.0: Closing input extension
[  409.703092][T11210] macvlan6: entered promiscuous mode
[  409.716807][T11210] macvlan7: entered promiscuous mode
[  409.724861][ T6863] em28xx 5-1:0.0: Freeing device
[  409.731193][T11210] syztnl0: entered promiscuous mode
[  409.740996][T11210] bond4: entered promiscuous mode
[  410.020259][T11226] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1520'.
[  410.273309][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'.
[  410.381005][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'.
[  410.637376][T11251] tipc: Started in network mode
[  410.655858][T11251] tipc: Node identity 0ec24c060449, cluster identity 4711
[  410.695253][T11251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.728870][T11253] syzkaller0: entered promiscuous mode
[  410.754390][T11253] syzkaller0: entered allmulticast mode
[  410.875058][T11251] tipc: Resetting bearer <eth:syzkaller0>
[  411.000452][T11248] tipc: Resetting bearer <eth:syzkaller0>
[  411.160845][T11248] tipc: Disabling bearer <eth:syzkaller0>
[  411.477232][T11260] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1527'.
[  411.810358][T11262] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  412.188078][T11268] xt_hashlimit: size too large, truncated to 1048576
[  412.238387][T11269] netlink: 'syz.3.1530': attribute type 27 has an invalid length.
[  412.259075][T11269] lo: left promiscuous mode
[  412.264587][T11269] tunl0: left promiscuous mode
[  412.273168][T11269] gre0: left promiscuous mode
[  412.278831][T11269] gretap0: left promiscuous mode
[  412.319062][T11269] erspan0: left promiscuous mode
[  412.348399][T11273] xt_bpf: check failed: parse error
[  412.355006][T11269] ip_vti0: left promiscuous mode
[  412.374836][T11269] ip6_vti0: left promiscuous mode
[  412.406548][T11269] sit0: left promiscuous mode
[  412.598162][T11269] ip6tnl0: left promiscuous mode
[  412.629506][T11269] ip6gre0: left promiscuous mode
[  412.648046][T11269] syz_tun: left promiscuous mode
[  412.715857][T11269] ip6gretap0: left promiscuous mode
[  412.761587][T11269] bridge0: left promiscuous mode
[  412.787081][T11269] vcan0: left promiscuous mode
[  412.836871][T11269] team0: left promiscuous mode
[  412.849309][T11269] dummy0: left promiscuous mode
[  412.922581][T11269] nlmon0: left promiscuous mode
[  412.940181][T11269] caif0: left promiscuous mode
[  412.945328][T11269] batadv0: left promiscuous mode
[  412.995099][T11269] vxcan0: left promiscuous mode
[  413.009757][T11269] vxcan1: left promiscuous mode
[  413.022486][T11269] veth0: left promiscuous mode
[  413.036338][ T6863] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  413.121544][T11269] veth1: left promiscuous mode
[  413.176448][ T6863] usb 1-1: device descriptor read/64, error -71
[  413.205536][T11269] wg0: left promiscuous mode
[  413.231270][T11269] wg1: left promiscuous mode
[  413.246896][T11269] wg2: left promiscuous mode
[  413.257872][T11269] veth0_to_bridge: left promiscuous mode
[  413.273511][T11269] bridge_slave_0: left promiscuous mode
[  413.286396][ T6866] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  413.294610][T11269] veth1_to_bridge: left promiscuous mode
[  413.319340][T11269] bridge_slave_1: left promiscuous mode
[  413.348182][T11297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1538'.
[  413.421790][T11298] sg_write: data in/out 294879/80 bytes for SCSI command 0x2-- guessing data in;
[  413.421790][T11298]    program syz.4.1538 not setting count and/or reply_len properly
[  413.446652][ T6863] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  413.488059][ T6866] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  413.500731][ T6866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  413.524143][ T6866] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  413.542741][ T6866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.559728][ T6866] usb 2-1: Product: syz
[  413.571312][ T6866] usb 2-1: Manufacturer: syz
[  413.581685][ T6866] usb 2-1: SerialNumber: syz
[  413.586550][ T6863] usb 1-1: device descriptor read/64, error -71
[  413.601861][ T6866] usb 2-1: config 0 descriptor??
[  413.622006][ T6866] gspca_main: sunplus-2.14.0 probing 055f:c630
[  413.630050][T11269] veth0_to_bond: left promiscuous mode
[  413.658925][T11269] bond_slave_0: left promiscuous mode
[  413.694145][T11269] veth1_to_bond: left promiscuous mode
[  413.707321][ T6863] usb usb1-port1: attempt power cycle
[  413.712665][T11269] bond_slave_1: left promiscuous mode
[  413.825636][T11300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.849649][T11300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.902659][ T6876] usb 2-1: USB disconnect, device number 46
[  414.022242][T11304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1539'.
[  414.073126][T11305] netlink: 'syz.1.1539': attribute type 10 has an invalid length.
[  414.085113][ T6863] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  414.121988][T11269] veth0_to_team: left promiscuous mode
[  414.122288][ T6863] usb 1-1: device descriptor read/8, error -71
[  414.150350][T11269] team_slave_0: left promiscuous mode
[  414.175705][T11269] veth1_to_team: left promiscuous mode
[  414.208678][T11269] team_slave_1: left promiscuous mode
[  414.230253][T11269] veth0_to_batadv: left promiscuous mode
[  414.262414][T11269] batadv_slave_0: left promiscuous mode
[  414.281464][T11269] veth1_to_batadv: left promiscuous mode
[  414.295432][T11269] batadv_slave_1: left promiscuous mode
[  414.322004][T11269] xfrm0: left promiscuous mode
[  414.349310][T11269] veth0_to_hsr: left promiscuous mode
[  414.369504][ T6863] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  414.381331][T11269] veth1_to_hsr: left promiscuous mode
[  414.428993][ T6863] usb 1-1: device descriptor read/8, error -71
[  414.437298][T11269] veth1_virt_wifi: left promiscuous mode
[  414.459444][T11269] veth0_virt_wifi: left promiscuous mode
[  414.494350][T11269] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  414.521570][T11269] vlan0: left promiscuous mode
[  414.536147][T11269] vlan1: left promiscuous mode
[  414.546691][ T6863] usb usb1-port1: unable to enumerate USB device
[  414.626710][T11269] macvlan0: left promiscuous mode
[  414.667112][T11269] macvlan1: left promiscuous mode
[  414.700589][T11269] ipvlan0: left promiscuous mode
[  414.711700][T11269] ipvlan1: left promiscuous mode
[  414.833950][T11269] macvtap0: left promiscuous mode
[  414.844231][T11269] macsec0: left promiscuous mode
[  414.870051][T11269] geneve0: left promiscuous mode
[  414.892490][T11269] geneve1: left promiscuous mode
[  414.910586][T11269] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  414.932371][T11269] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  414.948770][T11269] netdevsim netdevsim3 netdevsim2: left promiscuous mode
[  414.972050][T11269] netdevsim netdevsim3 netdevsim3: left promiscuous mode
[  414.996845][T11269] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  415.011800][T11269] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  415.027949][T11269] gtp0: left promiscuous mode
[  415.042456][T11269] vlan2: left promiscuous mode
[  415.056723][T11269] hsr0: left promiscuous mode
[  415.071876][T11269] bond1: left promiscuous mode
[  415.100511][T11269] geneve2: left promiscuous mode
[  415.112714][T11269] vxcan2: left promiscuous mode
[  415.124073][T11269] vxcan3: left promiscuous mode
[  415.135962][T11269] bond2: left promiscuous mode
[  415.158004][T11269] bridge1: left promiscuous mode
[  415.179812][T11269] macvlan2: left promiscuous mode
[  415.193707][T11269] bond3: left promiscuous mode
[  415.209446][T11269] pimreg: left promiscuous mode
[  415.222249][T11269] gretap1: left promiscuous mode
[  415.237904][T11269] erspan1: left promiscuous mode
[  415.251395][T11269] vxlan0: left promiscuous mode
[  415.268580][T11269] macvlan4: left promiscuous mode
[  415.282328][T11269] macvlan5: left promiscuous mode
[  415.295328][T11269] macvlan6: left promiscuous mode
[  415.312016][T11269] macvlan7: left promiscuous mode
[  415.337689][T11269] syztnl0: left promiscuous mode
[  415.358672][T11269] bond4: left promiscuous mode
[  415.399625][T11277] syzkaller0: entered promiscuous mode
[  415.407437][T11314] could not allocate digest TFM handle md5
[  415.420114][T11277] syzkaller0: entered allmulticast mode
[  415.488677][T11305] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  415.497637][T11305] team0: Device netdevsim0 failed to register rx_handler
[  415.522405][  T352] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.549762][  T352] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.584234][  T352] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.600963][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'.
[  415.610924][  T352] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.621952][  T352] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.642453][  T352] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.671238][  T352] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.699007][  T352] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.757761][T11325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1542'.
[  416.035238][T11335] netlink: 'syz.0.1546': attribute type 4 has an invalid length.
[  417.284905][T11349] net_ratelimit: 22 callbacks suppressed
[  417.284986][T11349] openvswitch: netlink: IP tunnel dst address not specified
[  417.995041][T11355] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1552'.
[  418.342647][T11363] vlan0: entered promiscuous mode
[  418.795679][T11376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  418.811945][T11377] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  418.866396][ T5911] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  419.033535][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[  419.071196][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 117, changing to 10
[  419.127239][ T6881] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  419.135498][ T5911] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  419.160284][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.189105][ T5911] usb 1-1: Product: syz
[  419.209391][ T5911] usb 1-1: Manufacturer: syz
[  419.214064][ T5911] usb 1-1: SerialNumber: syz
[  419.262590][ T5911] usb 1-1: config 0 descriptor??
[  419.316637][ T6881] usb 3-1: Using ep0 maxpacket: 8
[  419.336928][ T6881] usb 3-1: unable to get BOS descriptor or descriptor too short
[  419.354828][ T6881] usb 3-1: config 4 has too many interfaces: 231, using maximum allowed: 32
[  419.372574][ T6881] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 231
[  419.396450][ T6881] usb 3-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  419.446764][ T6881] usb 3-1: config 4 interface 0 has no altsetting 0
[  419.469896][ T6881] usb 3-1: string descriptor 0 read error: -22
[  419.483156][ T6881] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  419.507801][ T6881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.591382][ T6881] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  419.682554][ T6881] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  419.714461][ T6881] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  419.743334][ T6881] usb 3-1: media controller created
[  419.801768][ T6881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  419.878880][ T6881] zl10353_read_register: readreg error (reg=127, ret==0)
[  419.981543][ T6881] usb 3-1: USB disconnect, device number 58
[  420.797777][T11402] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1564'.
[  421.013754][T11407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1565'.
[  421.120739][T11408] ip6t_srh: unknown srh match flags  4000
[  421.146157][T11409] libceph: resolve '0..' (ret=-3): failed
[  421.535367][ T5911] powermate: unknown product id 0240
[  421.540879][ T6881] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  421.585632][ T5911] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30
[  421.646031][    C1] powermate: config urb returned -71
[  421.651791][    C1] powermate: config urb returned -71
[  421.657297][    C1] powermate: config urb returned -71
[  421.662666][    C1] powermate: config urb returned -71
[  421.716756][ T6881] usb 3-1: Using ep0 maxpacket: 32
[  421.722549][ T5911] usb 1-1: USB disconnect, device number 54
[  421.728547][    C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  421.761029][ T6881] usb 3-1: config 0 has no interfaces?
[  421.776760][ T6881] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  421.818237][T11414] xt_bpf: check failed: parse error
[  421.837754][ T6881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.917824][ T6881] usb 3-1: config 0 descriptor??
[  422.131538][T11412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.146797][T11412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.185555][T11412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.208129][T11412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.209940][ T6867] usb 3-1: USB disconnect, device number 59
[  422.347771][ T5896] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  422.430973][T11423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.459040][T11423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.469124][ T2164] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  422.528651][ T5896] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  422.537914][ T5896] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  422.548032][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.561259][ T5896] usb 5-1: config 0 descriptor??
[  422.647302][ T2164] usb 2-1: Using ep0 maxpacket: 16
[  422.654541][ T2164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.665748][ T2164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.675649][ T2164] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  422.690818][ T2164] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  422.700624][ T2164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.711840][ T2164] usb 2-1: config 0 descriptor??
[  422.746363][ T6867] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  422.796934][ T5911] usb 5-1: USB disconnect, device number 50
[  422.927313][ T6867] usb 3-1: Using ep0 maxpacket: 32
[  422.938563][ T6867] usb 3-1: unable to get BOS descriptor or descriptor too short
[  422.948060][ T6867] usb 3-1: config index 0 descriptor too short (expected 804, got 36)
[  422.957123][ T6867] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  422.980135][ T6867] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  422.992109][ T6867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2313, setting to 64
[  423.003777][ T6867] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00
[  423.013534][ T6867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.030003][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'.
[  423.040236][ T6867] usb 3-1: config 0 descriptor??
[  423.040342][T11431] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1569'.
[  423.057360][T11430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1573'.
[  423.097210][ T6867] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  423.145592][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'.
[  423.182151][T11436] 8021q: adding VLAN 0 to HW filter on device bond3
[  423.261361][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.274943][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.276186][ T6881] usb 3-1: USB disconnect, device number 60
[  423.292580][  T352] usb 3-1: Failed to submit usb control message: -71
[  423.302792][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.311483][  T352] usb 3-1: unable to send the bmi data to the device: -71
[  423.319645][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.328962][  T352] usb 3-1: unable to get target info from device
[  423.335473][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.343025][  T352] usb 3-1: could not get target info (-71)
[  423.349978][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.357209][  T352] usb 3-1: could not probe fw (-71)
[  423.362871][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.374026][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.383685][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.396116][T11441] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1576'.
[  423.405590][ T2164] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  423.439716][ T2164] a4tech 0003:09DA:000A.0007: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.1-1/input0
[  423.529734][T11444] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  423.750052][T11457] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1582'.
[  423.761024][T11457] netlink: Conntrack attr type has unexpected length (type=4, length=0, expected=32)
[  424.137381][ T2164] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  424.296359][ T2164] usb 3-1: Using ep0 maxpacket: 16
[  424.305472][ T2164] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.321350][ T2164] usb 3-1: config 0 interface 0 has no altsetting 0
[  424.339801][ T2164] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  424.368812][ T2164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.412267][ T2164] usb 3-1: config 0 descriptor??
[  424.862712][ T2164] nzxt-smart2 0003:1E71:2009.0008: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  425.262419][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.292516][ T2164] usb 2-1: USB disconnect, device number 47
[  425.311476][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.341717][ T6881] usb 3-1: USB disconnect, device number 61
[  425.662644][T11478] netlink: 'syz.1.1587': attribute type 21 has an invalid length.
[  425.688495][T11478] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1587'.
[  425.717730][T11478] netlink: 'syz.1.1587': attribute type 5 has an invalid length.
[  425.736631][T11478] netlink: 'syz.1.1587': attribute type 6 has an invalid length.
[  425.765375][T11478] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1587'.
[  425.970575][T11486] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  425.976640][ T2164] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  425.992479][T11486] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  426.023774][T11486] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  426.034841][T11486] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  426.041677][T11492] bond2: Unable to set up delay as MII monitoring is disabled
[  426.052531][T11496] netlink: 'syz.4.1594': attribute type 4 has an invalid length.
[  426.063725][T11492] bond2 (unregistering): Released all slaves
[  426.073406][T11486] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  426.086412][T11486] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  426.108236][T11486] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  426.109413][   T29] audit: type=1326 audit(1772818326.528:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.115566][T11486] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  426.143228][ T6867] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  426.151492][T11498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1593'.
[  426.171585][T11486] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  426.180832][ T2164] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  426.192247][T11486] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  426.196472][   T29] audit: type=1326 audit(1772818326.558:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.199558][ T2164] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  426.230891][ T2164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.255998][ T2164] usb 1-1: config 0 descriptor??
[  426.285243][   T29] audit: type=1326 audit(1772818326.558:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.306716][ T6867] usb 4-1: Using ep0 maxpacket: 32
[  426.320601][ T6867] usb 4-1: config 0 has no interfaces?
[  426.326711][ T6867] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  426.340714][   T29] audit: type=1326 audit(1772818326.558:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.364090][   T29] audit: type=1326 audit(1772818326.558:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.367709][ T6867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.436357][   T29] audit: type=1326 audit(1772818326.558:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.460162][ T6867] usb 4-1: config 0 descriptor??
[  426.506838][   T29] audit: type=1326 audit(1772818326.558:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.536444][ T6867] usb 1-1: USB disconnect, device number 55
[  426.556697][   T29] audit: type=1326 audit(1772818326.558:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.606671][   T29] audit: type=1326 audit(1772818326.558:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.659325][   T29] audit: type=1326 audit(1772818326.578:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  426.716402][ T5896] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  426.756677][ T6881] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  426.824898][T11514] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  426.866811][ T5896] usb 3-1: Using ep0 maxpacket: 16
[  426.878469][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.901996][ T5896] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  426.920579][ T6881] usb 2-1: Using ep0 maxpacket: 16
[  426.928765][ T6881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  426.941220][ T5896] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  426.952630][ T6881] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  426.964926][ T6881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.973541][ T5911] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  426.982298][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.990724][ T6881] usb 2-1: Product: syz
[  427.001608][ T6881] usb 2-1: Manufacturer: syz
[  427.006514][ T5896] usb 3-1: Product: syz
[  427.006536][ T5896] usb 3-1: Manufacturer: syz
[  427.006554][ T5896] usb 3-1: SerialNumber: syz
[  427.021979][ T6881] usb 2-1: SerialNumber: syz
[  427.032727][ T5896] usb 3-1: config 0 descriptor??
[  427.044721][ T6881] usb 2-1: config 0 descriptor??
[  427.056197][ T6881] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  427.067258][ T6881] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  427.126696][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  427.138407][ T5911] usb 5-1: config 6 has an invalid interface number: 167 but max is 0
[  427.147257][ T5911] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[  427.156192][ T5911] usb 5-1: config 6 has no interface number 0
[  427.166542][ T5911] usb 5-1: config 6 interface 167 altsetting 254 endpoint 0x4 has an invalid bInterval 243, changing to 7
[  427.182055][ T5911] usb 5-1: config 6 interface 167 altsetting 254 endpoint 0xF has invalid maxpacket 959, setting to 64
[  427.202985][ T5911] usb 5-1: config 6 interface 167 altsetting 254 has a duplicate endpoint with address 0xF, skipping
[  427.216868][ T5911] usb 5-1: config 6 interface 167 altsetting 254 has a duplicate endpoint with address 0xF, skipping
[  427.232717][ T5911] usb 5-1: config 6 interface 167 altsetting 254 has a duplicate endpoint with address 0x7, skipping
[  427.245916][ T5911] usb 5-1: config 6 interface 167 has no altsetting 0
[  427.275555][ T5911] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0302, bcdDevice= d.e5
[  427.289028][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.302614][ T5911] usb 5-1: Product: ᮲逼䣜藮쀡⌌鋎틊籺똈ꀏ⌫ﻊ礏䂎㫰꼦䗏켯磒ʧ결꫱檔毶묤䚸院뜦ᴝ঻礘㨋쌧餉鎨ɬ龌
[  427.320811][ T5911] usb 5-1: Manufacturer: Х
[  427.325687][ T5911] usb 5-1: SerialNumber: syz
[  427.406158][T11512] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  427.591701][ T6867] usb 3-1: USB disconnect, device number 62
[  427.654385][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 0ac8:0302
[  427.662148][ T6881] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  427.671793][ T5911] gspca_zc3xx: reg_w_i err -71
[  428.016362][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  428.075143][ T6881] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  428.083519][ T6881] em28xx 2-1:0.0: board has no eeprom
[  428.089196][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[  428.089251][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  428.166938][ T5842] Bluetooth: hci2: command 0x0406 tx timeout
[  428.246424][ T5842] Bluetooth: hci4: command 0x0406 tx timeout
[  428.366279][ T6881] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  428.384393][ T6881] em28xx 2-1:0.0: dvb set to bulk mode.
[  428.391716][ T6879] em28xx 2-1:0.0: Binding DVB extension
[  428.426409][ T5911] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  428.494416][ T5911] gspca_zc3xx 5-1:6.167: probe with driver gspca_zc3xx failed with error -71
[  428.512143][ T6881] usb 2-1: USB disconnect, device number 48
[  428.520712][ T6879] em28xx 2-1:0.0: Registering input extension
[  428.542851][ T6881] em28xx 2-1:0.0: Disconnecting em28xx
[  428.562785][ T6881] em28xx 2-1:0.0: Closing input extension
[  428.595217][ T5911] usb 5-1: USB disconnect, device number 51
[  428.611678][ T6881] em28xx 2-1:0.0: Freeing device
[  428.696587][ T5896] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  428.856676][ T5896] usb 3-1: Using ep0 maxpacket: 16
[  428.874270][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.893889][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.907049][ T5896] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  428.916973][ T5896] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  428.925111][ T5896] usb 3-1: Manufacturer: syz
[  428.937161][ T5896] usb 3-1: config 0 descriptor??
[  429.226487][ T5911] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  429.367807][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.396357][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  429.398730][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.413324][ T5911] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  429.435519][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.443773][ T5911] usb 2-1: Product: syz
[  429.451697][ T5911] usb 2-1: Manufacturer: syz
[  429.456512][ T5911] usb 2-1: SerialNumber: syz
[  429.467111][ T5911] usb 2-1: config 0 descriptor??
[  429.481809][ T5911] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  429.541222][T11546] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1607'.
[  429.553190][T11547] netlink: 'syz.4.1607': attribute type 1 has an invalid length.
[  429.566116][ T5896] usbhid 3-1:0.0: can't add hid device: -71
[  429.573596][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  429.589896][ T5896] usb 3-1: USB disconnect, device number 63
[  429.645578][T11547] 8021q: adding VLAN 0 to HW filter on device bond2
[  429.681770][ T5911] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32
[  429.714653][ T2164] usb 4-1: USB disconnect, device number 42
[  429.757925][ T5911] usb 2-1: USB disconnect, device number 49
[  430.086312][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  430.174429][ T5842] Bluetooth: hci3: command 0x0406 tx timeout
[  430.176764][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[  430.248646][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  430.327252][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  430.456332][ T2164] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  430.603500][T11575] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1615'.
[  430.654756][ T2164] usb 5-1: config 160 has an invalid interface number: 200 but max is 0
[  430.670926][ T2164] usb 5-1: config 160 has no interface number 0
[  430.687575][ T2164] usb 5-1: config 160 interface 200 has no altsetting 0
[  430.710011][ T2164] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  430.742063][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.781135][ T2164] usb 5-1: Product: syz
[  430.836617][ T2164] usb 5-1: Manufacturer: syz
[  430.853240][ T2164] usb 5-1: SerialNumber: syz
[  430.996058][T11588] FAULT_INJECTION: forcing a failure.
[  430.996058][T11588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.011430][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.2.1620 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  431.011465][T11588] Tainted: [L]=SOFTLOCKUP
[  431.011473][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  431.011487][T11588] Call Trace:
[  431.011495][T11588]  <TASK>
[  431.011505][T11588]  dump_stack_lvl+0xe8/0x150
[  431.011543][T11588]  should_fail_ex+0x412/0x560
[  431.011577][T11588]  _copy_from_iter+0x1d3/0x1670
[  431.011613][T11588]  ? rcu_is_watching+0x15/0xb0
[  431.011649][T11588]  ? __pfx__copy_from_iter+0x10/0x10
[  431.011688][T11588]  ? netlink_sendmsg+0x650/0xb40
[  431.011717][T11588]  ? skb_put+0x11b/0x210
[  431.011752][T11588]  netlink_sendmsg+0x6c0/0xb40
[  431.011790][T11588]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.011823][T11588]  ? aa_sock_msg_perm+0xf1/0x1b0
[  431.011856][T11588]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  431.011884][T11588]  ____sys_sendmsg+0x972/0x9f0
[  431.011928][T11588]  ? __pfx_____sys_sendmsg+0x10/0x10
[  431.011972][T11588]  ? import_iovec+0x73/0xa0
[  431.012008][T11588]  ___sys_sendmsg+0x2a5/0x360
[  431.012035][T11588]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.012091][T11588]  ? __fget_files+0x2a/0x420
[  431.012124][T11588]  ? __fget_files+0x3a0/0x420
[  431.012165][T11588]  __x64_sys_sendmsg+0x1bd/0x2a0
[  431.012189][T11588]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  431.012221][T11588]  ? __pfx_ksys_write+0x10/0x10
[  431.012265][T11588]  do_syscall_64+0x14d/0xf80
[  431.012298][T11588]  ? trace_irq_disable+0x3b/0x150
[  431.012330][T11588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.012353][T11588]  ? clear_bhb_loop+0x40/0x90
[  431.012381][T11588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.012404][T11588] RIP: 0033:0x7fdcf839c799
[  431.012425][T11588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.012444][T11588] RSP: 002b:00007fdcf91c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.012467][T11588] RAX: ffffffffffffffda RBX: 00007fdcf8615fa0 RCX: 00007fdcf839c799
[  431.012484][T11588] RDX: 0000000000004800 RSI: 0000200000000140 RDI: 0000000000000003
[  431.012498][T11588] RBP: 00007fdcf91c2090 R08: 0000000000000000 R09: 0000000000000000
[  431.012512][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.012525][T11588] R13: 00007fdcf8616038 R14: 00007fdcf8615fa0 R15: 00007fdcf873fa48
[  431.012558][T11588]  </TASK>
[  431.626461][ T5911] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  431.778980][ T5911] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  431.820827][ T5911] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  431.878072][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  431.909579][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.011835][ T5911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  432.060947][ T5911] usb 1-1: invalid MIDI out EP 0
[  432.208171][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'.
[  432.245443][T11584] 8021q: VLANs not supported on vxcan0
[  432.380213][ T5911] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  432.603807][ T6867] usb 1-1: USB disconnect, device number 56
[  433.008410][T11604] batadv_slave_0: entered promiscuous mode
[  433.345887][T11612] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1627'.
[  433.442946][T11615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.519058][T11644] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1637'.
[  435.525102][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'.
[  435.547548][T11678] vlan3: entered promiscuous mode
[  435.547585][T11678] dummy0: entered promiscuous mode
[  435.656349][ T5910] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  435.806651][ T5910] usb 2-1: device descriptor read/64, error -71
[  435.945104][ T2164] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  435.962696][ T2164] usb 5-1: MIDIStreaming interface descriptor not found
[  436.071593][ T5910] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  436.236360][ T5910] usb 2-1: device descriptor read/64, error -71
[  436.356626][ T5910] usb usb2-port1: attempt power cycle
[  436.699940][ T5910] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  436.762056][ T5910] usb 2-1: device descriptor read/8, error -71
[  436.899598][ T6867] usb 5-1: USB disconnect, device number 52
[  436.968176][ T2164] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  437.016394][ T5910] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  437.024151][ T5896] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  437.048295][ T5910] usb 2-1: device descriptor read/8, error -71
[  437.100506][T11699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1656'.
[  437.109801][ T2164] usb 1-1: device descriptor read/64, error -71
[  437.157341][ T5910] usb usb2-port1: unable to enumerate USB device
[  437.185293][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  437.206839][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  437.215139][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'.
[  437.237056][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  437.246624][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.258029][ T5896] usb 4-1: config 0 descriptor??
[  437.267260][T11702] team0: Port device dummy0 removed
[  437.274714][ T5896] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  437.356539][ T2164] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  437.486360][ T2164] usb 1-1: device descriptor read/64, error -71
[  437.516363][ T5896] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  437.596907][ T2164] usb usb1-port1: attempt power cycle
[  437.678747][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short
[  437.687397][ T5896] usb 3-1: not running at top speed; connect to a high speed hub
[  437.696638][ T5896] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  437.707595][ T5896] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  437.720385][ T5896] usb 3-1: New USB device found, idVendor=0c72, idProduct=0000, bcdDevice= e.3d
[  437.729754][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.737844][ T5896] usb 3-1: Product: syz
[  437.742316][ T5896] usb 3-1: Manufacturer: syz
[  437.747047][ T5896] usb 3-1: SerialNumber: syz
[  437.936371][ T2164] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  437.957460][ T2164] usb 1-1: device descriptor read/8, error -71
[  438.180299][T11713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.189471][T11713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.202211][ T2164] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  438.226662][T11715] netlink: 89 bytes leftover after parsing attributes in process `syz.4.1660'.
[  438.257167][ T2164] usb 1-1: device descriptor read/8, error -71
[  438.386924][ T2164] usb usb1-port1: unable to enumerate USB device
[  438.995102][T11727] netlink: 'syz.4.1663': attribute type 12 has an invalid length.
[  439.596759][ T5911] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  439.772735][ T5911] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  439.784361][T11734] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1666'.
[  439.790398][ T5911] usb 2-1: config 0 has no interface number 0
[  439.826413][ T5911] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  439.838946][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.852372][ T6880] usb 4-1: USB disconnect, device number 43
[  439.868141][ T5911] usb 2-1: Product: syz
[  439.875804][ T5911] usb 2-1: Manufacturer: syz
[  439.885359][ T5911] usb 2-1: SerialNumber: syz
[  439.917454][ T5911] usb 2-1: config 0 descriptor??
[  439.950844][ T5911] snd-usb-us122l 2-1:0.1: usb_set_interface error
[  439.978709][ T5911] snd-usb-us122l 2-1:0.1: probe with driver snd-usb-us122l failed with error -22
[  440.156851][ T2164] usb 2-1: USB disconnect, device number 54
[  440.176943][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.183305][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.304936][ T5896] usb 3-1: USB disconnect, device number 64
[  441.712558][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'.
[  441.826347][ T6880] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  441.891783][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1678'.
[  441.997810][ T6880] usb 3-1: device descriptor read/64, error -71
[  442.276582][ T6880] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  442.427304][ T6880] usb 3-1: device descriptor read/64, error -71
[  442.578075][ T6880] usb usb3-port1: attempt power cycle
[  442.936570][ T6880] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  442.968936][ T6880] usb 3-1: device descriptor read/8, error -71
[  443.146719][ T6881] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  443.220413][ T6880] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  443.266999][ T6880] usb 3-1: device descriptor read/8, error -71
[  443.287348][ T6881] usb 2-1: device descriptor read/64, error -71
[  443.387112][ T6880] usb usb3-port1: unable to enumerate USB device
[  443.526460][ T6881] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  443.666387][ T6879] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  443.675202][ T6881] usb 2-1: device descriptor read/64, error -71
[  443.691079][T11804] xt_hashlimit: size too large, truncated to 1048576
[  443.734733][T11806] netlink: 'syz.3.1687': attribute type 27 has an invalid length.
[  443.796558][ T6881] usb usb2-port1: attempt power cycle
[  443.826322][ T6879] usb 1-1: Using ep0 maxpacket: 16
[  443.838740][ T6879] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  443.848102][ T6879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  443.858672][ T6879] usb 1-1: config 0 has no interface number 0
[  443.864865][ T6879] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  443.889776][ T6879] usb 1-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  443.909630][ T6879] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  443.925150][ T6879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.935137][ T6879] usb 1-1: Product: syz
[  443.940249][ T6879] usb 1-1: Manufacturer: syz
[  443.944998][ T6879] usb 1-1: SerialNumber: syz
[  443.960790][ T6879] usb 1-1: config 0 descriptor??
[  443.971082][ T6879] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  443.981202][ T6879] nokiaca42v2 ttyUSB0: required endpoint is missing
[  444.159633][ T6881] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  444.186973][ T6881] usb 2-1: device descriptor read/8, error -71
[  444.426377][ T6881] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  444.447122][ T6881] usb 2-1: device descriptor read/8, error -71
[  444.544669][T11816] FAULT_INJECTION: forcing a failure.
[  444.544669][T11816] name failslab, interval 1, probability 0, space 0, times 0
[  444.557479][T11816] CPU: 0 UID: 0 PID: 11816 Comm: syz.3.1690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  444.557512][T11816] Tainted: [L]=SOFTLOCKUP
[  444.557518][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  444.557527][T11816] Call Trace:
[  444.557535][T11816]  <TASK>
[  444.557542][T11816]  dump_stack_lvl+0xe8/0x150
[  444.557569][T11816]  should_fail_ex+0x412/0x560
[  444.557593][T11816]  should_failslab+0xa8/0x100
[  444.557615][T11816]  __kmalloc_cache_noprof+0x88/0x660
[  444.557632][T11816]  ? sctp_v6_cmp_addr+0x15/0xd0
[  444.557654][T11816]  ? sctp_add_bind_addr+0x8c/0x370
[  444.557681][T11816]  sctp_add_bind_addr+0x8c/0x370
[  444.557704][T11816]  sctp_copy_local_addr_list+0x314/0x4f0
[  444.557726][T11816]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  444.557746][T11816]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  444.557764][T11816]  ? sctp_association_new+0x1894/0x25e0
[  444.557790][T11816]  ? sctp_v4_is_any+0x35/0x60
[  444.557809][T11816]  ? sctp_copy_one_addr+0x93/0x360
[  444.557830][T11816]  sctp_bind_addr_copy+0xb3/0x3c0
[  444.557850][T11816]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  444.557869][T11816]  sctp_connect_new_asoc+0x2ff/0x6b0
[  444.557895][T11816]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  444.557919][T11816]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  444.557943][T11816]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  444.557964][T11816]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  444.557988][T11816]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  444.558008][T11816]  ? security_sctp_bind_connect+0x7e/0x2c0
[  444.558027][T11816]  sctp_sendmsg+0x1528/0x2c10
[  444.558080][T11816]  ? __pfx_sctp_sendmsg+0x10/0x10
[  444.558116][T11816]  ? aa_sk_perm+0x6d5/0x900
[  444.558151][T11816]  ? __pfx_aa_sk_perm+0x10/0x10
[  444.558185][T11816]  ? sock_rps_record_flow+0x19/0x400
[  444.558203][T11816]  ? inet_sendmsg+0x2f4/0x370
[  444.558216][T11816]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  444.558236][T11816]  ____sys_sendmsg+0x80a/0x9f0
[  444.558269][T11816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  444.558299][T11816]  ? import_iovec+0x73/0xa0
[  444.558326][T11816]  ___sys_sendmsg+0x2a5/0x360
[  444.558345][T11816]  ? __pfx____sys_sendmsg+0x10/0x10
[  444.558385][T11816]  ? __fget_files+0x2a/0x420
[  444.558408][T11816]  ? __fget_files+0x3a0/0x420
[  444.558438][T11816]  __x64_sys_sendmsg+0x1bd/0x2a0
[  444.558455][T11816]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  444.558477][T11816]  ? __pfx_ksys_write+0x10/0x10
[  444.558502][T11816]  do_syscall_64+0x14d/0xf80
[  444.558549][T11816]  ? trace_irq_disable+0x3b/0x150
[  444.558581][T11816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.558607][T11816]  ? clear_bhb_loop+0x40/0x90
[  444.558633][T11816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.558655][T11816] RIP: 0033:0x7f3fef39c799
[  444.558685][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.558700][T11816] RSP: 002b:00007f3ff0343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  444.558716][T11816] RAX: ffffffffffffffda RBX: 00007f3fef615fa0 RCX: 00007f3fef39c799
[  444.558728][T11816] RDX: 0000000000000815 RSI: 00002000000000c0 RDI: 0000000000000003
[  444.558738][T11816] RBP: 00007f3ff0343090 R08: 0000000000000000 R09: 0000000000000000
[  444.558747][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  444.558756][T11816] R13: 00007f3fef616038 R14: 00007f3fef615fa0 R15: 00007f3fef73fa48
[  444.558780][T11816]  </TASK>
[  444.576056][ T6881] usb usb2-port1: unable to enumerate USB device
[  444.905960][T11818] netlink: 'syz.3.1691': attribute type 10 has an invalid length.
[  444.960022][T11818] team0: Port device dummy0 added
[  444.968537][T11818] netlink: 'syz.3.1691': attribute type 10 has an invalid length.
[  446.184429][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1698'.
[  446.550879][ T6881] usb 1-1: USB disconnect, device number 61
[  446.558718][ T6881] cypress_m8 1-1:0.35: device disconnected
[  446.976358][ T6867] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  447.067333][T11875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1709'.
[  447.156810][ T6867] usb 5-1: device descriptor read/64, error -71
[  447.263646][T11882] syzkaller0: entered promiscuous mode
[  447.270173][T11882] syzkaller0: entered allmulticast mode
[  447.420823][ T6867] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  447.446749][ T5896] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  447.566314][ T6867] usb 5-1: device descriptor read/64, error -71
[  447.606376][ T5896] usb 2-1: Using ep0 maxpacket: 8
[  447.613959][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short
[  447.624805][ T5896] usb 2-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config
[  447.635745][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  447.646326][ T2164] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  447.655585][ T5896] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  447.664818][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.673017][ T5896] usb 2-1: Product: syz
[  447.677720][ T5896] usb 2-1: Manufacturer: syz
[  447.682418][ T6867] usb usb5-port1: attempt power cycle
[  447.688053][ T5896] usb 2-1: SerialNumber: syz
[  447.796383][ T2164] usb 4-1: Using ep0 maxpacket: 32
[  447.803747][ T2164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.815078][ T2164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.824950][ T2164] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  447.834399][ T2164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.851781][ T2164] usb 4-1: config 0 descriptor??
[  447.886313][ T2164] hub 4-1:0.0: USB hub found
[  447.919991][T11879] fuse: Bad value for 'fd'
[  447.964282][ T5896] usb 2-1: failed waiting for Axe-Fx III to boot: -71
[  447.980786][ T5896] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  448.008782][ T5896] usb 2-1: USB disconnect, device number 59
[  448.026771][ T6867] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  448.070039][ T6867] usb 5-1: device descriptor read/8, error -71
[  448.088515][T11884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.100593][T11884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.142970][ T2164] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  448.177977][ T2164] usbhid 4-1:0.0: can't add hid device: -71
[  448.184056][ T2164] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  448.217616][ T2164] usb 4-1: USB disconnect, device number 44
[  448.320898][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'.
[  448.346341][ T6867] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  448.357628][T11899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1717'.
[  448.387199][ T6867] usb 5-1: device descriptor read/8, error -71
[  448.506525][ T6867] usb usb5-port1: unable to enumerate USB device
[  448.569726][T11909] syzkaller0: entered promiscuous mode
[  449.477830][T11928] netlink: 'syz.2.1728': attribute type 1 has an invalid length.
[  449.949825][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'.
[  449.992839][T11939] vlan4: entered promiscuous mode
[  449.998542][T11939] syz_tun: entered promiscuous mode
[  450.033095][T11941] netlink: 'syz.2.1733': attribute type 9 has an invalid length.
[  450.061906][T11941] FAULT_INJECTION: forcing a failure.
[  450.061906][T11941] name failslab, interval 1, probability 0, space 0, times 0
[  450.095354][T11941] CPU: 1 UID: 0 PID: 11941 Comm: syz.2.1733 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  450.095391][T11941] Tainted: [L]=SOFTLOCKUP
[  450.095399][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  450.095413][T11941] Call Trace:
[  450.095422][T11941]  <TASK>
[  450.095431][T11941]  dump_stack_lvl+0xe8/0x150
[  450.095467][T11941]  should_fail_ex+0x412/0x560
[  450.095500][T11941]  should_failslab+0xa8/0x100
[  450.095529][T11941]  __kvmalloc_node_noprof+0x178/0x8a0
[  450.095555][T11941]  ? alloc_netdev_mqs+0xc89/0x11b0
[  450.095676][T11941]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  450.095704][T11941]  alloc_netdev_mqs+0xc89/0x11b0
[  450.095733][T11941]  rtnl_create_link+0x31f/0xd70
[  450.095788][T11941]  rtnl_newlink_create+0x277/0xb70
[  450.095823][T11941]  ? __mutex_lock+0x5ac/0x1300
[  450.095849][T11941]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  450.095881][T11941]  ? __pfx___mutex_lock+0x10/0x10
[  450.095911][T11941]  ? ns_capable+0x89/0xe0
[  450.095941][T11941]  rtnl_newlink+0x1666/0x1be0
[  450.095982][T11941]  ? __pfx_rtnl_newlink+0x10/0x10
[  450.096017][T11941]  ? __lock_acquire+0x6b5/0x2cf0
[  450.096049][T11941]  ? __lock_acquire+0x6b5/0x2cf0
[  450.096076][T11941]  ? __lock_acquire+0x6b5/0x2cf0
[  450.096111][T11941]  ? unwind_next_frame+0xa5/0x23c0
[  450.096161][T11941]  ? __lock_acquire+0x6b5/0x2cf0
[  450.096193][T11941]  ? is_bpf_text_address+0x26/0x2b0
[  450.096217][T11941]  ? kernel_text_address+0xa5/0xe0
[  450.096267][T11941]  ? __pfx_rtnl_newlink+0x10/0x10
[  450.096293][T11941]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  450.096325][T11941]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  450.096352][T11941]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  450.096382][T11941]  ? __lock_acquire+0x6b5/0x2cf0
[  450.096417][T11941]  netlink_rcv_skb+0x232/0x4b0
[  450.096445][T11941]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  450.096474][T11941]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  450.096509][T11941]  ? netlink_deliver_tap+0x2e/0x1b0
[  450.096543][T11941]  netlink_unicast+0x80f/0x9b0
[  450.096575][T11941]  ? __pfx_netlink_unicast+0x10/0x10
[  450.096599][T11941]  ? netlink_sendmsg+0x650/0xb40
[  450.096624][T11941]  ? skb_put+0x11b/0x210
[  450.096670][T11941]  netlink_sendmsg+0x813/0xb40
[  450.096708][T11941]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.096739][T11941]  ? aa_sock_msg_perm+0xf1/0x1b0
[  450.096768][T11941]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  450.096793][T11941]  ____sys_sendmsg+0x972/0x9f0
[  450.096834][T11941]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.096873][T11941]  ? import_iovec+0x73/0xa0
[  450.096907][T11941]  ___sys_sendmsg+0x2a5/0x360
[  450.096930][T11941]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.096983][T11941]  ? __fget_files+0x2a/0x420
[  450.097011][T11941]  ? __fget_files+0x3a0/0x420
[  450.097049][T11941]  __x64_sys_sendmsg+0x1bd/0x2a0
[  450.097070][T11941]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  450.097098][T11941]  ? __pfx_ksys_write+0x10/0x10
[  450.097131][T11941]  do_syscall_64+0x14d/0xf80
[  450.097163][T11941]  ? trace_irq_disable+0x3b/0x150
[  450.097193][T11941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.097215][T11941]  ? clear_bhb_loop+0x40/0x90
[  450.097241][T11941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.097263][T11941] RIP: 0033:0x7fdcf839c799
[  450.097283][T11941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.097303][T11941] RSP: 002b:00007fdcf91c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.097325][T11941] RAX: ffffffffffffffda RBX: 00007fdcf8615fa0 RCX: 00007fdcf839c799
[  450.097341][T11941] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  450.097355][T11941] RBP: 00007fdcf91c2090 R08: 0000000000000000 R09: 0000000000000000
[  450.097368][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  450.097381][T11941] R13: 00007fdcf8616038 R14: 00007fdcf8615fa0 R15: 00007fdcf873fa48
[  450.097415][T11941]  </TASK>
[  450.592169][T11945] xt_l2tp: v2 sid > 0xffff: 4294967293
[  450.876103][T11952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.890580][T11952] syzkaller0: entered promiscuous mode
[  450.896180][T11952] syzkaller0: entered allmulticast mode
[  450.954802][T11952] syzkaller1: entered promiscuous mode
[  450.964007][T11952] syzkaller1: entered allmulticast mode
[  451.332718][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  451.368756][T11951] tipc: Resetting bearer <eth:syzkaller0>
[  452.237936][T11951] tipc: Disabling bearer <eth:syzkaller0>
[  452.812538][ T6867] tipc: Node number set to 1561658072
[  452.996436][ T6867] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  453.139513][ T5896] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  453.147297][ T6867] usb 3-1: device descriptor read/64, error -71
[  453.246879][ T2164] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  453.296419][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  453.303444][ T5896] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  453.312073][ T5835] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  453.319895][ T5896] usb 1-1: config 0 has no interface number 0
[  453.330632][ T5896] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  453.339747][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.347983][ T5896] usb 1-1: Product: syz
[  453.352276][ T5896] usb 1-1: Manufacturer: syz
[  453.356976][ T5896] usb 1-1: SerialNumber: syz
[  453.367941][ T5896] usb 1-1: config 0 descriptor??
[  453.382740][ T5896] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  453.391816][ T6867] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  453.416328][ T2164] usb 5-1: Using ep0 maxpacket: 8
[  453.424395][ T2164] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.449898][ T2164] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  453.461755][ T5835] usb 4-1: device descriptor read/64, error -71
[  453.481980][ T2164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.494678][ T2164] usb 5-1: config 0 descriptor??
[  453.529262][ T2164] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  453.541238][ T6867] usb 3-1: device descriptor read/64, error -71
[  453.591656][ T5896] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  453.614010][ T5896] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  453.667332][ T6867] usb usb3-port1: attempt power cycle
[  453.736371][ T5835] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  453.876371][ T5835] usb 4-1: device descriptor read/64, error -71
[  453.986973][ T5835] usb usb4-port1: attempt power cycle
[  454.066472][ T6867] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  454.096548][T11992] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  454.107478][ T6867] usb 3-1: device descriptor read/8, error -71
[  454.336466][ T5835] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  454.369049][ T5835] usb 4-1: device descriptor read/8, error -71
[  454.376461][ T6867] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  454.407380][ T6867] usb 3-1: device descriptor read/8, error -71
[  454.527109][ T6867] usb usb3-port1: unable to enumerate USB device
[  454.626389][ T5835] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  454.647215][ T5835] usb 4-1: device descriptor read/8, error -71
[  454.746705][ T6880] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  454.766703][ T5835] usb usb4-port1: unable to enumerate USB device
[  454.876288][ T6880] usb 2-1: device descriptor read/64, error -71
[  455.116404][ T6880] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  455.246339][ T6880] usb 2-1: device descriptor read/64, error -71
[  455.356636][ T6880] usb usb2-port1: attempt power cycle
[  455.696406][ T6880] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  455.728121][ T6880] usb 2-1: device descriptor read/8, error -71
[  455.850716][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  455.852053][ T6879] usb 1-1: USB disconnect, device number 62
[  455.923773][ T6879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  455.972504][ T6880] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  455.974661][T12001] dvmrp12: entered allmulticast mode
[  455.985696][ T6879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  456.013072][ T6879] quatech2 1-1:0.51: device disconnected
[  456.019218][ T6867] usb 5-1: USB disconnect, device number 57
[  456.044375][ T6880] usb 2-1: device descriptor read/8, error -71
[  456.194193][ T6880] usb usb2-port1: unable to enumerate USB device
[  456.487258][T12014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1753'.
[  456.513260][T12017] FAULT_INJECTION: forcing a failure.
[  456.513260][T12017] name failslab, interval 1, probability 0, space 0, times 0
[  456.533037][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.3.1758 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  456.533071][T12017] Tainted: [L]=SOFTLOCKUP
[  456.533080][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  456.533111][T12017] Call Trace:
[  456.533127][T12017]  <TASK>
[  456.533136][T12017]  dump_stack_lvl+0xe8/0x150
[  456.533175][T12017]  should_fail_ex+0x412/0x560
[  456.533212][T12017]  should_failslab+0xa8/0x100
[  456.533244][T12017]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  456.533272][T12017]  ? resume_store+0x14e/0x4f0
[  456.533294][T12017]  ? rep_movs_alternative+0x4a/0x90
[  456.533326][T12017]  kstrndup+0x80/0x160
[  456.533384][T12017]  resume_store+0x14e/0x4f0
[  456.533405][T12017]  ? sysfs_file_kobj+0x1a/0x230
[  456.533436][T12017]  ? __pfx_resume_store+0x10/0x10
[  456.533461][T12017]  ? sysfs_file_kobj+0x1a/0x230
[  456.533487][T12017]  ? sysfs_file_kobj+0x1a/0x230
[  456.533510][T12017]  ? sysfs_file_kobj+0x1a/0x230
[  456.533538][T12017]  ? sysfs_file_kobj+0x1e4/0x230
[  456.533566][T12017]  ? sysfs_kf_write+0x166/0x260
[  456.533614][T12017]  ? __pfx_sysfs_kf_write+0x10/0x10
[  456.533640][T12017]  kernfs_fop_write_iter+0x3af/0x540
[  456.533674][T12017]  vfs_write+0x61d/0xb90
[  456.533708][T12017]  ? __pfx_vfs_write+0x10/0x10
[  456.533743][T12017]  ? __fget_files+0x2a/0x420
[  456.533802][T12017]  ksys_write+0x150/0x270
[  456.533830][T12017]  ? __pfx_ksys_write+0x10/0x10
[  456.533875][T12017]  do_syscall_64+0x14d/0xf80
[  456.533914][T12017]  ? trace_irq_disable+0x3b/0x150
[  456.533953][T12017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.533984][T12017]  ? clear_bhb_loop+0x40/0x90
[  456.534012][T12017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.534034][T12017] RIP: 0033:0x7f3fef39c799
[  456.534062][T12017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.534087][T12017] RSP: 002b:00007f3ff0343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  456.534115][T12017] RAX: ffffffffffffffda RBX: 00007f3fef615fa0 RCX: 00007f3fef39c799
[  456.534138][T12017] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004
[  456.534158][T12017] RBP: 00007f3ff0343090 R08: 0000000000000000 R09: 0000000000000000
[  456.534172][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  456.534184][T12017] R13: 00007f3fef616038 R14: 00007f3fef615fa0 R15: 00007f3fef73fa48
[  456.534233][T12017]  </TASK>
[  456.947681][T12018] tipc: Started in network mode
[  456.953257][T12018] tipc: Node identity 7f000001, cluster identity 4711
[  456.978070][T12018] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  457.456332][ T6879] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  457.614412][ T6879] usb 4-1: config 118 interface 0 has no altsetting 0
[  457.624861][ T6879] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[  457.646908][ T6879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.659931][ T6879] usb 4-1: Product: syz
[  457.664156][ T6879] usb 4-1: Manufacturer: syz
[  457.688409][ T6879] usb 4-1: SerialNumber: syz
[  457.789029][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  457.789050][   T29] audit: type=1326 audit(1772818358.188:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12036 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  457.833963][   T29] audit: type=1326 audit(1772818358.188:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12036 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf839c799 code=0x7ffc0000
[  457.920728][ T6879] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state.
[  457.933576][ T6879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  457.997014][ T6879] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e)
[  458.011160][ T6879] usb 4-1: media controller created
[  458.059490][T12045] program syz.4.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  458.134369][ T6879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  458.225481][ T6879] DVB: Unable to find symbol mt352_attach()
[  458.240448][ T6879] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e'
[  458.280725][ T6879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32
[  458.323133][ T6879] dvb-usb: schedule remote query interval to 100 msecs.
[  458.330237][ T6879] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected.
[  458.374329][T12061] FAULT_INJECTION: forcing a failure.
[  458.374329][T12061] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.376377][T12058] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1770'.
[  458.429002][T12061] CPU: 1 UID: 0 PID: 12061 Comm: syz.0.1772 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  458.429046][T12061] Tainted: [L]=SOFTLOCKUP
[  458.429053][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  458.429062][T12061] Call Trace:
[  458.429069][T12061]  <TASK>
[  458.429076][T12061]  dump_stack_lvl+0xe8/0x150
[  458.429103][T12061]  should_fail_ex+0x412/0x560
[  458.429127][T12061]  _copy_to_user+0x31/0xb0
[  458.429154][T12061]  simple_read_from_buffer+0xe1/0x170
[  458.429181][T12061]  proc_fail_nth_read+0x1bb/0x230
[  458.429205][T12061]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  458.429230][T12061]  ? rw_verify_area+0x2a6/0x4d0
[  458.429246][T12061]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  458.429269][T12061]  vfs_read+0x20c/0xa70
[  458.429283][T12061]  ? fdget_pos+0x246/0x320
[  458.429309][T12061]  ? __pfx___mutex_lock+0x10/0x10
[  458.429325][T12061]  ? __pfx_vfs_read+0x10/0x10
[  458.429342][T12061]  ? __fget_files+0x2a/0x420
[  458.429367][T12061]  ? __fget_files+0x3a0/0x420
[  458.429389][T12061]  ? __fget_files+0x2a/0x420
[  458.429417][T12061]  ksys_read+0x150/0x270
[  458.429435][T12061]  ? __pfx_ksys_read+0x10/0x10
[  458.429459][T12061]  do_syscall_64+0x14d/0xf80
[  458.429485][T12061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.429501][T12061]  ? clear_bhb_loop+0x40/0x90
[  458.429519][T12061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.429535][T12061] RIP: 0033:0x7f3e9db5cfce
[  458.429549][T12061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  458.429562][T12061] RSP: 002b:00007f3e9e9e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  458.429579][T12061] RAX: ffffffffffffffda RBX: 00007f3e9e9e26c0 RCX: 00007f3e9db5cfce
[  458.429590][T12061] RDX: 000000000000000f RSI: 00007f3e9e9e20a0 RDI: 0000000000000003
[  458.429599][T12061] RBP: 00007f3e9e9e2090 R08: 0000000000000000 R09: 0000000000000000
[  458.429608][T12061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.429617][T12061] R13: 00007f3e9de16038 R14: 00007f3e9de15fa0 R15: 00007f3e9df3fa48
[  458.429640][T12061]  </TASK>
[  458.867419][ T6881] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  458.979389][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.996343][ T6867] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  459.023030][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.027931][ T6881] usb 3-1: Using ep0 maxpacket: 16
[  459.041083][ T6881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  459.053718][ T6881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  459.097158][ T6881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  459.121037][ T6881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  459.136350][ T6867] usb 2-1: device descriptor read/64, error -71
[  459.142715][ T6881] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  459.174334][ T6881] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  459.184417][ T6881] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  459.196462][ T6881] usb 3-1: Manufacturer: syz
[  459.216668][   T24] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  459.233067][ T6881] usb 3-1: config 0 descriptor??
[  459.376393][ T6867] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  459.389133][   T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  459.411195][   T24] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  459.436493][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  459.496731][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.522863][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  459.547663][   T24] usb 1-1: invalid MIDI out EP 0
[  459.586728][ T6867] usb 2-1: device descriptor read/64, error -71
[  459.696582][ T6867] usb usb2-port1: attempt power cycle
[  459.746867][ T6881] rc_core: IR keymap rc-hauppauge not found
[  459.773828][ T6881] Registered IR keymap rc-empty
[  459.780193][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'.
[  459.830272][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  459.847546][T12065] 8021q: VLANs not supported on vxcan0
[  459.889047][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  459.923357][   T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  459.979806][ T6881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  460.008410][   T24] usb 1-1: USB disconnect, device number 63
[  460.047978][ T6881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33
[  460.098170][ T6867] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  460.107963][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.167134][ T6867] usb 2-1: device descriptor read/8, error -71
[  460.167645][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.237273][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.299234][ T5911] m920x_read = error: -71
[  460.303842][ T5911] dvb-usb: error while querying for an remote control event.
[  460.315855][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.323366][ T6879] dvb_usb_m920x 4-1:118.0: probe with driver dvb_usb_m920x failed with error -71
[  460.396498][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.406590][ T6867] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  460.409881][ T6879] usb 4-1: USB disconnect, device number 49
[  460.456374][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.475212][ T6867] usb 2-1: device descriptor read/8, error -71
[  460.506464][ T5911] m920x_read = error: -19
[  460.510912][ T5911] dvb-usb: error while querying for an remote control event.
[  460.587166][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.623788][ T6867] usb usb2-port1: unable to enumerate USB device
[  460.746641][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.757398][ T5911] m920x_read = error: -19
[  460.767157][ T5911] dvb-usb: error while querying for an remote control event.
[  460.795094][T12081] binder: BINDER_SET_CONTEXT_MGR already set
[  460.816744][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.830258][T12081] binder: 12079:12081 ioctl 4018620d 200000000040 returned -16
[  460.843578][ T6881] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  460.924023][ T6881] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  460.934139][ T5911] m920x_read = error: -19
[  460.956460][ T5911] dvb-usb: error while querying for an remote control event.
[  460.981049][T12081] binder: 12079:12081 ioctl c0306201 200000000240 returned -11
[  460.990867][ T6881] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  461.065608][ T6881] usb 3-1: USB disconnect, device number 73
[  461.137244][ T5911] m920x_read = error: -19
[  461.147244][ T5911] dvb-usb: error while querying for an remote control event.
[  461.296677][ T5911] m920x_read = error: -19
[  461.301134][ T5911] dvb-usb: error while querying for an remote control event.
[  461.476485][ T6881] m920x_read = error: -19
[  461.488187][ T6881] dvb-usb: error while querying for an remote control event.
[  461.638022][ T5911] m920x_read = error: -19
[  461.655745][ T5911] dvb-usb: error while querying for an remote control event.
[  461.796896][ T5911] m920x_read = error: -19
[  461.816470][ T5911] dvb-usb: error while querying for an remote control event.
[  461.853432][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1785'.
[  461.976428][ T6867] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  461.994485][ T5911] m920x_read = error: -19
[  461.999135][ T5911] dvb-usb: error while querying for an remote control event.
[  462.116403][ T6881] m920x_read = error: -19
[  462.128080][ T6881] dvb-usb: error while querying for an remote control event.
[  462.136307][ T6867] usb 4-1: Using ep0 maxpacket: 32
[  462.198888][ T6867] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  462.226292][ T6867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.266502][ T6881] m920x_read = error: -19
[  462.271324][ T6881] dvb-usb: error while querying for an remote control event.
[  462.313620][ T6867] gspca_main: nw80x-2.14.0 probing 055f:d001
[  462.416414][ T6881] m920x_read = error: -19
[  462.425904][ T6881] dvb-usb: error while querying for an remote control event.
[  462.547631][ T6881] m920x_read = error: -19
[  462.552269][ T6881] dvb-usb: error while querying for an remote control event.
[  462.666836][ T6881] m920x_read = error: -19
[  462.671270][ T6881] dvb-usb: error while querying for an remote control event.
[  462.788013][ T6881] m920x_read = error: -19
[  462.820925][ T6881] dvb-usb: error while querying for an remote control event.
[  462.967934][ T6881] m920x_read = error: -19
[  462.984058][ T6881] dvb-usb: error while querying for an remote control event.
[  463.118207][ T6867] gspca_nw80x: reg_r err -71
[  463.126636][ T6881] m920x_read = error: -19
[  463.131212][ T6867] nw80x 4-1:3.0: probe with driver nw80x failed with error -71
[  463.163702][ T6881] dvb-usb: error while querying for an remote control event.
[  463.209895][ T6867] usb 4-1: USB disconnect, device number 50
[  463.306350][ T6881] m920x_read = error: -19
[  463.312871][ T6881] dvb-usb: error while querying for an remote control event.
[  463.428883][ T6881] m920x_read = error: -19
[  463.433374][ T6881] dvb-usb: error while querying for an remote control event.
[  463.556741][ T6881] m920x_read = error: -19
[  463.562589][ T6881] dvb-usb: error while querying for an remote control event.
[  463.696404][ T6881] m920x_read = error: -19
[  463.700820][ T6881] dvb-usb: error while querying for an remote control event.
[  463.842340][ T6881] m920x_read = error: -19
[  463.852439][ T6881] dvb-usb: error while querying for an remote control event.
[  463.971515][T12136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1793'.
[  464.026419][ T6881] m920x_read = error: -19
[  464.030854][ T6881] dvb-usb: error while querying for an remote control event.
[  464.146352][ T5911] m920x_read = error: -19
[  464.150794][ T5911] dvb-usb: error while querying for an remote control event.
[  464.256723][ T6881] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  464.275500][ T5911] m920x_read = error: -19
[  464.286082][ T5911] dvb-usb: error while querying for an remote control event.
[  464.416433][ T5896] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  464.420404][ T5911] m920x_read = error: -19
[  464.431969][ T5911] dvb-usb: error while querying for an remote control event.
[  464.448609][ T6881] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  464.456986][ T6881] usb 4-1: config 0 has no interface number 0
[  464.466554][ T6881] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.497015][ T6881] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.520912][T12152] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.536724][ T6881] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  464.550820][   T24] m920x_read = error: -19
[  464.555218][   T24] dvb-usb: error while querying for an remote control event.
[  464.565429][ T6881] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  464.575708][ T6881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.576601][ T5896] usb 5-1: Using ep0 maxpacket: 32
[  464.589957][ T6881] usb 4-1: config 0 descriptor??
[  464.626712][ T5911] usb 3-1: new full-speed USB device number 74 using dummy_hcd
[  464.658641][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.667040][ T6879] m920x_read = error: -19
[  464.675953][ T6879] dvb-usb: error while querying for an remote control event.
[  464.728183][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.761196][ T5896] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  464.796046][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.805011][ T5911] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  464.822821][ T5911] usb 3-1: config 0 has no interface number 0
[  464.829432][ T6879] m920x_read = error: -19
[  464.834257][ T6879] dvb-usb: error while querying for an remote control event.
[  464.851216][ T5896] usb 5-1: config 0 descriptor??
[  464.877803][ T5911] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B
[  464.908588][ T5911] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  464.935093][ T5911] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0
[  464.962496][ T5911] usb 3-1: config 0 interface 200 has no altsetting 0
[  464.982340][ T5911] usb 3-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39
[  464.992029][ T6879] m920x_read = error: -19
[  464.997132][ T6879] dvb-usb: error while querying for an remote control event.
[  465.008839][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.027142][ T5911] usb 3-1: Product: syz
[  465.044041][ T5911] usb 3-1: Manufacturer: syz
[  465.055301][ T5911] usb 3-1: SerialNumber: syz
[  465.084637][ T5911] usb 3-1: config 0 descriptor??
[  465.111786][ T6879] m920x_read = error: -19
[  465.121122][ T6879] dvb-usb: error while querying for an remote control event.
[  465.246481][ T6879] m920x_read = error: -19
[  465.261398][ T6879] dvb-usb: error while querying for an remote control event.
[  465.323010][ T6881] usbhid 4-1:0.1: can't add hid device: -71
[  465.355725][ T6881] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[  465.414872][ T5896] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  465.448374][T12145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.470014][ T6879] m920x_read = error: -19
[  465.474435][ T6879] dvb-usb: error while querying for an remote control event.
[  465.497009][ T6881] usb 4-1: USB disconnect, device number 51
[  465.528563][T12145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.536568][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  465.701753][   T24] m920x_read = error: -19
[  465.716015][   T24] dvb-usb: error while querying for an remote control event.
[  465.775598][ T5911] usb 3-1: USB disconnect, device number 74
[  465.838610][   T24] m920x_read = error: -19
[  465.849451][   T24] dvb-usb: error while querying for an remote control event.
[  465.976328][   T24] m920x_read = error: -19
[  465.981327][   T24] dvb-usb: error while querying for an remote control event.
[  466.100142][   T24] m920x_read = error: -19
[  466.118628][   T24] dvb-usb: error while querying for an remote control event.
[  466.256493][   T24] m920x_read = error: -19
[  466.276625][   T24] dvb-usb: error while querying for an remote control event.
[  466.416343][   T24] m920x_read = error: -19
[  466.418216][T12167] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1805'.
[  466.434495][   T24] dvb-usb: error while querying for an remote control event.
[  466.562227][   T24] m920x_read = error: -19
[  466.566942][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.594471][   T24] dvb-usb: error while querying for an remote control event.
[  466.726894][   T24] m920x_read = error: -19
[  466.741519][   T24] dvb-usb: error while querying for an remote control event.
[  466.757151][T12177] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  466.867915][   T24] m920x_read = error: -19
[  466.874362][   T24] dvb-usb: error while querying for an remote control event.
[  466.900103][   T29] audit: type=1326 audit(1772818367.318:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12180 comm="syz.2.1810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcf839c799 code=0x0
[  467.006671][   T24] m920x_read = error: -19
[  467.012306][   T24] dvb-usb: error while querying for an remote control event.
[  467.146373][   T24] m920x_read = error: -19
[  467.151486][ T5896] usb 5-1: USB disconnect, device number 58
[  467.160494][   T24] dvb-usb: error while querying for an remote control event.
[  467.296335][   T24] m920x_read = error: -19
[  467.301118][   T24] dvb-usb: error while querying for an remote control event.
[  467.416715][   T24] m920x_read = error: -19
[  467.437041][   T24] dvb-usb: error while querying for an remote control event.
[  467.537400][T12189] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1812'.
[  467.566721][   T24] m920x_read = error: -19
[  467.581996][   T24] dvb-usb: error while querying for an remote control event.
[  467.726725][   T24] m920x_read = error: -19
[  467.733775][   T24] dvb-usb: error while querying for an remote control event.
[  467.812296][T12199] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1816'.
[  467.846327][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1816'.
[  467.876820][ T5911] m920x_read = error: -19
[  467.881222][ T5911] dvb-usb: error while querying for an remote control event.
[  467.953916][T12207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.988374][T12207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.016372][ T5911] m920x_read = error: -19
[  468.029668][ T5911] dvb-usb: error while querying for an remote control event.
[  468.166442][   T24] m920x_read = error: -19
[  468.182467][   T24] dvb-usb: error while querying for an remote control event.
[  468.325293][ T5911] m920x_read = error: -19
[  468.447634][ T5911] dvb-usb: error while querying for an remote control event.
[  468.563280][T12224] FAULT_INJECTION: forcing a failure.
[  468.563280][T12224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  468.619146][T12219] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  468.630969][ T5911] m920x_read = error: -19
[  468.635578][T12224] CPU: 0 UID: 0 PID: 12224 Comm: syz.3.1825 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.635610][T12224] Tainted: [L]=SOFTLOCKUP
[  468.635627][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  468.635641][T12224] Call Trace:
[  468.635650][T12224]  <TASK>
[  468.635659][T12224]  dump_stack_lvl+0xe8/0x150
[  468.635695][T12224]  should_fail_ex+0x412/0x560
[  468.635727][T12224]  _copy_from_iter+0x1d3/0x1670
[  468.635762][T12224]  ? rcu_is_watching+0x15/0xb0
[  468.635799][T12224]  ? __pfx__copy_from_iter+0x10/0x10
[  468.635837][T12224]  ? netlink_sendmsg+0x650/0xb40
[  468.635864][T12224]  ? skb_put+0x11b/0x210
[  468.635899][T12224]  netlink_sendmsg+0x6c0/0xb40
[  468.635937][T12224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.635970][T12224]  ? aa_sock_msg_perm+0xf1/0x1b0
[  468.636001][T12224]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  468.636029][T12224]  ____sys_sendmsg+0x972/0x9f0
[  468.636069][T12224]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.636111][T12224]  ? import_iovec+0x73/0xa0
[  468.636146][T12224]  ___sys_sendmsg+0x2a5/0x360
[  468.636173][T12224]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.636228][T12224]  ? __fget_files+0x2a/0x420
[  468.636259][T12224]  ? __fget_files+0x3a0/0x420
[  468.636300][T12224]  __x64_sys_sendmsg+0x1bd/0x2a0
[  468.636324][T12224]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.636354][T12224]  ? __pfx_ksys_write+0x10/0x10
[  468.636389][T12224]  do_syscall_64+0x14d/0xf80
[  468.636420][T12224]  ? trace_irq_disable+0x3b/0x150
[  468.636451][T12224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.636473][T12224]  ? clear_bhb_loop+0x40/0x90
[  468.636499][T12224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.636520][T12224] RIP: 0033:0x7f3fef39c799
[  468.636540][T12224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.636558][T12224] RSP: 002b:00007f3ff0343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.636581][T12224] RAX: ffffffffffffffda RBX: 00007f3fef615fa0 RCX: 00007f3fef39c799
[  468.636597][T12224] RDX: 0000000000000884 RSI: 0000200000000140 RDI: 0000000000000003
[  468.636610][T12224] RBP: 00007f3ff0343090 R08: 0000000000000000 R09: 0000000000000000
[  468.636631][T12224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.636644][T12224] R13: 00007f3fef616038 R14: 00007f3fef615fa0 R15: 00007f3fef73fa48
[  468.636676][T12224]  </TASK>
[  468.925076][T12226] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1824'.
[  468.935914][ T5911] dvb-usb: error while querying for an remote control event.
[  469.126416][ T5911] m920x_read = error: -19
[  469.134998][ T5911] dvb-usb: error while querying for an remote control event.
[  469.278247][ T5911] m920x_read = error: -19
[  469.288291][ T5911] dvb-usb: error while querying for an remote control event.
[  469.426474][ T5911] m920x_read = error: -19
[  469.446630][ T5911] dvb-usb: error while querying for an remote control event.
[  469.576468][ T5911] m920x_read = error: -19
[  469.598949][T12246] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1833'.
[  469.606879][ T5911] dvb-usb: error while querying for an remote control event.
[  469.746659][ T5911] m920x_read = error: -19
[  469.761779][ T5911] dvb-usb: error while querying for an remote control event.
[  469.886536][ T5911] m920x_read = error: -19
[  469.895331][ T5911] dvb-usb: error while querying for an remote control event.
[  470.016898][   T24] m920x_read = error: -19
[  470.021296][   T24] dvb-usb: error while querying for an remote control event.
[  470.056309][ T5896] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  470.172242][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.186391][   T24] m920x_read = error: -19
[  470.190765][   T24] dvb-usb: error while querying for an remote control event.
[  470.222629][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.256632][ T5896] usb 5-1: Using ep0 maxpacket: 32
[  470.264745][ T5896] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  470.293102][ T5896] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  470.313979][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  470.318132][   T24] m920x_read = error: -19
[  470.334495][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  470.344969][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  470.351058][   T24] dvb-usb: error while querying for an remote control event.
[  470.356898][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  470.379834][ T5896] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  470.391634][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.403398][ T5896] usb 5-1: config 0 descriptor??
[  470.446547][ T5835] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  470.486406][   T24] m920x_read = error: -19
[  470.490909][   T24] dvb-usb: error while querying for an remote control event.
[  470.606466][ T5835] usb 1-1: Using ep0 maxpacket: 16
[  470.606509][   T24] m920x_read = error: -19
[  470.616612][   T24] dvb-usb: error while querying for an remote control event.
[  470.631987][ T5835] usb 1-1: unable to get BOS descriptor or descriptor too short
[  470.640144][ T5896] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  470.663515][ T5835] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  470.696578][ T5835] usb 1-1: string descriptor 0 read error: -22
[  470.703145][ T5835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  470.726395][   T24] m920x_read = error: -19
[  470.737912][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.752543][   T24] dvb-usb: error while querying for an remote control event.
[  470.792814][ T5835] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  470.887090][   T24] m920x_read = error: -19
[  470.891485][   T24] dvb-usb: error while querying for an remote control event.
[  470.941334][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1828'.
[  470.952243][ T5835] usb 5-1: USB disconnect, device number 59
[  470.978932][ T5835] usblp0: removed
[  471.007690][ T5896] usb 1-1: USB disconnect, device number 64
[  471.028364][   T24] m920x_read = error: -19
[  471.032746][   T24] dvb-usb: error while querying for an remote control event.
[  471.181570][   T24] m920x_read = error: -19
[  471.185993][   T24] dvb-usb: error while querying for an remote control event.
[  471.326362][   T24] m920x_read = error: -19
[  471.330768][   T24] dvb-usb: error while querying for an remote control event.
[  471.456883][   T24] m920x_read = error: -19
[  471.461347][   T24] dvb-usb: error while querying for an remote control event.
[  471.496634][ T5896] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  471.606987][   T24] m920x_read = error: -19
[  471.611406][   T24] dvb-usb: error while querying for an remote control event.
[  471.698428][ T5896] usb 3-1: Using ep0 maxpacket: 8
[  471.710178][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  471.720707][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  471.732160][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  471.743931][ T6881] m920x_read = error: -19
[  471.746080][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  471.749803][ T6881] dvb-usb: error while querying for an remote control event.
[  471.777883][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  471.810989][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  471.846931][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  471.847428][   T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  471.885389][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  471.899748][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  471.911934][ T6881] m920x_read = error: -19
[  471.917960][ T6881] dvb-usb: error while querying for an remote control event.
[  471.918445][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  471.949331][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  471.966394][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  471.996912][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  472.013314][T12302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1849'.
[  472.023212][   T24] usb 1-1: Using ep0 maxpacket: 8
[  472.026876][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  472.053195][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.063894][ T6881] m920x_read = error: -19
[  472.075866][ T6881] dvb-usb: error while querying for an remote control event.
[  472.114839][T12302] libceph: resolve '0..' (ret=-3): failed
[  472.129793][   T24] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6
[  472.139074][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.147671][   T24] usb 1-1: Product: syz
[  472.153350][   T24] usb 1-1: Manufacturer: syz
[  472.158164][   T24] usb 1-1: SerialNumber: syz
[  472.170665][   T24] usb 1-1: config 0 descriptor??
[  472.185542][   T24] gspca_main: t613-2.14.0 probing 17a1:0128
[  472.186357][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  472.204511][ T6881] m920x_read = error: -19
[  472.209677][ T6881] dvb-usb: error while querying for an remote control event.
[  472.249873][ T5896] usb 3-1: string descriptor 0 read error: -22
[  472.262935][ T5896] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  472.284469][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.326739][ T6881] m920x_read = error: -19
[  472.331564][ T6881] dvb-usb: error while querying for an remote control event.
[  472.359405][ T5896] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  472.457240][ T6881] m920x_read = error: -19
[  472.486819][ T6881] dvb-usb: error while querying for an remote control event.
[  472.502218][   T24] gspca_t613: unknown sensor 0000
[  472.527576][   T24] t613 1-1:0.0: probe with driver t613 failed with error -22
[  472.628814][   T24] usb 1-1: USB disconnect, device number 65
[  472.720881][ T6881] m920x_read = error: -19
[  472.783954][ T6881] dvb-usb: error while querying for an remote control event.
[  472.930470][T12318] 
[  472.932836][T12318] =====================================================
[  472.939807][T12318] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  472.947333][T12318] syzkaller #0 Tainted: G             L     
[  472.953340][T12318] -----------------------------------------------------
[  472.960298][T12318] syz.2.1844/12318 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  472.968057][T12318] ffff888078a68558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  472.976920][T12318] 
[  472.976920][T12318] and this task is already holding:
[  472.984305][T12318] ffff888035986468 (&tty->flow.lock){....}-{3:3}, at: n_tty_ioctl_helper+0xe0/0x4d0
[  472.993885][T12318] which would create a new lock dependency:
[  472.999811][T12318]  (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  473.007542][T12318] 
[  473.007542][T12318] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  473.017056][T12318]  (&dev->event_lock#2){..-.}-{3:3}
[  473.017106][T12318] 
[  473.017106][T12318] ... which became SOFTIRQ-irq-safe at:
[  473.030059][T12318]   lock_acquire+0xf0/0x2e0
[  473.034609][T12318]   _raw_spin_lock_irqsave+0x40/0x60
[  473.040011][T12318]   input_inject_event+0xa5/0x340
[  473.045072][T12318]   led_trigger_event+0x138/0x210
[  473.050243][T12318]   kbd_bh+0x1f3/0x300
[  473.054417][T12318]   tasklet_action_common+0x2da/0x4b0
[  473.059839][T12318]   handle_softirqs+0x22a/0x870
[  473.064714][T12318]   __irq_exit_rcu+0x5f/0x150
[  473.069500][T12318]   irq_exit_rcu+0x9/0x30
[  473.073849][T12318]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  473.079659][T12318]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  473.085852][T12318]   _raw_spin_unlock_irqrestore+0x47/0x80
[  473.091619][T12318]   evdev_write+0x325/0x4c0
[  473.096158][T12318]   vfs_write+0x29a/0xb90
[  473.100510][T12318]   ksys_write+0x150/0x270
[  473.104947][T12318]   do_syscall_64+0x14d/0xf80
[  473.109648][T12318]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.115653][T12318] 
[  473.115653][T12318] to a SOFTIRQ-irq-unsafe lock:
[  473.122681][T12318]  (tasklist_lock){.+.+}-{3:3}
[  473.122710][T12318] 
[  473.122710][T12318] ... which became SOFTIRQ-irq-unsafe at:
[  473.135499][T12318] ...
[  473.135572][T12318]   lock_acquire+0xf0/0x2e0
[  473.142700][T12318]   _raw_read_lock+0x36/0x50
[  473.147324][T12318]   __do_wait+0xde/0x740
[  473.151603][T12318]   do_wait+0x1e7/0x540
[  473.155774][T12318]   kernel_wait+0xd6/0x1c0
[  473.160205][T12318]   call_usermodehelper_exec_work+0xbe/0x230
[  473.166210][T12318]   process_scheduled_works+0xb02/0x1830
[  473.171868][T12318]   worker_thread+0xa50/0xfc0
[  473.176570][T12318]   kthread+0x388/0x470
[  473.180755][T12318]   ret_from_fork+0x51e/0xb90
[  473.185464][T12318]   ret_from_fork_asm+0x1a/0x30
[  473.190364][T12318] 
[  473.190364][T12318] other info that might help us debug this:
[  473.190364][T12318] 
[  473.200635][T12318] Chain exists of:
[  473.200635][T12318]   &dev->event_lock#2 --> &tty->flow.lock --> tasklist_lock
[  473.200635][T12318] 
[  473.213823][T12318]  Possible interrupt unsafe locking scenario:
[  473.213823][T12318] 
[  473.222168][T12318]        CPU0                    CPU1
[  473.227562][T12318]        ----                    ----
[  473.233078][T12318]   lock(tasklist_lock);
[  473.237362][T12318]                                local_irq_disable();
[  473.244133][T12318]                                lock(&dev->event_lock#2);
[  473.251365][T12318]                                lock(&tty->flow.lock);
[  473.258351][T12318]   <Interrupt>
[  473.261822][T12318]     lock(&dev->event_lock#2);
[  473.266784][T12318] 
[  473.266784][T12318]  *** DEADLOCK ***
[  473.266784][T12318] 
[  473.274961][T12318] 4 locks held by syz.2.1844/12318:
[  473.280185][T12318]  #0: ffff8880359860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  473.290016][T12318]  #1: ffff888035986468 (&tty->flow.lock){....}-{3:3}, at: n_tty_ioctl_helper+0xe0/0x4d0
[  473.299929][T12318]  #2: ffff8880359860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90
[  473.309294][T12318]  #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  473.318406][T12318] 
[  473.318406][T12318] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  473.328829][T12318]   -> (&dev->event_lock#2){..-.}-{3:3} {
[  473.334601][T12318]      IN-SOFTIRQ-W at:
[  473.338885][T12318]                         lock_acquire+0xf0/0x2e0
[  473.345331][T12318]                         _raw_spin_lock_irqsave+0x40/0x60
[  473.352581][T12318]                         input_inject_event+0xa5/0x340
[  473.359544][T12318]                         led_trigger_event+0x138/0x210
[  473.366534][T12318]                         kbd_bh+0x1f3/0x300
[  473.372534][T12318]                         tasklet_action_common+0x2da/0x4b0
[  473.379935][T12318]                         handle_softirqs+0x22a/0x870
[  473.386726][T12318]                         __irq_exit_rcu+0x5f/0x150
[  473.393358][T12318]                         irq_exit_rcu+0x9/0x30
[  473.399627][T12318]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[  473.407286][T12318]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  473.415289][T12318]                         _raw_spin_unlock_irqrestore+0x47/0x80
[  473.422944][T12318]                         evdev_write+0x325/0x4c0
[  473.429473][T12318]                         vfs_write+0x29a/0xb90
[  473.435735][T12318]                         ksys_write+0x150/0x270
[  473.442084][T12318]                         do_syscall_64+0x14d/0xf80
[  473.448787][T12318]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.456705][T12318]      INITIAL USE at:
[  473.460796][T12318]                        lock_acquire+0xf0/0x2e0
[  473.467249][T12318]                        _raw_spin_lock_irqsave+0x40/0x60
[  473.474385][T12318]                        input_inject_event+0xa5/0x340
[  473.481427][T12318]                        kbd_led_trigger_activate+0xbc/0x100
[  473.488860][T12318]                        led_trigger_set+0x535/0x960
[  473.495576][T12318]                        led_trigger_set_default+0x260/0x2a0
[  473.502978][T12318]                        led_classdev_register_ext+0x787/0x9c0
[  473.510553][T12318]                        input_leds_connect+0x517/0x790
[  473.517507][T12318]                        input_register_device+0xd00/0x1160
[  473.524839][T12318]                        atkbd_connect+0x731/0xa50
[  473.531449][T12318]                        serio_driver_probe+0x82/0xd0
[  473.538266][T12318]                        really_probe+0x267/0xaf0
[  473.544777][T12318]                        __driver_probe_device+0x18c/0x320
[  473.552013][T12318]                        driver_probe_device+0x4f/0x240
[  473.558978][T12318]                        __driver_attach+0x3e7/0x710
[  473.565675][T12318]                        bus_for_each_dev+0x23b/0x2c0
[  473.572515][T12318]                        serio_handle_event+0x20a/0xdd0
[  473.579473][T12318]                        process_scheduled_works+0xb02/0x1830
[  473.586958][T12318]                        worker_thread+0xa50/0xfc0
[  473.593479][T12318]                        kthread+0x388/0x470
[  473.599477][T12318]                        ret_from_fork+0x51e/0xb90
[  473.606000][T12318]                        ret_from_fork_asm+0x1a/0x30
[  473.612702][T12318]    }
[  473.615389][T12318]    ... key      at: [<ffffffff9a608440>] input_allocate_device.__key.7+0x0/0x20
[  473.624770][T12318]  -> (kbd_event_lock){....}-{3:3} {
[  473.630096][T12318]     INITIAL USE at:
[  473.634092][T12318]                      lock_acquire+0xf0/0x2e0
[  473.640267][T12318]                      _raw_spin_lock_irqsave+0x40/0x60
[  473.647224][T12318]                      vt_reset_unicode+0x2b/0x1a0
[  473.653748][T12318]                      reset_vc+0x68/0x1b0
[  473.659575][T12318]                      vc_init+0x70/0x4a0
[  473.665313][T12318]                      con_init+0x377/0x6a0
[  473.671398][T12318]                      console_init+0x10b/0x4d0
[  473.677773][T12318]                      start_kernel+0x22b/0x3d0
[  473.684100][T12318]                      x86_64_start_reservations+0x24/0x30
[  473.691354][T12318]                      x86_64_start_kernel+0x143/0x1c0
[  473.698224][T12318]                      common_startup_64+0x13e/0x147
[  473.704959][T12318]   }
[  473.707562][T12318]   ... key      at: [<ffffffff8effd478>] kbd_event_lock+0x18/0xa0
[  473.715572][T12318]   ... acquired at:
[  473.719476][T12318]    _raw_spin_lock+0x2e/0x40
[  473.724177][T12318]    kbd_event+0xd6/0x40d0
[  473.728626][T12318]    input_handle_events_default+0xd4/0x1a0
[  473.734553][T12318]    input_pass_values+0x288/0x890
[  473.739698][T12318]    input_event_dispose+0x330/0x6b0
[  473.745015][T12318]    input_inject_event+0x1dd/0x340
[  473.750243][T12318]    evdev_write+0x325/0x4c0
[  473.754870][T12318]    vfs_write+0x29a/0xb90
[  473.759308][T12318]    ksys_write+0x150/0x270
[  473.763843][T12318]    do_syscall_64+0x14d/0xf80
[  473.768653][T12318]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.774743][T12318] 
[  473.777079][T12318] -> (&tty->flow.lock){....}-{3:3} {
[  473.782414][T12318]    INITIAL USE at:
[  473.786325][T12318]                    lock_acquire+0xf0/0x2e0
[  473.792325][T12318]                    _raw_spin_lock_irqsave+0x40/0x60
[  473.799112][T12318]                    start_tty+0x20/0x70
[  473.804832][T12318]                    n_tty_set_termios+0xa7c/0x10c0
[  473.811441][T12318]                    tty_set_termios+0xdb3/0x1800
[  473.817875][T12318]                    set_termios+0x566/0x710
[  473.823875][T12318]                    tty_mode_ioctl+0x4a6/0x7d0
[  473.830137][T12318]                    tty_ioctl+0x9c5/0xde0
[  473.835971][T12318]                    __se_sys_ioctl+0xfc/0x170
[  473.842148][T12318]                    do_syscall_64+0x14d/0xf80
[  473.848332][T12318]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.855806][T12318]  }
[  473.858330][T12318]  ... key      at: [<ffffffff9a5c8680>] alloc_tty_struct.__key.35+0x0/0x20
[  473.867128][T12318]  ... acquired at:
[  473.870948][T12318]    _raw_spin_lock_irqsave+0x40/0x60
[  473.876376][T12318]    stop_tty+0x2f/0x150
[  473.880651][T12318]    kbd_event+0x2ec1/0x40d0
[  473.885271][T12318]    input_handle_events_default+0xd4/0x1a0
[  473.891190][T12318]    input_pass_values+0x288/0x890
[  473.896327][T12318]    input_event_dispose+0x330/0x6b0
[  473.901628][T12318]    input_inject_event+0x1dd/0x340
[  473.906848][T12318]    evdev_write+0x325/0x4c0
[  473.911464][T12318]    vfs_write+0x29a/0xb90
[  473.915900][T12318]    ksys_write+0x150/0x270
[  473.920438][T12318]    do_syscall_64+0x14d/0xf80
[  473.925234][T12318]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.931322][T12318] 
[  473.933663][T12318] 
[  473.933663][T12318] the dependencies between the lock to be acquired
[  473.933673][T12318]  and SOFTIRQ-irq-unsafe lock:
[  473.947206][T12318]   -> (tasklist_lock){.+.+}-{3:3} {
[  473.952536][T12318]      HARDIRQ-ON-R at:
[  473.956709][T12318]                         lock_acquire+0xf0/0x2e0
[  473.963148][T12318]                         _raw_read_lock+0x36/0x50
[  473.969670][T12318]                         __do_wait+0xde/0x740
[  473.975838][T12318]                         do_wait+0x1e7/0x540
[  473.981927][T12318]                         kernel_wait+0xd6/0x1c0
[  473.988273][T12318]                         call_usermodehelper_exec_work+0xbe/0x230
[  473.996185][T12318]                         process_scheduled_works+0xb02/0x1830
[  474.003782][T12318]                         worker_thread+0xa50/0xfc0
[  474.010399][T12318]                         kthread+0x388/0x470
[  474.016492][T12318]                         ret_from_fork+0x51e/0xb90
[  474.023109][T12318]                         ret_from_fork_asm+0x1a/0x30
[  474.029902][T12318]      SOFTIRQ-ON-R at:
[  474.034076][T12318]                         lock_acquire+0xf0/0x2e0
[  474.040524][T12318]                         _raw_read_lock+0x36/0x50
[  474.047054][T12318]                         __do_wait+0xde/0x740
[  474.053231][T12318]                         do_wait+0x1e7/0x540
[  474.059324][T12318]                         kernel_wait+0xd6/0x1c0
[  474.065754][T12318]                         call_usermodehelper_exec_work+0xbe/0x230
[  474.073674][T12318]                         process_scheduled_works+0xb02/0x1830
[  474.081248][T12318]                         worker_thread+0xa50/0xfc0
[  474.087861][T12318]                         kthread+0x388/0x470
[  474.093947][T12318]                         ret_from_fork+0x51e/0xb90
[  474.100574][T12318]                         ret_from_fork_asm+0x1a/0x30
[  474.107377][T12318]      INITIAL USE at:
[  474.111468][T12318]                        lock_acquire+0xf0/0x2e0
[  474.117819][T12318]                        _raw_write_lock_irq+0x3d/0x50
[  474.124697][T12318]                        copy_process+0x247a/0x3cf0
[  474.131306][T12318]                        kernel_clone+0x248/0x8e0
[  474.137749][T12318]                        user_mode_thread+0x110/0x180
[  474.144539][T12318]                        rest_init+0x23/0x300
[  474.150625][T12318]                        start_kernel+0x385/0x3d0
[  474.157057][T12318]                        x86_64_start_reservations+0x24/0x30
[  474.164445][T12318]                        x86_64_start_kernel+0x143/0x1c0
[  474.171492][T12318]                        common_startup_64+0x13e/0x147
[  474.178364][T12318]      INITIAL READ USE at:
[  474.182882][T12318]                             lock_acquire+0xf0/0x2e0
[  474.189666][T12318]                             _raw_read_lock+0x36/0x50
[  474.196539][T12318]                             __do_wait+0xde/0x740
[  474.203056][T12318]                             do_wait+0x1e7/0x540
[  474.209487][T12318]                             kernel_wait+0xd6/0x1c0
[  474.216178][T12318]                             call_usermodehelper_exec_work+0xbe/0x230
[  474.224448][T12318]                             process_scheduled_works+0xb02/0x1830
[  474.232377][T12318]                             worker_thread+0xa50/0xfc0
[  474.239352][T12318]                             kthread+0x388/0x470
[  474.245820][T12318]                             ret_from_fork+0x51e/0xb90
[  474.252791][T12318]                             ret_from_fork_asm+0x1a/0x30
[  474.259954][T12318]    }
[  474.262642][T12318]    ... key      at: [<ffffffff8e40c058>] tasklist_lock+0x18/0x40
[  474.270658][T12318]    ... acquired at:
[  474.274646][T12318]    _raw_read_lock+0x36/0x50
[  474.279355][T12318]    send_sigio+0x101/0x370
[  474.283886][T12318]    dnotify_handle_event+0x169/0x440
[  474.289305][T12318]    fsnotify+0x1831/0x1ae0
[  474.293849][T12318]    path_openat+0x15c2/0x3860
[  474.298663][T12318]    do_file_open+0x23e/0x4a0
[  474.303368][T12318]    do_sys_openat2+0x113/0x200
[  474.308310][T12318]    __x64_sys_openat+0x138/0x170
[  474.313387][T12318]    do_syscall_64+0x14d/0xf80
[  474.318206][T12318]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.324392][T12318] 
[  474.326744][T12318]  -> (&f_owner->lock){....}-{3:3} {
[  474.332080][T12318]     INITIAL USE at:
[  474.336077][T12318]                      lock_acquire+0xf0/0x2e0
[  474.342257][T12318]                      _raw_write_lock_irq+0x3d/0x50
[  474.348955][T12318]                      __f_setown+0x67/0x370
[  474.354983][T12318]                      do_fcntl+0x171c/0x1a20
[  474.361155][T12318]                      __se_sys_fcntl+0xc8/0x150
[  474.367502][T12318]                      do_syscall_64+0x14d/0xf80
[  474.373860][T12318]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.381514][T12318]     INITIAL READ USE at:
[  474.385947][T12318]                           lock_acquire+0xf0/0x2e0
[  474.392564][T12318]                           _raw_read_lock_irqsave+0x48/0x60
[  474.400045][T12318]                           send_sigio+0x38/0x370
[  474.406477][T12318]                           dnotify_handle_event+0x169/0x440
[  474.413870][T12318]                           fsnotify+0x1831/0x1ae0
[  474.420400][T12318]                           path_openat+0x15c2/0x3860
[  474.427183][T12318]                           do_file_open+0x23e/0x4a0
[  474.433879][T12318]                           do_sys_openat2+0x113/0x200
[  474.440755][T12318]                           __x64_sys_openat+0x138/0x170
[  474.447809][T12318]                           do_syscall_64+0x14d/0xf80
[  474.454690][T12318]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.462774][T12318]   }
[  474.465374][T12318]   ... key      at: [<ffffffff9a2e91e0>] file_f_owner_allocate.__key+0x0/0x20
[  474.474377][T12318]   ... acquired at:
[  474.478291][T12318]    _raw_read_lock_irqsave+0x48/0x60
[  474.483713][T12318]    send_sigio+0x38/0x370
[  474.488164][T12318]    kill_fasync+0x24d/0x4d0
[  474.492964][T12318]    lease_break_callback+0x26/0x30
[  474.498183][T12318]    __break_lease+0x81c/0x1e80
[  474.503063][T12318]    do_dentry_open+0x1010/0x14e0
[  474.508113][T12318]    vfs_open+0x3b/0x340
[  474.512380][T12318]    path_openat+0x2e08/0x3860
[  474.517157][T12318]    do_file_open+0x23e/0x4a0
[  474.521938][T12318]    do_sys_openat2+0x113/0x200
[  474.526823][T12318]    __x64_sys_open+0x11e/0x150
[  474.531799][T12318]    do_syscall_64+0x14d/0xf80
[  474.536610][T12318]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.542703][T12318] 
[  474.545049][T12318] -> (&new->fa_lock){....}-{3:3} {
[  474.550218][T12318]    INITIAL USE at:
[  474.554140][T12318]                    lock_acquire+0xf0/0x2e0
[  474.560150][T12318]                    _raw_write_lock_irq+0x3d/0x50
[  474.566680][T12318]                    fasync_remove_entry+0xf1/0x1c0
[  474.573291][T12318]                    sock_fasync+0x85/0xf0
[  474.579161][T12318]                    __fput+0x8a5/0xa70
[  474.584750][T12318]                    task_work_run+0x1d9/0x270
[  474.590930][T12318]                    exit_to_user_mode_loop+0xed/0x480
[  474.597807][T12318]                    do_syscall_64+0x32d/0xf80
[  474.603997][T12318]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.611470][T12318]    INITIAL READ USE at:
[  474.615843][T12318]                         lock_acquire+0xf0/0x2e0
[  474.622284][T12318]                         _raw_read_lock_irqsave+0x48/0x60
[  474.629506][T12318]                         kill_fasync+0x199/0x4d0
[  474.635940][T12318]                         sock_wake_async+0x137/0x160
[  474.642727][T12318]                         sk_wake_async+0x189/0x280
[  474.649441][T12318]                         tcp_rcv_state_process+0x1e6a/0x4810
[  474.656915][T12318]                         tcp_v4_do_rcv+0x6bb/0x1430
[  474.663645][T12318]                         __release_sock+0x265/0x3a0
[  474.670385][T12318]                         release_sock+0x5f/0x1f0
[  474.676831][T12318]                         __inet_stream_connect+0x85d/0xdd0
[  474.684143][T12318]                         inet_stream_connect+0x66/0xa0
[  474.691095][T12318]                         __sys_connect+0x312/0x450
[  474.697747][T12318]                         __x64_sys_connect+0x7a/0x90
[  474.704547][T12318]                         do_syscall_64+0x14d/0xf80
[  474.711181][T12318]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.719099][T12318]  }
[  474.721614][T12318]  ... key      at: [<ffffffff9a2e9200>] fasync_insert_entry.__key+0x0/0x20
[  474.730309][T12318]  ... acquired at:
[  474.734124][T12318]    _raw_read_lock_irqsave+0x48/0x60
[  474.739524][T12318]    kill_fasync+0x199/0x4d0
[  474.744133][T12318]    __start_tty+0x18c/0x220
[  474.748748][T12318]    n_tty_ioctl_helper+0x128/0x4d0
[  474.753965][T12318]    tty_ioctl+0x9c5/0xde0
[  474.758404][T12318]    __se_sys_ioctl+0xfc/0x170
[  474.763189][T12318]    do_syscall_64+0x14d/0xf80
[  474.767983][T12318]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.774074][T12318] 
[  474.776415][T12318] 
[  474.776415][T12318] stack backtrace:
[  474.782330][T12318] CPU: 0 UID: 0 PID: 12318 Comm: syz.2.1844 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.782356][T12318] Tainted: [L]=SOFTLOCKUP
[  474.782362][T12318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  474.782374][T12318] Call Trace:
[  474.782384][T12318]  <TASK>
[  474.782392][T12318]  dump_stack_lvl+0xe8/0x150
[  474.782419][T12318]  __lock_acquire+0x2a94/0x2cf0
[  474.782453][T12318]  lock_acquire+0xf0/0x2e0
[  474.782475][T12318]  ? kill_fasync+0x199/0x4d0
[  474.782497][T12318]  _raw_read_lock_irqsave+0x48/0x60
[  474.782525][T12318]  ? kill_fasync+0x199/0x4d0
[  474.782542][T12318]  kill_fasync+0x199/0x4d0
[  474.782560][T12318]  ? kill_fasync+0x53/0x4d0
[  474.782579][T12318]  ? __pfx_n_tty_write_wakeup+0x10/0x10
[  474.782598][T12318]  __start_tty+0x18c/0x220
[  474.782622][T12318]  n_tty_ioctl_helper+0x128/0x4d0
[  474.782645][T12318]  ? __pfx_n_tty_ioctl+0x10/0x10
[  474.782662][T12318]  tty_ioctl+0x9c5/0xde0
[  474.782686][T12318]  ? __pfx_tty_ioctl+0x10/0x10
[  474.782718][T12318]  __se_sys_ioctl+0xfc/0x170
[  474.782739][T12318]  do_syscall_64+0x14d/0xf80
[  474.782768][T12318]  ? trace_irq_disable+0x3b/0x150
[  474.782796][T12318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.782814][T12318]  ? clear_bhb_loop+0x40/0x90
[  474.782835][T12318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.782853][T12318] RIP: 0033:0x7fdcf839c799
[  474.782871][T12318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.782887][T12318] RSP: 002b:00007fdcf61f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  474.782908][T12318] RAX: ffffffffffffffda RBX: 00007fdcf8616270 RCX: 00007fdcf839c799
[  474.782922][T12318] RDX: 0000000000000001 RSI: 000000000000540a RDI: 000000000000000a
[  474.782933][T12318] RBP: 00007fdcf8432bd9 R08: 0000000000000000 R09: 0000000000000000
[  474.782945][T12318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.782956][T12318] R13: 00007fdcf8616308 R14: 00007fdcf8616270 R15: 00007fdcf873fa48
[  474.782976][T12318]  </TASK>
[  474.783532][ T5911] m920x_read = error: -19
[  475.106281][ T5911] dvb-usb: error while querying for an remote control event.
[  475.247477][ T6881] m920x_read = error: -19
[  475.251963][ T6881] dvb-usb: error while querying for an remote control event.
[  475.316728][   T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  475.366501][ T6876] m920x_read = error: -19
[  475.371030][ T6876] dvb-usb: error while querying for an remote control event.
[  475.486300][ T6876] m920x_read = error: -19
[  475.490780][ T6876] dvb-usb: error while querying for an remote control event.
[  475.606330][ T6876] m920x_read = error: -19
[  475.610716][ T6876] dvb-usb: error while querying for an remote control event.
[  475.726680][ T6876] m920x_read = error: -19
[  475.731098][ T6876] dvb-usb: error while querying for an remote control event.
[  475.846749][ T6876] m920x_read = error: -19
[  475.851139][ T6876] dvb-usb: error while querying for an remote control event.
[  475.966338][ T6876] m920x_read = error: -19
[  475.970804][ T6876] dvb-usb: error while querying for an remote control event.
[  476.087069][ T6876] m920x_read = error: -19
[  476.091446][ T6876] dvb-usb: error while querying for an remote control event.
[  476.206508][ T6876] m920x_read = error: -19
[  476.210922][ T6876] dvb-usb: error while querying for an remote control event.
[  476.326776][   T24] m920x_read = error: -19
[  476.331173][   T24] dvb-usb: error while querying for an remote control event.
[  476.446326][   T24] m920x_read = error: -19
[  476.450737][   T24] dvb-usb: error while querying for an remote control event.
[  476.566363][   T24] m920x_read = error: -19
[  476.570783][   T24] dvb-usb: error while querying for an remote control event.
[  476.686405][   T24] m920x_read = error: -19
[  476.690815][   T24] dvb-usb: error while querying for an remote control event.
[  476.806395][   T24] m920x_read = error: -19
[  476.810802][   T24] dvb-usb: error while querying for an remote control event.
[  476.926925][   T24] m920x_read = error: -19
[  476.931308][   T24] dvb-usb: error while querying for an remote control event.
[  477.046996][ T6881] m920x_read = error: -19
[  477.051396][ T6881] dvb-usb: error while querying for an remote control event.
[  477.166433][   T24] m920x_read = error: -19
[  477.170837][   T24] dvb-usb: error while querying for an remote control event.
[  477.287887][   T24] m920x_read = error: -19
[  477.292269][   T24] dvb-usb: error while querying for an remote control event.
[  477.367874][   T24] usb 3-1: USB disconnect, device number 75
[  477.406403][ T6881] m920x_read = error: -19
[  477.410860][ T6881] dvb-usb: error while querying for an remote control event.
[  477.526397][ T6881] m920x_read = error: -19
[  477.530825][ T6881] dvb-usb: error while querying for an remote control event.
[  477.646478][   T24] m920x_read = error: -19
[  477.650878][   T24] dvb-usb: error while querying for an remote control event.
[  477.767049][ T6881] m920x_read = error: -19
[  477.771446][ T6881] dvb-usb: error while querying for an remote control event.
[  477.886451][ T6881] m920x_read = error: -19
[  477.890893][ T6881] dvb-usb: error while querying for an remote control event.
[  478.006338][ T6881] m920x_read = error: -19
[  478.010737][ T6881] dvb-usb: error while querying for an remote control event.
[  478.126381][ T6881] m920x_read = error: -19
[  478.130918][ T6881] dvb-usb: error while querying for an remote control event.
[  478.247007][ T6881] m920x_read = error: -19
[  478.251520][ T6881] dvb-usb: error while querying for an remote control event.
[  478.376795][ T6881] m920x_read = error: -19
[  478.381214][ T6881] dvb-usb: error while querying for an remote control event.
[  478.497059][ T6881] m920x_read = error: -19
[  478.501433][ T6881] dvb-usb: error while querying for an remote control event.
[  478.616559][ T6881] m920x_read = error: -19
[  478.620949][ T6881] dvb-usb: error while querying for an remote control event.
[  478.736562][ T6881] m920x_read = error: -19
[  478.740983][ T6881] dvb-usb: error while querying for an remote control event.
[  478.856555][ T6881] m920x_read = error: -19
[  478.861065][ T6881] dvb-usb: error while querying for an remote control event.
[  478.977155][ T6881] m920x_read = error: -19
[  478.981537][ T6881] dvb-usb: error while querying for an remote control event.
[  479.096675][ T5835] m920x_read = error: -19
[  479.101158][ T5835] dvb-usb: error while querying for an remote control event.
[  479.216812][ T5835] m920x_read = error: -19
[  479.221245][ T5835] dvb-usb: error while querying for an remote control event.
[  479.336441][ T5835] m920x_read = error: -19
[  479.340840][ T5835] dvb-usb: error while querying for an remote control event.
[  479.456658][ T6881] m920x_read = error: -19
[  479.461114][ T6881] dvb-usb: error while querying for an remote control event.
[  479.576630][ T6881] m920x_read = error: -19
[  479.581009][ T6881] dvb-usb: error while querying for an remote control event.
[  479.696600][ T6881] m920x_read = error: -19
[  479.701018][ T6881] dvb-usb: error while querying for an remote control event.
[  479.826743][ T6881] m920x_read = error: -19
[  479.831153][ T6881] dvb-usb: error while querying for an remote control event.
[  479.947183][ T6881] m920x_read = error: -19
[  479.951565][ T6881] dvb-usb: error while querying for an remote control event.
[  480.066427][ T6881] m920x_read = error: -19
[  480.070816][ T6881] dvb-usb: error while querying for an remote control event.
[  480.186422][ T6881] m920x_read = error: -19
[  480.190881][ T6881] dvb-usb: error while querying for an remote control event.
[  480.306795][ T5835] m920x_read = error: -19
[  480.311182][ T5835] dvb-usb: error while querying for an remote control event.
[  480.426448][ T5835] m920x_read = error: -19
[  480.430961][ T5835] dvb-usb: error while querying for an remote control event.
[  480.557033][ T5835] m920x_read = error: -19
[  480.561400][ T5835] dvb-usb: error while querying for an remote control event.
[  480.676487][ T5835] m920x_read = error: -19
[  480.680907][ T5835] dvb-usb: error while querying for an remote control event.
[  480.796481][ T5835] m920x_read = error: -19
[  480.800880][ T5835] dvb-usb: error while querying for an remote control event.
[  480.926446][ T5835] m920x_read = error: -19
[  480.930844][ T5835] dvb-usb: error while querying for an remote control event.
[  481.047180][ T5896] m920x_read = error: -19
[  481.051557][ T5896] dvb-usb: error while querying for an remote control event.
[  481.166442][ T5896] m920x_read = error: -19
[  481.170874][ T5896] dvb-usb: error while querying for an remote control event.
[  481.286435][ T5896] m920x_read = error: -19
[  481.290842][ T5896] dvb-usb: error while querying for an remote control event.
[  481.406494][ T5896] m920x_read = error: -19
[  481.410935][ T5896] dvb-usb: error while querying for an remote control event.
[  481.536468][ T5896] m920x_read = error: -19
[  481.540896][ T5896] dvb-usb: error while querying for an remote control event.
[  481.666477][ T5896] m920x_read = error: -19
[  481.670874][ T5896] dvb-usb: error while querying for an remote control event.
[  481.786492][ T5896] m920x_read = error: -19
[  481.790884][ T5896] dvb-usb: error while querying for an remote control event.
[  481.906983][ T5896] m920x_read = error: -19
[  481.911477][ T5896] dvb-usb: error while querying for an remote control event.
[  482.036520][ T5896] m920x_read = error: -19
[  482.040952][ T5896] dvb-usb: error while querying for an remote control event.
[  482.156438][ T5896] m920x_read = error: -19
[  482.160823][ T5896] dvb-usb: error while querying for an remote control event.
[  482.276929][ T5896] m920x_read = error: -19
[  482.281314][ T5896] dvb-usb: error while querying for an remote control event.
[  482.406854][ T5896] m920x_read = error: -19
[  482.411268][ T5896] dvb-usb: error while querying for an remote control event.
[  482.527116][ T5896] m920x_read = error: -19
[  482.531513][ T5896] dvb-usb: error while querying for an remote control event.
[  482.656714][ T5896] m920x_read = error: -19
[  482.661209][ T5896] dvb-usb: error while querying for an remote control event.
[  482.786500][ T5896] m920x_read = error: -19
[  482.790896][ T5896] dvb-usb: error while querying for an remote control event.
[  482.906430][ T5896] m920x_read = error: -19
[  482.910859][ T5896] dvb-usb: error while querying for an remote control event.