last executing test programs:

3m55.032214503s ago: executing program 4 (id=68):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xc040) (fail_nth: 4)

3m53.804643935s ago: executing program 4 (id=73):
r0 = socket$kcm(0x2, 0x3, 0x106)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x56, 0x7b, 0x57, 0x20, 0x2a39, 0x3fa0, 0x4b70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4e, 0x50, 0xbb}}]}}, 0x0) (async)
connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000e00)="93500800657148111464c51cb58f7a6228e635894086bfda5e9c99075b074fb4e99a0c6b79268fbfdf4ad9c05809bfd1a49647edbc97cc906c461a61b1de0875324b656c0f44fb779e59482b81ebd8ae31a89117f74dbf16712a1b663f080e91867db26d9bd97b9d02e77f88504a84d76461cf7cec8872851e2bb59123a14302164a01f7a72a4709a7f1239c019051fde058374911aaf4faec58ad0553cfd6e7cbb12e53871c3688a06061e9c1d5cbf432cc608f7baa8bb05745ea87047d4f2048f3fd2b500ccb203f9d029f7250190723adcc0aef7a80e8b0e2638b3e629c4edc432a301bb42168a559760d75aa35a568b5ccb6e583b6e208cfd782403fbcce5d8b626845d14d6ec8d33e0ad08860c32292c94b2854f5173bf9043c43ed6b1e053c8efc881232095845857f831df96fa23df38490ee003493ee3da23eb7e32a9a76cf3c5403244b924d0827a8d958857b1dd0863825e7c0cd04af3e9956629b327ad9cb1db55aae9e44ea598910ba56779f97ba0a2c9fc8e9f83ec3f2e9ded6d03a8d2afae2b712794ab56b5ac43eecb198cd23db446554d25960df1aa460a47ab005757c7b2dbf96bd448f6aa7a1f3e4e29d60650bbbe5449500438d34f41e867ebc6ad73689fc639abd264a60037a59321689d0267875fad8fce79c095ed330cb3a46dc5d40acf6e13f9734288bf5a5de112f55c673064b7a68f9f5b789114104964cb5638148bc2bee02b696f7d395d08061714ed79bc58b980539dfc458d9372a1507811552ddec05df55cc8c9b9bace4394476ff32989a3cf161769da8e9be37bce852e424b9f6e79d0d3ac169ff9840930f9d15eabb0838cbde13c5ecd5831d35f88037fc24932165cd14b98b8167031a52dd8fb94a384c4661d9c5a3f0840a11e099eb7e12c2b896ccb1bb826c172749c2c673245894ac6749623a71381605dd67d6bb04ad1b85e2caf352914d0cc7fdc23b919feab123839779382770964f3939e0a9beccc31e518d110b588056faa9f24abca827182ce1c88d6319c45a29beb3183020671e74fd78ed063f2c67144bf1d0572d04a3e692670a1057a6d431994b8c4f1466ad6329cec1abbcdea19412f64114d98da6b2f37f05b640c793fbd06d3c6f1739c82b0a5653e6e705a6421a90876ac53541774341f11a68dec5dd00ee65dea48b0fa7b29b971b055eb6741d3f9e35edf3907927ddca091ff5610186655c0cddbdfa1309533ed7e77f9ece468aed9872f629cf64523932bfc80f638c2c84e6e8ffcfb7d0645b4967e1e4089bffe1ce7e6d4f64f74dafdb55f93c547b4ce612057261bb5440a2e8b58e089d3d024f9789095d591e392d8e840b26d7e5b21dea30e3d40bad9352cfb0c608515a65d8a992b60b86103a6ce8dc920d80f48caa5c36f2dc8386a5077a14b2927e0402196c0379c8fe8fa2d89181ef32dd91c71f8fedea4832513909fef439443497a4077194aa67f0f15dc2e0323b9b0b6c487f3d77744bcdfd5482801073dd1cccf7e6b26aef35b0c713b42717b33fec1e77d03461a674d8ac6ccde7c046f0f532c7626c2a1ef4099d6925a95d0af4022a80c1e6f118e29230bed59e9ff075c373d53cf7d16956004de81796b01faab4d6c89f40755efb092530ded4ce6cad49a8032bb67f823bc019460103322519a1f0ede405877554ed72320f19daee3ad0641961d1cd0eaa2c9968068ebd38ac3d95be3a4bbc1c2ac22733f3b910ec0f412ac242d634682f1a6c8658f5c034d11932f45157bb546ea153c2f5ee54f4b95742bbffceb4ca9f44cde8e078b22bb76fe5dbbe1d1a1efeaac982f46ade8db72f9fcc58be7a9f0dcccaca72306f8b897d6e784dc53e58c8b87e02691b60883644fdb60427658fa02c958bb79c446a9c9cd0e528061989643228b519f4537fc88bdeeecffd38048d0640b77c248d94788941bf1676d2d7821dd85e15e287fe9f07f86c959b7497cad5123575156533ec4630b04453309a946056a0cffe9b5661c5445e336475b6d63f4b164b47b39349ad380ee2d0428e2aed5cb0620662e89a36e18f23d1f918ee7cca3d3b2f0e3cf0c035c0253f8ec822b47fd83fee0e5c07f3c88256ac41e5ec8e156066b281204f9c6dafa82ad50420ff7ec7d0bfd7a43d6c1913c2d0c50bb965ef039d4be8914935a429cd04401586f3856fd19507bbc8f5723573472677771de4f711797605659ce2bdb688a24eaaba5f1c9922f777dce3e34721df7c49dfd9f3eaea46ad6e092bd0a7123b1a421326d29c05cb4ed7e8a19fea512b7fe187f3d401469ae3865c5952fd7ebce78137de4049b5705dd2c9102d4830aa2139c8737b9b3e481d220a0b4f77aa0c0fbf65c82994b685884350b83d1662ae43664a5c740bc7e6b1db43803c1592940bea8f82ac18fe0b8da3887c749a7a0cef3698c757825abf1157eac5b7a27514e9dbaa1e3a9fdbdb1f84ff639572b8f7a8e5c86f9d966eef0eb811ddbc67c3cc0b3def11bff334341f2e69f89f996628ad11c439467fcb02e5f0452d5afd19494519f82b97ff1d783a2361ad4e06fa9a13eb41205b8bfe8fceb3f95db3ac812f64503a9f51d8b0216585468f5e2493ebf1d2691741b8125a56c9910fd7349edd34eaea339ce8d93f3a67c54ce6cf76c605b986e10fb215b8f60546ce7d5d076b497e8c5076c96b25289bb6fc26abbbf85bf54d02a8b27a25fbe64f37887b0e6e02eaf24776e5b69fd1546707c1549e0f9bafecfa53e130fbf025e0209d661d7c38a89973118eff1b657a67216e0b13cb9999f0cf39283c8ca0062cca3b8b114de4715470266d65e1bdb05ee3314c3deaacb4b1bd54afb5410e0bca3013dac6e9913c461e0f6c950a46707d563cefcc3882e27d3a280a3ae7c868dca1068169a9b7d8ff21eaa8862deb7f2726bd7dcf12613496c269d32e2cb52ae4966d74458962369fc1f89a7a0cecd5a7c1e00a59c21550df4fffb78a3141b522b43f074e69ef11d2e8df1178e9fe9436aa23990464e8ed4fda363a34c2d1839c6a76b3d4b6dc8cac0b50e0481c74bffab804f0a52ee3c19c71478743e12b8d3798b9dc345d4706afad1f42d4719dd8c9337eaa5b8ab8e2c4e532612c630ddb7f37afd48fb852afd5be9758ac7fd2d9c77f0aef919d5ebf9c6d745829e3a1c2d3b91eedc8fb4cd1783118ef999a5e69165a126c363286ade5d00b65b68304c8bcae5adb584daa117cdb510a343e845ec4084776890a4fdc99ba29d75347e689f0ba6cce83d822116429522616c88b51e4513b818e59e04f9f57a444679884d644dec93392b9ee0c53d16244ae4eb0b48d7a09256bed6f2ba53c57678a88c4fdb36328a3d7640004629e4334eba960aaaec14ea52ffc7ab44a1868aa135dd944c291a83ce34a7ee019e7d954b26ee53230ea70704de8a21dac08974f6f17d06d1cae6485200a7f1e60ed49f8a8a967721c96bc4dc8252fb11df165329c2b3b2ee8a1681d888f74a31560cd0ba166cad3276507259a9572d990e571ac11a38518a845dd125bdb1ceb101237e07e517e57bef964dae524f09ad320e392159580aea19fd621da391c78f55cb6c10487d76bcf7e02f9ebf4fc960cd0bc82052564647f616e64f3c1b2e84faa4928f2b9c14dab5fc67f991c7113e19e528fb2b6cfb71b20dc4dce73cb35bfc6c509262549e3b9762b071d3f6d9fc9a7801885bd597ae5a154cf0efd2ab549b5a9ed72d0f84254ef52f5dc59467d3e8aa97e1cb4123c4cb543b74fe6d47ad635c0efd8ffdd006b7f0f774f457e14a382ba08806799cac99d5fb5fab01e42dea4a3125b5bed772efcb9bd48355b5e6d60a4d42ae95f89265c9d0bb6b836029afc02dd1b9bbf71d90b3a6d81707cc47d4b9a02ce72e9663d9d18dcdc77211fe4e1c5bac985627fd1ac3583403e9cb85d589a7bc2a9deb6f077d699372d2aa047f363b804b26e4ae1204a31ab931be15d27bee224126256a37f5292b23ea3d255a4286901d8fe2be48a51ff0152814f56c403720c937b9507ca4c8e7be6ede945f98eeb291020e5122d8c127f5521b005ca2b7b8c2bed059114528454c750ea7a1bb2b5560a1b1d832c17ddd95edac370728cfd34585ae9fcc0bed5cdff6baba790b0bf47a705f68d8836d2112f3674d17a7928885cd522df34b2a1303e52d1e506c76956301c2644d2c3cba369dbc37f360c2d9a2059a0db579f9022483abdfdb194907e8a940d4b7401cd08316c811a02a7163bf5df810281481eb7ff5196ac57a04d71b4a41a51ae0e66c47f94cd277c3035d199f27f2e3531568dc05cfda6a75042252a1bfb4cacc59fbe67de4891ad2500e43fe156eb4a3dd2c0203630412b335f49efe68abbaba5ed28241734b7c6513a0c87f0a670c19cacda1e3d91628ea581c38beb398e6ca432b36c80c10a298ca380a9bfc284e84f664c9cce160dbc8c30036397bd83940d3d79515d5dba379eb8daba6f9b7ff1910a9f8c46296eb99b7eb6f6a60648c24058f23f134c4af9206376165f20166ad50545dc64f63b9683a04dd1408f980b3ccfe19ede1b79661e4d26b0ab02c798a1d2c8cd1f257828237efe9362ad902d4c7cea69c67847a62fb04490c7e1c38f2c50b4ddac43b6dbf27f1518f64b0112f998633614f419675f20b50a7e6db8b0640917e2c17372cb8e8c90be11217be7f37a8be81fca5d4a7b7a2c84b44257e9b87c57f5697845948b419ba4b1ba6126b7bf423de5b47cdc2e01d232552428d48782644943fc157c801abf6f07c152a645ddea77d69beafc09672ba141dbb16505dc5fde0cc8b46ee19056eef3a0e2cf1afafa677d2c3dcb9eb14266b93a3cd627bf7b1d23b201e3a0a090d8e65325d0f1935c20dc9cee712ba811318badd09451bb3edf285846d9e5497496fb714ea27d555a668d69c0661210cb3bd7d1a3ea8f9097318859372c1c745741ce2e2edf767b30a3918f98052558d6597c5f6d4f03197b56156e09f86676584a875569fa613d80ea527dbd30037adceb3ad680b3b32ad6b508f9fbe0d0b651d130c2407b7b0773f3a640a97ef829adea5fed791b7816c3c5a51c7cf2dbfa05c192ffb759b6c0aec476847becaac6367b26b43caa446ebf94d3910b1c299fb5764da7d2373a4b01f9176b7845b252b4b2ee35f784fcd29e47747c423a3f2e91479c8d887704c3433e269e76da6ec6d03745dfea1fa1da1b3097bf57702be7a029f175e6e2c34fe49351db79521ead27817f5715c27ccbb19ab23e2b93f3ef33fd6b1a1a74c70527bfa03381d37c65f23358805a9d09c9f2287c9a264d97157362f85b66b02809e2f58f4390d5e4f72fc6dc4d1fc0ea160877cdff483483dc4f7d5fc522ada7f5588ea25f67295cdc8cb76b9ebf3fffa719e4e08d1441d1514c1c7ad3e1bc8394c8b4d18160192ef666fcd4f85be24e44d492181f69cdfcf7bd1097f01bc6976280893eedc3aba2208bcca3558ee3aa6a9d5a072d5f6e6bc0df2dc627c63642a7a5d389edf96b3ddea934e405573640512ec26c8a3607d24211c6d46a1debfe88bbbd12d2c7beb56cb34589f47640f35bb9adb66c32011b096a82f2a705a2dfe41800e4149b8572fd1af64d19496d642899278f6657fa6ddd1c2e43d1fe5a9f674388369c3a34fb1f9074d81d7f1f5126e3338855a26363d354e6d43a4f749803307054ba65c5feda7c2d9d35318d70a42605a89027307575cf161a021e11544636e414bb7174dc950edb2b305a7469e6d581e7e9384d72d0728828b9413c945a0ea64ea1f427519c8c23ee", 0x1000}], 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r2)
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x14, r3, 0xf01, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008040}, 0x10)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) (async, rerun: 32)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, 0x0}, 0x0)

3m53.242259713s ago: executing program 4 (id=76):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_dev$radio(0x0, 0x2, 0x2)
r1 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800003, 0x4031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000b4c000/0x2000)=nil, 0x930, 0xf, 0x12, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mremap(&(0x7f00000b1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
write(r2, &(0x7f00000000c0)="510003000000", 0x6)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000430001082abd7000fddbdf25020000001d00010000000000", @ANYBLOB="ccce156ed7d0005bdc0dbdb51c87b99320a8cdf5e75dcf8837ed3857d9108d0ef4ba8ed2545b7831d5824414eaf5e900c88ef772b805629381ab94b3a324fa7a7a8f2698438a093e57eef34f69368db128dadc36f3660c3517c41d65f2ba0300000012731a76fbef0ece9ae5c34f0e4ec5227dcfd3dcd7ef41561e8a900eb102a0cbc475b74a7725d064234fc6dc428ae5ec5d43227cd82a13437b32759e7dbaa3d2973f4006bb392b04c2a27abd5af6a09640a66800000000296fe586f79f29f4d871e7c5d66b643f512823dff7088930440fbccd043f0cba6c6c9025528e69231153dfaa", @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x400d0}, 0x4008044)
read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x301402, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x81000, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xd4}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60"], 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2000000000000135, &(0x7f0000001a00)=ANY=[@ANYBLOB="d0ef7ce52fbd5c47972945d95af30bb337958a1ca2fa9b6928067b80e4c800e1e76737654a548daf64eea98d94767c606cead5357cec02ae4a57a021c1cd00cdf0c55bbe38601a4cdd27b84f975a0f3bc34c087518455aeda647b40195906644f3c4ebeb7b26c313fd4a06f7f78c1980519e96e6fc7231f1560f86109d2b774cf3697af492f56ef1d5ea626cc483e7fe9fe213fd213dd83e0c83ed3cdc06e6cbc70f0d421d9804983f9afde2707d03c91a32aa6d612aa7735c8f019655843e6846212dac3effa6649734aa83e34a0130db65cd2e49b4bb898a0f298a88d961cd8853aa6a3842eb69f832ad1d15c8d1fe7c0d2680f3ff77b1360c349d8b412dfa9c840c6214ee8e4cc3e98be5ebe5a5b0c3686d46d7cd4d5763a045a27e1d6d8bfcf1cf368b722dc6de3ff4e11e4405fb46bc10bb2316e36f09179097016a948eb0e8a2a9171d1a6f329128add16cbdcf194de76814016378afccbd707cbf87b18b5872957b763384f49c782c0c59110e79c5850227fa8c7929e9e916e98e28bc3060f0c57a46475a36ac81a5d400273fce732c072db9b0619cfbdb68c045d3fd04512305a0b83020e25b161aaefa07ddc82b809de92d9c520a27fc4a394a9395cf5d3068140cac971be3a0728832dd12abae58ba993dd604ccf63e582e2e038e98526e82db6cec750e1f43cb6e911e96ba3e563acab01329e8f3c7cb0fee04e2bb1d5f47dc6a8fee9eb2e31db9e685eb010cf6f48934f8eba3bb46e49b0e5da879e9bd1467dac722a582cab8655453ffe61f5ad59409a4d620c4480a8ffc43384f5a15e1831e74b93fd108dfc0f9621705088f628b4970467ec51a4a36b8d08dbf953217267049faa1f5a517648872bf471575158f17df5b8b701c5df40d3bf876b12bcf56b4a9f068d3777d8c65ef94a605966cb27cf492b2d6ce4273d5cd17042a31646747068d89544a73c2d08196490dc73b4bfaa6d668975cabaa143efba2b417fbc3ac41999c111ef3d652cae53366432ddb46fd03a6a1f43d9dff7fd07b26a3ebaf082facef2e6202db152da371ab508fc0b3abf8f8fb5b1fd2555de6a6c88074d3ce4853c4e6d5384912b71f14668ac17284deeb7d9f4938a2f74fcc0c2fb835f430998f1f4e3e2a2e9c3f380e471707c922635132cf0c5392c721db53908992187f739c08cde15dd260fac04675da08e1fad0abc5736e9420eef4ff9c126ba4501a95332f0aaa0630db6993f62ddc0ae473c8ac9ae6972434d1146fb0164b0087bddebe9a7f513ba1f90882b4866c4ee53a23b308f86a78e720f49f7d49afae8accec2623da84a0af31a5e764ec934566cbbfb65a46c5c6324a820ceebca243b17e7f9a73e0c36905bc23b8c027b63ef64f266a8385280882fe0ffb46232cbe7322a134af2847c93dc53e4e43a72dd0a4606acba7cb962348af1331f494b1f047f0d38d540f150a19d933261126656aa16f21527ac1300e82dca7877d45ce9fcd1e1bf9ce1d11d16b7f09fa7b65e95273ca3565865ea66c59322bd78a7cc9f373b5987170759b7be5b15ddc1aa9cb53432ca95b8fd099f04bd743b6dea6bdb77370e86e5da991277aa6d9f50b9306f5d8490538ee76ee46148d83e27cb44243e4ab966d2e659ffd7887d0fa8e0bece00a2b93fe82e389e137e53258ddc968f06d5af4628411d82a724a38faa80cab3bf7fa126aec3e25ba597fbe647c9703b9b6afc561ac005e2a4fa50ac92164d1325b91da0a0b8f3db87641b49969ecf60df2a0408f3dfa03b46d7292b600dc90de3a67b4530b7e6bbb9e0bdc4378740c9517abeef420f13e59f3c9455c3fbccffdebeec73b25b1bac01f58d4d5da28222817e209be6499b507614dc1dbedc172aae6cb21c19bc35bafd0eb5085211e50995aa2762494e960828286d59c83da0b89a61fae916dcc946dd1429704a49b1d9f228b7f6e416509e20202f7581c68682f3b515b660da6e2341fca73e625c3c8fb2572d924862da11de253c5912994bb0b6648fcc83d3bb831c49a63238b189e05607dc79bcc64405c4232a679cdb8d249ea3d05bad6f3a6f9186649d50c14b0fc558c2e427597445596c213b59259a1e72d7e5b6048442492fb6314bbdf6d6459ef395075895dcbdfb17fc4691fd53bdc4815534887a873ead561120fffb08a1baa268ed82e901e1aec44f2402f0bba7260d762483be5b871a475d53419e1ff817c6a893a1ce81bc07d421095fc916618773d4d8c448ca13706714808fe197fe6cc8700d1e9e28c98740f39932d4eeef5fac56d1ef02b0ca93195b8ca3135cb537a79ad03a083d6ae460468a82b0905bf0e43def92f72748bbfaa8a749deb07364e564a2a841f784db329c5ee4c0f163bc55ad85f832d9afa500d2b4f0ef3872fc1feba6d3dd8b79de222767dcd576ce1310ad8576c65548c3385e9841f8b6f46bad3ab6363671b219ff25c5468130989455ac41db963dd59e21aa59069d49d8693c3ec8ac5e7419c1acc5da3c6cc4e6f848238d358133e02c4e4d7a13388c6a8363d78d85a5fd3e5340e5cba1cabeb8116bd917a16544a779aaba96fd832c5702126390e48990f0716ae3ff799eb145b13567494ca5aa1910132db7982f29f59b9b7cc8b8647400faa992749e48ff7b94d81db0b50559d2aa45052b2083ae406a1e8b98d0f2e85007277f2f7860132b64141b5d2b45b44f5061bda42d14e321ca118024293e47ad6d9818577351095ed026f18e6eddfce493904afe60d9da971dd3c7f6c48e3af1c8125aaaf2a197d2d4e708f2739d24589e07a271b18ebf68e6db0781abd7548578f2add05ed87baaa97163ab90a469c3beb13d88118310e2ffb1f7f4b4a5a81bfaca8acce2424df03ce908c29c57e1906377ef0e9bb65d1aeec4c1e0437996f80356b5da55906d1b1e53cf74ecc0058ec4c7de368cecda8410d440006115ba9e13aad603bc9791af2ef7d8681526d2c0b6b2b691f64fe44049463cbfef195395311c59bfb4fbdcfe76f0c005433f9311671bca927f96eaaa2e0dc5a0a9b6e6f8a6f969182bdc2ad44de0331f573c8a02a7548ac0bd98682ae21ca7bd2bbcf1bc13817b1d6d43867aa5aefa446ce341c804721898490b4f66275024102c8797843587297dc34fb93a3364b5b6f98548de1b239efdbe4f56cf7a7fb732fab10818c8d482253241eaa05d24baaa88d31010701199f7af1f4bd0801e241bed982935064b00225902e6dd48ad37e0278e455d1cdd8f7bac2ac54a00288fdc9017d1bfc29aefcbd40284703b9c5a48b6a8b26a3051ef07d30c84c8c85919f5bb6e722f8dea8d24b7cd856ee9cd261b96aefb48cfbdf3ec90f6600aeb6dc074b69940a47d8c9cf30ebb36dc986cd3724112f98fe37e867cf8315650624e7e55bb406df6625cd77c5d3e5f0c1607157705ee6e6093518066ab58233ce6a17117a8e83d0b7d9b54045f7ede19605955e452c5c611df3139033c973912061277a2b8d0f43c7196f6a6d13886e44e4500e915766a41c94ab24a0171802348cf0d86a9e1e540058a43076dc17acad395dce288aef0688a7688bf3a1573b4b1dd48d3d8d0707da888791d48a87e2c0781ac82f9ea7cbcc5414960fc2399f4b110940c7e62801d6f7788722d33fdaa21092b0379c4706fb7651c915a836b6b4b431df6100b2e3b5cee224dd05eb73e4a2bf4baaa152230d0cb72aea7d8b07520d1b1dac14ecaf6134a7ae63eeef6ace3e4205cdc9839b41c5c8b28b96bd615915a5d16ebd80b0cd69958dc1d655c64b421c36b15c0df22be4083545927b26fe06607869cc07c721b79654cfe3d075224cf19964e7bb8e3be343d4a5433bf176fad19450da65af72e38f0fe0f0995a002c627cae25bf26b583c39664dcbe2b4e203e5baa00c7f114b3252ee263c45de138bee54b333f48ca4804b00afc5fc6cd77b53089f8a6b13e9f593f5f2c0801963bc21b5c72a9884efc110c228981e957c2ba1d91a916ea243fecf1cb0b55ddd6966c79d91c7309b30fe6536b173f37829e84c15b481dd3944499a4ee33523c89ff5eda6d9202bae5cf6d5d15d1c3f375c6e37e242c35a288bd0fdcbb19ea5f91258c1e96916abd7c392c61700f42906c573c0c074ae580c4efc186f2b3ddc01b1eba303cfae324b5ec5912be8922e14bdde277ec997e06d1d4b654b21ee96ac2d0671ae2588094c300f55f6335e47e2bfe533c03f8f1026604b274bf58b004784331f5a5807264e75b4a5f93f6569f7fe812be30b404254b82fa886a4acc7f8bc077aeb991e7d0262db990e3659693c8f84a3874ce04f6227f8949a7f7def6cb63d6fa5ce559c3a452308c09d2bd2963bdb5eda86bb670a2bd677f20aaf8c5cda8d04b75f84e337ed0648c08e40d8a6ac66ed718f871736258405c3083c4ed71e06dac4c4a4ea57afccf8d45456f9e5a5e8d9c67749adc426d6042e89cb4836c8f8f121cccf802f69c541e9ff4b935719b665305be9240b4f5c14e34b0eae5a1fe0773a84e51e1f715b8d72e296a91744dfe1b31efdd99f298103617a9fd06840b298c193fbc8b1388fea1d13d253b77deee142fce07e2c86aae594e539fb2bc6d042006869433c72fb73d0a7dba091a1e159fb3263040cd7ce90b35e8bda1e19c1ec31a3ea7300953b8401be670ca85ec38e07ac1590888bd818973b3dab9dfb992ae202f5d40d966542e8ce2e955f09cf726d5c295cca73462107da22dbe56c539631368916bf46554cc5bded546e60b037b4c3ce962e7a4fe47efcd41eec228acba0b57413bbc66084a59904991652610f6a4f3fc8d44d33c2eb94e4605da1c79e90e11fde9d9547982cc69860b4526ad20bb33b61c41e28d1f29f5d28fcbdd15406f79c746509b482d6674e86c8425c062bcc521e62590baa70a8165f391d3276bae33a9c36960f52608da9d72cd67894db94ee144492265b9bbbb9cb76103fd85a5998c841cf5cb1f6990e30c09f87a0b6beb06592289b5a9f1e73dd527d44f529a964ae62c278fa79557ca097fc4140a5c98447805bfa86a5e0450339bed061b39fb551c087e1de5be583106b732f595a71231c4458bda14863de7629921929da648277c28f193f507d341ada668846a18178dddedeeeebe16275e61075ebabd0c330d108fa134e2ac866009e70c6020890f4d63bb46b0af42388614f53b216ddcfeb7a0df756045007777a9c28f0a2155c5829fa740d3992dc42e54b416722219096735eda66f9604377f3c563ab42e38e0ec2a9e91f879b02a61594df1d20dad0a6b9ce3f41effec7a20bf511e6f8ee04810ec30caa2ddc3bc5d09025d7aa619b151d8e19e4005ae74f00e53c857024337da4179dd4300cf5375840a116c225abdccfe6fdb60e4d25b79b22225f0814177303c7e3d5ea650935e4e14a8512d4919245701036179a78340c8118a0236ea40dd1e86b7d76b385e0aee74bc53fc1b3b45f9f3fcc9e49140460281aec145c3d788f4f811fdc8dec4752349c42b9ea8c0489731a52f09a486f2e44d3f3e357f653b96cd102aa896873f3fc279ba814fe64f27c910743d922c8d76b1ed62f63071cb5ed54186dde72d35cd6ffcf31d89e7307604fb0d2e78030b1560b891be5e026c4edaeced5f634526426402f4c085791ca990a6dc5209f9bcc67f5de87600a997b0701f22d84e327ffadbca077ea0dd31ea40a94d6e464ac8a330af7d36d9d0ce92bb6ebe6afa8104bceb6808c67b0b7e2bddc20aa975b7c0f9aacb7428e87ca3f18f29826b66384e0a8549919eb4ea3b9a9c74646681", @ANYRES32, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1b, 0x0, &(0x7f00000002c0)="15b2ae9872ec8228b810000000000000a4a601e1395a5d546b4b40", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)

3m52.674412742s ago: executing program 4 (id=79):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000480)=0xc)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0xee01, r5, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@allow_other}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_eq={'euid', 0x3d, r5}}, {@obj_type={'obj_type', 0x3d, '/dev/vhost-vsock\x00'}}, {@smackfsroot}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vhost-vsock\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/vhost-vsock\x00'}}]}})
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r6 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='cramfs\x00', 0x208000, 0x0)
r7 = pidfd_getfd(r1, r6, 0x0)
accept$unix(r7, &(0x7f0000000740), &(0x7f00000004c0)=0x6e)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000140))

3m50.944276595s ago: executing program 4 (id=84):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0xc0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508"], 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6)
open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="887e9a45dced3a3da00eab089e729b498d1f0b62a817531e9a40c0d8eeb30bd4b667471ad0944dba27da89c834b9718752ec5d3e440d56464d3fac04353ba810000a9e9b1622a84870aae580dd37ee03965e18f39149b07065c4488f652cc7de87d93f1837a187cdf20794079b607a2cab1ea312a9", @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xc80)

3m50.635319012s ago: executing program 2 (id=85):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000500)={0x30, 0x1, 0xfffff801})
ioctl$SG_IO(r1, 0x2285, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x180, 0x10, 0x1, 0x70bd2d, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x6}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1c, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'cbc-camellia-asm\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x2c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
r4 = fcntl$dupfd(r1, 0x0, r1)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2)
kcmp(r2, r2, 0x3, r0, r0)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38)
sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0xd63a)
write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x10}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x0, 0x5, 0x3, 0x1, 0xe7, 0x80000008, 0x0, 0xa82, 0xff46, 0x100, 0xcf3, 0x9, 0x1d8, 0x2, 0x6, 0x101, 0x1, 0x1008b, 0x3, 0x2, 0x4, 0x80000001, 0x8, 0x2000007, 0xf, 0x5, 0x3c, 0x5, 0x7fffffff, 0xffff, 0xfffffff6]})
write$sndseq(r4, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r4, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r4, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @result}, {0x0, 0xfd, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0xfd, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x40000, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x32}, {}, {0xd}, @time=@time={0x100, 0x2}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000080)=""/150, 0x96, 0x59, 0xe, 0x9, 0xff, 0x28}}, 0x120)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsync(0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4008011}, 0x4008051)

3m50.053652456s ago: executing program 2 (id=87):
r0 = io_uring_setup(0x7723, &(0x7f00000003c0)={0x0, 0xaefa, 0x800, 0x40})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)="34d03d1e5a713de24a5ff135fe4e1dde11bf5e", 0x13, 0x1, 0x1, 0x5}, 0x1}, 0x1)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m49.422024122s ago: executing program 2 (id=90):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = timerfd_create(0x8, 0x800)
timerfd_settime(r0, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0x8c, 0x0, 0x20000}, 0x20)
mount(0x0, 0x0, 0x0, 0x2186a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008080)
timerfd_settime(r0, 0x2, 0x0, 0x0)

3m48.262483549s ago: executing program 4 (id=93):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x121a40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{<r1=>0x0, 0x813, 0xffffffffffffff28, 0xb9f9, 0x2f6c, 0xe, 0x3, 0x1000, 0x1, 0x9, 0x400, 0x3, 0x0, 0x200000000000000, 0xc}, 0x10, [0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000004c0)={r1, 0x8b})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setuid(0xee00)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="cae5fbff120100001517"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1})
io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$TCSETSF2(r0, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8})

3m48.258419754s ago: executing program 2 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x488, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) (fail_nth: 4)

3m47.793936035s ago: executing program 2 (id=96):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
modify_ldt$write(0x1, &(0x7f0000000280)={0x56, 0x100000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c008000cc60f8fbf6d1a1b0358ed9f4f252614f1dd3537bc980e9ddae70601f58e78effb7274adabc92319237c7fd198ffcece7620b8c3b8767c2de3bfb6b36453f030351a8ab59185dab8c12feddb3d9174e3efdcd236586a43c", @ANYRES16=r1, @ANYBLOB="200029bd7000fbdbdf25200800000800ffa1", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004800}, 0x44048001)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0d0300400000000000001300"], 0x18}}, 0x0)

3m46.758374443s ago: executing program 2 (id=98):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
r1 = epoll_create1(0x80000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x503000, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = syz_open_dev$vim2m(0x0, 0x5, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1018, 0x2e, 0x8, 0x70bd29, 0x0, {0xb}, [@nested={0x4, 0x3, 0x0, 0x1, [@generic]}, @generic="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"]}, 0x1018}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x84142, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
sendfile(r8, r8, 0x0, 0x200000)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e60, 0x4, @remote, 0x3ff}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1e})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3})

3m32.817482098s ago: executing program 32 (id=93):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x121a40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{<r1=>0x0, 0x813, 0xffffffffffffff28, 0xb9f9, 0x2f6c, 0xe, 0x3, 0x1000, 0x1, 0x9, 0x400, 0x3, 0x0, 0x200000000000000, 0xc}, 0x10, [0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000004c0)={r1, 0x8b})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setuid(0xee00)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="cae5fbff120100001517"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1})
io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$TCSETSF2(r0, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8})

3m31.428273061s ago: executing program 33 (id=98):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
r1 = epoll_create1(0x80000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x503000, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = syz_open_dev$vim2m(0x0, 0x5, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1018, 0x2e, 0x8, 0x70bd29, 0x0, {0xb}, [@nested={0x4, 0x3, 0x0, 0x1, [@generic]}, @generic="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"]}, 0x1018}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x84142, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
sendfile(r8, r8, 0x0, 0x200000)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e60, 0x4, @remote, 0x3ff}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1e})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3})

1m11.30572331s ago: executing program 0 (id=547):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000005c0)="b9ff03076804268c989e140500c9d35f2527462d022c44683e7ad1e547795f2c78462d370e5525b031a4c8d727c6926c7c8508b4fded", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)

1m10.820100555s ago: executing program 0 (id=551):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000100)={0x28, r1, 0x1, 0x2004, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x28}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0)

1m10.448284794s ago: executing program 0 (id=555):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
sendto$inet6(r0, &(0x7f00000004c0)='+', 0xfffffceb, 0x8001, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904004679d37d3c00e0b0000000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', r3, 0x80, 0x24, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000680)=0xce3, 0x4)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x4, @remote, 0x5}}}, 0x88)

1m8.364991465s ago: executing program 0 (id=557):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f00000012c0)=""/4107, 0xbc5)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6", 0x61}, {&(0x7f0000002300)="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", 0xa09}], 0x4, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080)

1m7.161885394s ago: executing program 0 (id=561):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000005c0)="b9ff03076804268c989e140500c9d35f2527462d022c44683e7ad1e547795f2c78462d370e5525b031a4c8d727c6926c7c8508b4fded", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)

1m6.430871301s ago: executing program 0 (id=563):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x4000000000})

55.951393349s ago: executing program 6 (id=588):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x1c)
fcntl$notify(r0, 0x402, 0x80000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = socket(0xa, 0x3, 0xff)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000040)=0x7, 0x4)

51.576310758s ago: executing program 34 (id=563):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x4000000000})

50.140720794s ago: executing program 6 (id=602):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), &(0x7f00000001c0)=0x4)

50.138918598s ago: executing program 5 (id=603):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r3 = dup2(r2, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)

49.40208607s ago: executing program 5 (id=605):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2a400, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0xf0ff1f00000000)
capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000240)={0x0, 0xfff, 0x7, 0x0, 0x1000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000002c0), 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0xdb, 0x69, &(0x7f0000000280)="dc6697b7bfc967fbc76003e51ae223a83d91635bf3379dd2bd7abc6ff151f6c25299b477150b1f8dc0726be24fcb7ed0e38829148391abcc9eb78d033501f9622b1cdfc59c9022d742361345abbc9ad442fbf13bba90874c4c7bb3abf2204a732562325424ce1022ef004bc104497df840d5db10f15526b86a4a671f156e9c1b1fa89ad99090bf6a4016409f8cf597f69de000aeac9a2e0fca9c860303b021a332d7314510bc7570c1f27d3ca68afa6c38c3ecb74b26b6e2c2a5e1474509bf81cb27b4f7960e07547787210b7a7da46704117832e7d8967cc84653", &(0x7f0000000180)=""/105, 0xfffffffd, 0x0, 0x92, 0x69, &(0x7f0000000380)="b1cd194ea0eb251a5e4ef3a5bb5f109c8f9e2f736f3496f9ac6698a941649bf077531d17f8bfd9e6c6eb54b4e4af9c586813c8d2d992183b3c705900f0b1f1bad7d05a520fa3b9800537fbf576e5b7e4c4c6beae68d2996fc2d195573f2b91d74dff0bba146827ae483c41e79580ccf2ee7a98f95a1cd89b87b244beb6fd642897f821705d9363141f3c95cf9768c71ef091", &(0x7f0000000440)="1e47b89d88c1c6e7e3a8b9d2a5c6485202af2d70f57d784f085ce39cee0c3272c2d3d2c8055ae67118e3d728599603aa8a56f47fdf34fec3d89d6e5eeb61ef3887c4198d9db8d682fe5b38478e6b6a3938420f11484f0ca0883600709b90714dfa8fb50c152885f6ba", 0x4, 0x0, 0x1}, 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'macvlan1\x00', @random="00050000fdff"})
capget(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000200)={0x665a, 0x6, 0x1, 0x4, 0xfec, 0x1})

48.499576271s ago: executing program 6 (id=606):
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

46.181600427s ago: executing program 1 (id=610):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0)
r4 = socket(0x1e, 0x805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000007b40)={{{@in=@loopback, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xffffffffffffff28)
read$FUSE(r3, &(0x7f0000003200)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
read$FUSE(r2, &(0x7f0000005240)={0x2020, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
sendmmsg$unix(r2, &(0x7f0000007a00)=[{{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000500)="659a95929009be1d4396ee6be9249d6016aac7b23f5172bc027a7c866e7a2b9ca4d2ed91f93a4bdc5d4a029879620234b1f598470aa849fbd2ff891ce967cd01abc0c6e56852c9b57b3eaf5c1dba4a862c851457aa819f3caf0680f1a877a5a8fef60b8e3641e3326691cdf392a193e33e3ea387b83e5a2a413a405fc51ebfe8f016e964385461b86b", 0x89}, {&(0x7f0000007c40)="ee696b7c3f93ab21ca75d5a361d8ebfba33b20e243b4bdc8d4c11d9643e60f79b0f9eb282f2d7713abb7cb89343071d62ad6ef90bb59853cd8bfd090189bb9c4ff727d187d754fb7a0f7b2e0cbc6ff81814c313bd7187d7452cb73759feea6a3e6a62fe651a4fdf4907a9210fd7f270669e94af6a9e6ccfe81c63b", 0x7b}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="14bbcf2a5849ccdf74566193b1e9590a5c6ea3049b1a8d82c6fe2019b0402859660f7c9dca70834d3751b03ff5dd7137de03ad1a07ca30d4a8cf3d7f92fe96a645cc08ade10c27487490b4f20a101c307a3ffe8d", 0x54}, {&(0x7f0000001780)="522e0a3a6c6e5de8ec60389f703e6a6a623fb02ec3c46006afa06d40c8d199beaf1bd979bf16b1e6f0d6d9d568afb9211614a9dd370babd978c261fc16684bac45bb6789136f8b754afcc27a397b4c9acc2580be52dd8705cca91751f31571288a6505b13fe520", 0x67}, {&(0x7f0000001800)="4f7dac80b565e144976be7fc212e4d3e263df158534ec21eef9eb8ba14274fc6c02e5d77637bfc720f49fc52505c4044b1f89f404881b2406d3a83c914c2220eca23b89bed7170d31461fbc7dbebcd762fe498ec1cdc9c4b5a6e755f7515c15619908da8ab167f3cc8342145c35495267b64f0c2a07f8510e480c4016a91db28b4d8f67eb95d89bc1cd345ecb8f644dd326b8128992a05b9fad0f2886160a37f2122bd765f15475cd112470c16d84a3d41dec143d1f6d858b9130c87034d16b311", 0xc1}, {&(0x7f0000000280)="0f2ccc4a4fd085038165cbe9c4060f4c11ac120d6c2d4b6a6642cdd5037691721a3dcace54372e704185f200", 0x2c}, {&(0x7f0000001900)="8e695f371f09537af0f1adf9940d01d27581cf8b2f7f77db5d6d2f6c34646b3c2c2a562972feb827312dff353e4e534e83061d91febf03f7f65cf7e6e2ae2cd9e308a00c980fd91337327f1753a1f76e6ddbfcdb69dbeb6ae010347dc53ede83290e2aef1097f15fc7840ee1cf190414bfb5c5b5c23e6f7386b5318bc1cafc747ae3b02b65736f04714d", 0x8a}, {&(0x7f00000019c0)="29f3b36894dabbdd30e67013c4b9e8f4ae11632424de95bf217e7c953d0c0affad5dc3cbf4789e5b1b8d81dbe16cbc122225bdd804e1dc457ceac388356f3f59b9dea832c71f2d2908f909eaf93b2c19612b8f2c5de4d59b87cf62849927aa97f272e81c745a20a2c15e375c8797bc0dd490f687d96d6bd509c0a58c592ee52ba02ddff5f9cb9fe74ecc18daf7a04e67d5d5d36b3330ea64a93e8e8c445d064609cd1bf54e416bd34f35c3d20aa6c1963b64bc9a304bd8f988d373836ca7f3a85ce7a7267dd4c58c5761b79b3cff282fa4940ce0966561e11b1ad08bb29ef5cc42ea5f39", 0xe4}], 0x9, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r0, r5}}}], 0x20, 0x40040}}, {{&(0x7f0000001c80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001d00)="800a833ae3454ae0a790c4f9c991edf6f1a3c2d5a2b0ce69ef831da47a9d2f86ddcb96babeaaa149b14c2f12aaccfb737bd463e0f258aa498ae6a0f16fccbc1a7bdd05dd03739b814679131b73b4e799bc2a16de2f9106", 0x57}, {&(0x7f0000001d80)="c93de851cdbc64a36b27096271b1ebd12358fb5a541b270d545fef3602e298007a", 0x21}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)="0f46ca4d19192ca1604ed8009ba02a15d87bc40dccd7d6d7fa1a2d30b744b4085ea8b049e7761186b5f4cfe0d152a84835933530770a8eaf2195e158f6783dba1ed25a377e178990b8626d40a2b01b802c109b5a5b8e63859f77a3a858ed878094e6a677c90b7d7802783214c2a6f3d4e4e21cb74b360ff8c5b0f6148294c1ba53ac05909b90bb7b86a4489c80e4c96662da9c3ff705ffa65d5203683d18a2287c648cd2172ab21a1ae990137f0e7dbcebafbfad721335236c295ff91adfbf2c63c912f1567cce2720a6c270ec62f92786dcb23ac73e8ffae4d52fa9f490c905793d3904ed690a3779674527abda022ba3fd", 0xf2}, {&(0x7f0000001f00)="9438d019fb2c5204444d575426b58b7e6360c76d9c020997b3db369da7383c35358e86c203103638f827c1d2e54f550354b14342d024eed6439de2ee8a48dd29dc70dc259c429bf8ac4949969d680b03e33ebe9a863f20e683bc9bc064dc27537466cafb8bb1a30375bac242c24b0016f5bfae5d98ff771bdb5a2e733d438d1fef89523e8ecf94cb5ee3f3fd1386b1c42ccd755aa6cc11e40d465faf1feef0f0d41eaaeb0d20c78a01db9cb369e7a79b5f12", 0xb2}, {&(0x7f0000001fc0)="b3fa", 0x2}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000001b80)="291858d0fbc9dcde0cd9727594227d63cf8f564fd36d4dcb93242dab4d703a1da2e59209603a5989835b20ffb877a0ca6974300307e7739bbe9e0923e079eb2281775074e77271915da96e7bda1efa3bbe549dace439906bbfe6adaf32e40a03fc8992f4db4d08d9d1287bd8130b4bbb2027c0a559841b445fb83732a81bdbfdf66d15f9e293fd1ad1bda141fd34", 0x8e}, {&(0x7f0000003040)="8ca4de179c4f642cb98651512c74863419b885aff6fdb2adaad4f9a5bf74cad0390d0afd825b59d39fd3aebeff8d0093bf6bb32c13aee76f79e3c2e726658e728a20b7b461457bc8db90fa5c90f51ea52d838cbeff57a3eac84e44c2b072951d5709dea6f0b15e2f65a5a4b788cb62b08a7d0006be66f57f7782e343bff2afe09249ae15aa83e9390eb68f0ec6ef", 0x8e}, {&(0x7f0000003100)="cad58742e459fb942c8b0b8f2812bfccac344f934edc12675e7e14e59738abd3", 0x20}], 0xa, &(0x7f0000007280)=[@cred={{0x1c, 0x1, 0x2, {r0, r5, r6}}}], 0x20, 0x100}}, {{&(0x7f00000072c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007900)=[{&(0x7f0000007340)="30c79be8f4e4147e74f8eca93a309db37d6e97ab8ec7d5d95fbbcdb2d894c9b3b01f4a4d9d29886c6dac9336f0197359b072a042ebc41e8435348a3e482a64f96b1f2ca78a1dc46e3185046464f360d5b411efcc0f35b4180622cd7f62c5dbffcb2edbfda9038124c05f1feee28bf4c366f682da175e07c063c9b26ffb993b82a31f54727505b10eb308a4c93077e146415a91c22c9027838f0753967b521a74c809d47ee6f7a87c1e8c9fc5c135ee6eb6409d89e5a95aaa7a539c023e2b72149caf26526358549cc6dcd66f84ba6205fa8bc9273ed977399437cfa5ae", 0xdd}, {&(0x7f0000007440)="df32ad7cfbac32ec118fe7a1", 0xc}, {&(0x7f0000007480)="9a7978330be26ff97225ce57942d8760cd3c32d9dbcdeff844ed2d0f142afa06075633969660e6572ae8654951d6f09ac9f4a787f07c8990b1b76c953f276db7461780aea09c7096d63801d0c0e13e8aae775257324b4bff780db890aa3d00a204c4d4935cab91044409f0240e87446c4bf770b87d59b413cbb45586f939e9162c2b40b50f166188301abd12cc98b6859983dac1521424680442be23860ece47fa81301fe732e0b8de2161f014421339c96ca6e9034c4d48dce4d5821b710b4d7605be2879ac6984667c762f898e0f7ab01e29d6", 0xd4}, {&(0x7f0000007580)="87019a2bb2cb68e4cf299c6711d7dde1595a5b2cd156e7069da6c5ec3aa9ba87878ce3182108b464a01dd3ce3fbb9cc682b92ff6e9e3360c44e029a18bf3d78fa4490673aa69fc8b0574b2d36a84aeaff582a16cf85a1e10d2063f591f64d6aa0ff8d0b4e30f3beff06ef3d3eabbfc6ec3bf15b74be98080bf6f59b27c0ba11be6de4e80f0d3b0b1e41beca8ab54cb87c590e66f68ef861aded3cc5fbc8741bf10783cf6995e3e24f8eaba8f1c46442e8e728782085f8d029cc74c758d53399fcef6ddadf302e50b10350b241dac1732a99e39cdfc6bb172c8b219add8a904f64fea6426c55407a2e8eeda5c72f938", 0xef}, {&(0x7f0000007680)="feb254e5e14d0b18a5e0bcd17d2d8e44c69b64121583d3e0a6a004ed19e9b0eacb4c9aad64a4667349f1da86dd8eef0c6300f501cdc84ddf0056af663ae20a179437ae9c5bced86927a74d25b344", 0x4e}, {&(0x7f0000007700)="cebbaa19247bfb21c72b709c32391f9da276e9946e9fa123d926cddd034cbb5e78dc7c148115cc9108805d3d4de4a3309f5a912049fbcfa0a04fe6672f5ad54efc592ca2551b", 0x46}, {&(0x7f0000007780)="bd5e7b9b8e0baca5141d5a117f214ec5837943c4ccb3bdf68492e98d21340663f51c6e98e9f8dd8647704fd8eeec91417f98d0d5e046df1cc22fcd4548b347fb1629c3d07506f8ae6ed4416fb98888635669f716abb656c9783a6c53778c87ad09833b093b59da88344c9973eedf5f93d9cbad4ccd1aa484ab8dcef87a37595af0d333065da801d867fcc89b1d", 0x8d}, {&(0x7f0000007840)="f3181282edf3a9eed3a97cac9ee8a469d90c67956c116d531438150792b986e95afbb483beeeec175320a8a845de284f21f98f37abbf1676584aba93d59925f7820c602434d34b4f6edece64983c0935b103af365ea8e830cec383b227dab9cbb23be4c5dac8bb", 0x67}, {&(0x7f00000078c0)="f5c167cf9ee05cecace9e989cb37", 0xe}], 0x9, &(0x7f00000079c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x4004}}], 0x3, 0x4044010)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r8 = dup2(r7, r7)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00')
ioctl$BLKTRACESTART(r7, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r8, 0x1275, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007ac0)=ANY=[@ANYBLOB="020000000400bf7bfd7c069494f50000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a7000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)

45.213657738s ago: executing program 6 (id=611):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0xa0, 0x0, [{0x400000b5, 0x0, 0x7}]})

44.937674461s ago: executing program 6 (id=612):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x3f, 0xc, 0x8, 0x9, 0x202, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1e, 0x22, &(0x7f0000000740)=@raw=[@tail_call, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff000}}, @map_val={0x18, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x1, 0xb, 0x1, 0xc, 0x4}], &(0x7f0000000880)='syzkaller\x00', 0x9, 0xe1, &(0x7f00000008c0)=""/225, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x8, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000f80)=[{0x0, 0x1, 0xa, 0x2}], 0x10, 0x92ae}, 0x94)
r2 = syz_open_procfs(0x0, 0x0)
getdents(r2, &(0x7f0000000080)=""/179, 0xb3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @random="7609844322f6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "89e45cd533ea583706291c6662ca976c565cb798f8a0acb2", "cdab3d400fe7cac18ae5da8f0fae2f0ffe6042e805c8b89f56f44c0faae41f5a"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)

43.627252515s ago: executing program 1 (id=614):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r3 = dup2(r2, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)

43.273827961s ago: executing program 1 (id=615):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000), &(0x7f00000001c0)=0x4)

43.063254522s ago: executing program 5 (id=616):
mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xcc, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) (fail_nth: 4)

43.060664665s ago: executing program 1 (id=617):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, 0x0)
r1 = socket$inet(0xa, 0x2, 0xfffffffc)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r1, 0x4)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000340)=0x8)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=r2])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0xfffffffffffffffd, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)={0x3, 0x5})
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 2)

39.391479849s ago: executing program 5 (id=619):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0x0)
msgrcv(r0, &(0x7f00000000c0)={0x0, ""/207}, 0x110, 0x0, 0x1000)
msgsnd(r0, &(0x7f0000000080)=ANY=[], 0x8, 0x800)
msgctl$IPC_RMID(r0, 0x0)

36.982755397s ago: executing program 1 (id=620):
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

36.588518526s ago: executing program 5 (id=621):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0xa0, 0x0, [{0x400000b5, 0x0, 0x7}]})

35.886695327s ago: executing program 5 (id=623):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="687567653d61cd5d6179732c", @ANYRES8, @ANYRES16=0x0, @ANYBLOB="b1eef58cb80a2e825435cd0a264b9f8e22ef3a096bbc5cab13aada384b23e99534e3c40ce7832ec39637b2e5adb2c098327ba40d520a6e196c663de01e2aa93ee27a51e124d37bf0a60809124337596cbfec215da85a8dd0e3fd404ffaa8ccfb1d191c27822e52275b2b8313cce4fd33690daedb7eafdd349cb486"])
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(0xffffffffffffffff, 0x6) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64)
sendto$inet6(r0, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340), 0x8) (rerun: 64)
openat$vnet(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) (async, rerun: 32)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x40000004d2803, 0x0) (rerun: 32)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000)
fadvise64(r2, 0x85f5, 0x4000000005, 0x4) (async)
pipe(&(0x7f0000002480)) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7}, 0xe)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x4b, &(0x7f0000000040)=0x1, 0x4) (async)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) (async)
r4 = socket(0x23, 0x80805, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a73797a2030303030303030303030303030b0"], 0x2d, 0xfffffffffffffff9) (async)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002500))
statx(r2, &(0x7f0000002540)='./file1\x00', 0x4000, 0x10, &(0x7f0000000480))

34.645906049s ago: executing program 1 (id=624):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340), 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$sock(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="2a7540ba7e368bf53332b193be41c22b61bad2f023a14fc9640437b7e856bbebc8492713d581198b666111b8eb266bb40580170549343c513ff70794b28a18399aa75a083053d01253d54d31ea33ab790f2f5a1f4c33", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="d83a83bc6572b72f3c3a1154a4a96caedcd288afae", 0x15}, {&(0x7f0000000140)="3270fc4b4c361586109ecf0ac9aa0ea49f3c1320f788e46c8446e4b3f54e3e485ec256319515800fa281da436d94f85419a15925c78d79b4408add5e48151899ab1b0ce62c8bca1926344b4afab8200b90e3f2cdf6a258fd15d93b3859ba6ec6a1e51a14", 0x64}, {&(0x7f0000000240)="0bd444716aa9b7081b12c35ae1f17da3794a33335e15b492000000000000", 0x1e}, {&(0x7f00000003c0)="8aa85b07fabd87f7dc8b934277eb4bd335468f025ff87dd6b5675217fa4592e1caac5c16c9dbe7431132a6a3fbf57e5f1699a81e058557c0fce3327f9b4dcdce33d66f8421fd8d539b92065aba", 0x4d}, {&(0x7f0000000440)="d071a24f724d619f40c92977cce66ec4f24a7094da08fdb3c4252112caaa72c4f23a93b93ca4762d5ef3dcbeb05445666354172c89e3bdad6053b6a3a2de0c0bf3e2a18ce012ed4a38d19931b6d563238a6e4430f5d014ace11d1df4af2256d566c3ab437aab045db8ca875a53e575f2ee758eb0a7317bddf432f948f5b62171ac917e8ab3c8b2be18d680b21e4d7fc7e6fddad07b89203eada55cf8e663434646cccef30428548e8488899a6160929c6cc5b2d86496400fdc4901464b391da7631b81e223c72567ed297c771e7191a4290d0a4a50cab5cd9311bf", 0xdb}], 0x5, &(0x7f0000000640)}}], 0x2, 0x28080811)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

32.173077575s ago: executing program 6 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd700000dcdf250700000008000300", @ANYRESOCT=r0, @ANYBLOB="0c009900ff0700000000000000002e00737b7a6b61b6060000000000000000000005000a00000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x5})

29.766676847s ago: executing program 3 (id=626):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000), &(0x7f00000001c0)=0x4)

28.694206732s ago: executing program 3 (id=627):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, 0x0)
r1 = socket$inet(0xa, 0x2, 0xfffffffc)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r1, 0x4)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000340)=0x8)
mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000540)=0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
sendmsg$IPVS_CMD_GET_DEST(r2, 0x0, 0x44049)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r7, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
accept4$llc(r7, 0x0, 0x0, 0x80000)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x43403d0e, 0x0)
ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000000580)={{0x654, 0x0, 0x2, 0xb0, 0x5}, [{0xe0000000, 0xd4, 0x5, 0x40}, {0xc00, 0x3, 0x17, 0x9}, {0x4, 0x7fffffffffffffff, 0x7, 0x9}, {0x3, 0x7fffffff, 0x0, 0x5}, {0x6, 0x8000, 0x3e, 0x2}, {0x6, 0x8000000000000001, 0x9, 0x9}, {0x4, 0x8, 0xa6, 0x4}]})
preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f0000000480)=""/97, 0x61}], 0x3, 0x9, 0xa)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x2, 0x8, 0x8, 0x7, 0x8]}, &(0x7f00000001c0)=0x54)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0xe, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x8000000000000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x100931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0xfffffffffffffffd, 0x83, 0x4, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0xfff, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x40000000000006, 0x7, 0x100000002, 0x2820, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x0, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)={0x3, 0x5})
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})

26.860509174s ago: executing program 3 (id=628):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2)
keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0)
setxattr$smack_xattr_label(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='security.SMACK64EXEC\x00', &(0x7f0000000080)={'H5/:\xe2\xdb~\x86\x92\x89\x83\xef\xf3\xbd\x19\xc0\x1d\x19\xb7\xfeN\x12\xfb\xa2\xb5\x88\xd8\xd6\x84p\x9eF\x98\xdb\xa0o\xac\xf5\x1a\xc9\x81\x83o\xd4\xb8T\xf9\xedY)\x9e\xa4l\xb1\xcd7SW'}, 0x3b, 0x1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r5 = socket(0xb, 0x2, 0xa)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x6a, 0x2, 0x0, &(0x7f0000000300))
r6 = accept4$alg(r4, 0x0, 0x0, 0x80800)
r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
flock(r7, 0x1)
mknod$loop(&(0x7f0000000540)='./bus\x00', 0xc000, 0x1)
sendmmsg$alg(r6, &(0x7f0000007c40)=[{0x0, 0x0, 0x0}], 0x1, 0x400c0)
recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1}, 0x40000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)

25.586344201s ago: executing program 3 (id=629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x18, 0x0, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

22.09806111s ago: executing program 3 (id=630):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x1000)
msgsnd(r0, &(0x7f0000000080)=ANY=[], 0x8, 0x800)
msgctl$IPC_RMID(r0, 0x0)

20.099821549s ago: executing program 35 (id=623):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="687567653d61cd5d6179732c", @ANYRES8, @ANYRES16=0x0, @ANYBLOB="b1eef58cb80a2e825435cd0a264b9f8e22ef3a096bbc5cab13aada384b23e99534e3c40ce7832ec39637b2e5adb2c098327ba40d520a6e196c663de01e2aa93ee27a51e124d37bf0a60809124337596cbfec215da85a8dd0e3fd404ffaa8ccfb1d191c27822e52275b2b8313cce4fd33690daedb7eafdd349cb486"])
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(0xffffffffffffffff, 0x6) (async, rerun: 64)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64)
sendto$inet6(r0, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340), 0x8) (rerun: 64)
openat$vnet(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) (async, rerun: 32)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x40000004d2803, 0x0) (rerun: 32)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000)
fadvise64(r2, 0x85f5, 0x4000000005, 0x4) (async)
pipe(&(0x7f0000002480)) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7}, 0xe)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x4b, &(0x7f0000000040)=0x1, 0x4) (async)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) (async)
r4 = socket(0x23, 0x80805, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a73797a2030303030303030303030303030b0"], 0x2d, 0xfffffffffffffff9) (async)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002500))
statx(r2, &(0x7f0000002540)='./file1\x00', 0x4000, 0x10, &(0x7f0000000480))

16.37138228s ago: executing program 36 (id=624):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340), 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$sock(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="2a7540ba7e368bf53332b193be41c22b61bad2f023a14fc9640437b7e856bbebc8492713d581198b666111b8eb266bb40580170549343c513ff70794b28a18399aa75a083053d01253d54d31ea33ab790f2f5a1f4c33", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="d83a83bc6572b72f3c3a1154a4a96caedcd288afae", 0x15}, {&(0x7f0000000140)="3270fc4b4c361586109ecf0ac9aa0ea49f3c1320f788e46c8446e4b3f54e3e485ec256319515800fa281da436d94f85419a15925c78d79b4408add5e48151899ab1b0ce62c8bca1926344b4afab8200b90e3f2cdf6a258fd15d93b3859ba6ec6a1e51a14", 0x64}, {&(0x7f0000000240)="0bd444716aa9b7081b12c35ae1f17da3794a33335e15b492000000000000", 0x1e}, {&(0x7f00000003c0)="8aa85b07fabd87f7dc8b934277eb4bd335468f025ff87dd6b5675217fa4592e1caac5c16c9dbe7431132a6a3fbf57e5f1699a81e058557c0fce3327f9b4dcdce33d66f8421fd8d539b92065aba", 0x4d}, {&(0x7f0000000440)="d071a24f724d619f40c92977cce66ec4f24a7094da08fdb3c4252112caaa72c4f23a93b93ca4762d5ef3dcbeb05445666354172c89e3bdad6053b6a3a2de0c0bf3e2a18ce012ed4a38d19931b6d563238a6e4430f5d014ace11d1df4af2256d566c3ab437aab045db8ca875a53e575f2ee758eb0a7317bddf432f948f5b62171ac917e8ab3c8b2be18d680b21e4d7fc7e6fddad07b89203eada55cf8e663434646cccef30428548e8488899a6160929c6cc5b2d86496400fdc4901464b391da7631b81e223c72567ed297c771e7191a4290d0a4a50cab5cd9311bf", 0xdb}], 0x5, &(0x7f0000000640)}}], 0x2, 0x28080811)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

16.228770404s ago: executing program 3 (id=633):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000140)={'wlan0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xe}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000300)={0x8000, 0x80000001, {0xffffffffffffffff}, {<r2=>0xee01}, 0x0, 0xfffffffffffffff7})
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@nullb, r2, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15.760890284s ago: executing program 37 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd700000dcdf250700000008000300", @ANYRESOCT=r0, @ANYBLOB="0c009900ff0700000000000000002e00737b7a6b61b6060000000000000000000005000a00000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x5})

0s ago: executing program 38 (id=633):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000140)={'wlan0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xe}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000300)={0x8000, 0x80000001, {0xffffffffffffffff}, {<r2=>0xee01}, 0x0, 0xfffffffffffffff7})
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@nullb, r2, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

config 0 descriptor??
[  196.530775][ T5886] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  196.587390][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[  196.756392][ T5886] gspca_spca1528: reg_w err -71
[  196.779858][ T5886] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  196.786701][ T5886] usb 1-1: USB disconnect, device number 9
[  196.866960][ T1282] hsr_slave_0: left promiscuous mode
[  196.888364][ T1282] hsr_slave_1: left promiscuous mode
[  196.889598][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.889625][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.917604][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.917636][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.071516][ T1282] veth1_macvtap: left promiscuous mode
[  197.073224][ T1282] veth0_macvtap: left promiscuous mode
[  197.073409][ T1282] veth1_vlan: left promiscuous mode
[  197.073526][ T1282] veth0_vlan: left promiscuous mode
[  197.465310][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  197.501938][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'.
[  197.627325][ T5886] usb 4-1: Using ep0 maxpacket: 8
[  197.643576][ T5886] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  197.643606][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.643626][ T5886] usb 4-1: config 0 has no interface number 0
[  197.643672][ T5886] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  197.643698][ T5886] usb 4-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  197.652539][ T5886] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  197.652579][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.652601][ T5886] usb 4-1: Product: syz
[  197.652617][ T5886] usb 4-1: Manufacturer: syz
[  197.652632][ T5886] usb 4-1: SerialNumber: syz
[  197.739867][ T5886] usb 4-1: config 0 descriptor??
[  198.132836][ T1282] team0 (unregistering): Port device team_slave_1 removed
[  198.166937][ T5886] usb 4-1: NFC: intf ffff888036081000 id ffffffff8e755220
[  198.191075][ T5886] usb 4-1: USB disconnect, device number 5
[  198.197291][ T6824] udevd[6824]: setting mode of /dev/bus/usb/004/005 to 020664 failed: No such file or directory
[  198.197429][ T6824] udevd[6824]: setting owner of /dev/bus/usb/004/005 to uid=0, gid=0 failed: No such file or directory
[  198.232138][ T1282] team0 (unregistering): Port device team_slave_0 removed
[  198.486251][  T171] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.486544][  T171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.584854][  T171] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.585146][  T171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.794650][ T6840] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  198.794964][ T6840] qnx6: wrong signature (magic) in superblock #1.
[  198.794975][ T6840] qnx6: unable to read the first superblock
[  199.315776][ T6856] netlink: 64 bytes leftover after parsing attributes in process `syz.0.233'.
[  199.377726][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.734954][ T6867] FAULT_INJECTION: forcing a failure.
[  199.734954][ T6867] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.734994][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.1.235 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  199.735025][ T6867] Tainted: [L]=SOFTLOCKUP
[  199.735032][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  199.735045][ T6867] Call Trace:
[  199.735054][ T6867]  <TASK>
[  199.735064][ T6867]  dump_stack_lvl+0xe8/0x150
[  199.735102][ T6867]  should_fail_ex+0x46b/0x600
[  199.735148][ T6867]  _copy_to_user+0x31/0xb0
[  199.735183][ T6867]  simple_read_from_buffer+0xe1/0x170
[  199.735215][ T6867]  proc_fail_nth_read+0x1be/0x230
[  199.735247][ T6867]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.735277][ T6867]  ? rw_verify_area+0x2ac/0x4e0
[  199.735308][ T6867]  ? tun_chr_write_iter+0x190/0x200
[  199.735338][ T6867]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.735367][ T6867]  vfs_read+0x212/0xa80
[  199.735407][ T6867]  ? __pfx_vfs_read+0x10/0x10
[  199.735443][ T6867]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  199.735478][ T6867]  ? lockdep_hardirqs_on+0x7a/0x110
[  199.735509][ T6867]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  199.735544][ T6867]  ? mutex_lock_nested+0x152/0x1d0
[  199.735569][ T6867]  ? fdget_pos+0x252/0x320
[  199.735608][ T6867]  ksys_read+0x156/0x270
[  199.735645][ T6867]  ? __pfx_ksys_read+0x10/0x10
[  199.735690][ T6867]  do_syscall_64+0x14d/0xf80
[  199.735722][ T6867]  ? trace_irq_disable+0x3b/0x150
[  199.735757][ T6867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.735781][ T6867]  ? clear_bhb_loop+0x40/0x90
[  199.735809][ T6867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.735832][ T6867] RIP: 0033:0x7f4d1f0ecfce
[  199.735854][ T6867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  199.735873][ T6867] RSP: 002b:00007f4d1d385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  199.735896][ T6867] RAX: ffffffffffffffda RBX: 00007f4d1d3866c0 RCX: 00007f4d1f0ecfce
[  199.735912][ T6867] RDX: 000000000000000f RSI: 00007f4d1d3860a0 RDI: 0000000000000005
[  199.735926][ T6867] RBP: 00007f4d1d386090 R08: 0000000000000000 R09: 0000000000000000
[  199.735939][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.735951][ T6867] R13: 00007f4d1f3a6038 R14: 00007f4d1f3a5fa0 R15: 00007ffd72ab30a8
[  199.735987][ T6867]  </TASK>
[  200.214774][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.523230][ T5886] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  200.579784][  T810] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  200.678862][ T5886] usb 1-1: Using ep0 maxpacket: 8
[  200.683236][ T5886] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  200.683267][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.683288][ T5886] usb 1-1: config 0 has no interface number 0
[  200.683333][ T5886] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  200.683357][ T5886] usb 1-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  200.705686][ T5886] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  200.705716][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.705739][ T5886] usb 1-1: Product: syz
[  200.705754][ T5886] usb 1-1: Manufacturer: syz
[  200.705769][ T5886] usb 1-1: SerialNumber: syz
[  200.734106][  T810] usb 2-1: Using ep0 maxpacket: 16
[  200.802738][  T810] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.802777][  T810] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.802801][  T810] usb 2-1: config 0 interface 0 has no altsetting 0
[  200.802837][  T810] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00
[  200.802862][  T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.884804][ T5886] usb 1-1: config 0 descriptor??
[  200.889505][  T810] usb 2-1: config 0 descriptor??
[  201.171282][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.176991][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.429198][ T6411] veth0_vlan: entered promiscuous mode
[  201.438616][  T810] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0
[  201.438653][  T810] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x1
[  201.438678][  T810] hid-corsair-void 0003:1B1C:1B25.0004: item fetching failed at offset 4/5
[  201.439379][  T810] hid-corsair-void 0003:1B1C:1B25.0004: parse failed (reason: -22)
[  201.439468][  T810] hid-corsair-void 0003:1B1C:1B25.0004: probe with driver hid-corsair-void failed with error -22
[  201.576700][ T6411] veth1_vlan: entered promiscuous mode
[  201.772586][ T5886] usb 1-1: NFC: intf ffff8880675ff000 id ffffffff8e755220
[  201.850171][ T5886] usb 1-1: USB disconnect, device number 10
[  201.854673][ T5914] usb 2-1: USB disconnect, device number 5
[  201.907819][ T6417] veth0_vlan: entered promiscuous mode
[  201.962673][ T6411] veth0_macvtap: entered promiscuous mode
[  201.971141][ T6417] veth1_vlan: entered promiscuous mode
[  202.029791][ T6411] veth1_macvtap: entered promiscuous mode
[  202.131660][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.159622][ T6417] veth0_macvtap: entered promiscuous mode
[  202.172831][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.197186][ T6417] veth1_macvtap: entered promiscuous mode
[  202.216190][  T171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.216465][  T171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.217041][  T171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.217322][  T171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.596946][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.702974][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.802484][ T6932] erofs (device loop1): cannot find valid erofs superblock
[  202.840967][ T1137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.885008][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.890899][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.958574][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.212144][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.212167][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.470403][ T6945] bond0: option ad_select: unable to set because the bond device is up
[  204.570834][  T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.570856][  T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.652889][  T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.652909][  T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.790671][  T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.790694][  T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.298944][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  205.446823][ T5885] usb 1-1: Using ep0 maxpacket: 8
[  205.458583][ T5885] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  205.458612][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.458632][ T5885] usb 1-1: config 0 has no interface number 0
[  205.458679][ T5885] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  205.458703][ T5885] usb 1-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  205.472630][ T5885] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  205.472662][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.472683][ T5885] usb 1-1: Product: syz
[  205.472697][ T5885] usb 1-1: Manufacturer: syz
[  205.472711][ T5885] usb 1-1: SerialNumber: syz
[  205.605315][ T5885] usb 1-1: config 0 descriptor??
[  205.912620][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'.
[  206.041961][ T6981] overlayfs: failed to resolve './file0': -2
[  206.217124][ T6986] CUSE: unknown device info "ìŠxó�KJ+ßãÛ¤2Lh¸änLþ1Õîì8­¨×0º©®(À3Õ¶ië"
[  206.217147][ T6986] CUSE: unknown device info "Ù®,�°
ð<Ö_e¤FÀÆ"
[  206.235479][ T6986] CUSE: unknown device info "3�ÜŸ•,²¥Ì˜õ"
[  206.235496][ T6986] CUSE: unknown device info "Jô©Ð2SZûü !e/ëÅúãõž‘­J½+-n´¸a4¼¿\Nšÿä4¨ô"
[  206.235509][ T6986] CUSE: unknown device info "´ƒ
[  206.235509][ T6986] f𳦧ìýzóÚXÁS!
[  206.235509][ T6986] „Aäx¡Ùjª½T¾Ç”¨åw—üæšxR�É�Q÷®(hÒ�j	pødY0¨Æ|M?2JÿúIšvö^
RÎ@´å"
[  206.235524][ T6986] CUSE: unknown device info "!ToÛ}Ý�&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E•gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜­_“ž@±/íËV ™¨º§{»‡ò"
[  206.235539][ T6986] CUSE: unknown device info "ÊþwlU~‘ÄÎV¥ß¶âݸFsºXý,xækƒÅq¾é/òQ]Ñ3•ÞH"
[  206.235549][ T6986] CUSE: zero length info key specified
[  206.419670][ T6990] erofs (device loop1): cannot find valid erofs superblock
[  206.789708][ T5885] usb 1-1: NFC: intf ffff888061981000 id ffffffff8e755220
[  206.823935][ T5885] usb 1-1: USB disconnect, device number 11
[  207.180347][ T5944] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  207.323177][ T5944] usb 6-1: Using ep0 maxpacket: 16
[  207.331775][ T5944] usb 6-1: unable to get BOS descriptor or descriptor too short
[  207.359474][ T5944] usb 6-1: config 4 has an invalid interface number: 168 but max is 0
[  207.359508][ T5944] usb 6-1: config 4 has no interface number 0
[  207.359543][ T5944] usb 6-1: config 4 interface 168 has no altsetting 0
[  207.397135][ T5944] usb 6-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=b0.9e
[  207.397170][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.397191][ T5944] usb 6-1: Product: syz
[  207.397206][ T5944] usb 6-1: Manufacturer: syz
[  207.397222][ T5944] usb 6-1: SerialNumber: syz
[  207.621706][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[  207.621736][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[  207.688842][ T5944] dvb-usb: found a 'TeVii S421 PCI' in warm state.
[  207.688882][ T5944] dw2102: su3000_power_ctrl: 1, initialized 0
[  207.689274][ T5944] dvb-usb: bulk message failed: -22 (2/0)
[  207.794335][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  207.802546][ T5944] dvbdev: DVB: registering new adapter (TeVii S421 PCI)
[  207.802864][ T5944] usb 6-1: media controller created
[  207.825177][ T5944] dvb-usb: bulk message failed: -22 (6/0)
[  207.825202][ T5944] dw2102: i2c transfer failed.
[  207.825224][ T5944] dvb-usb: bulk message failed: -22 (6/0)
[  207.825239][ T5944] dw2102: i2c transfer failed.
[  207.825256][ T5944] dvb-usb: bulk message failed: -22 (6/0)
[  207.825270][ T5944] dw2102: i2c transfer failed.
[  207.825285][ T5944] dvb-usb: bulk message failed: -22 (6/0)
[  207.825300][ T5944] dw2102: i2c transfer failed.
[  207.825316][ T5944] dvb-usb: bulk message failed: -22 (6/0)
[  207.825332][ T5944] dw2102: i2c transfer failed.
[  207.825349][ T5944] dvb-usb: bulk message failed: -22 (6/0)
[  207.825363][ T5944] dw2102: i2c transfer failed.
[  207.825373][ T5944] dvb-usb: MAC address: 02:02:02:02:02:02
[  207.930013][ T7022] 8021q: VLANs not supported on ip6gre0
[  207.994438][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  208.024540][ T7024] FAULT_INJECTION: forcing a failure.
[  208.024540][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.024580][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.0.267 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  208.024609][ T7024] Tainted: [L]=SOFTLOCKUP
[  208.024617][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.024629][ T7024] Call Trace:
[  208.024638][ T7024]  <TASK>
[  208.024648][ T7024]  dump_stack_lvl+0xe8/0x150
[  208.024687][ T7024]  should_fail_ex+0x46b/0x600
[  208.024722][ T7024]  _copy_to_user+0x31/0xb0
[  208.024759][ T7024]  simple_read_from_buffer+0xe1/0x170
[  208.024792][ T7024]  proc_fail_nth_read+0x1be/0x230
[  208.024822][ T7024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  208.024854][ T7024]  ? rw_verify_area+0x2ac/0x4e0
[  208.024885][ T7024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  208.024914][ T7024]  vfs_read+0x212/0xa80
[  208.024957][ T7024]  ? __pfx_vfs_read+0x10/0x10
[  208.024997][ T7024]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  208.025032][ T7024]  ? lockdep_hardirqs_on+0x7a/0x110
[  208.025064][ T7024]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  208.025097][ T7024]  ? mutex_lock_nested+0x152/0x1d0
[  208.025132][ T7024]  ? fdget_pos+0x252/0x320
[  208.025168][ T7024]  ksys_read+0x156/0x270
[  208.025205][ T7024]  ? __pfx_ksys_read+0x10/0x10
[  208.025238][ T7024]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[  208.025284][ T7024]  do_syscall_64+0x14d/0xf80
[  208.025316][ T7024]  ? trace_irq_disable+0x3b/0x150
[  208.025341][ T7024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.025365][ T7024]  ? clear_bhb_loop+0x40/0x90
[  208.025393][ T7024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.025415][ T7024] RIP: 0033:0x7f8dce58cfce
[  208.025437][ T7024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  208.025455][ T7024] RSP: 002b:00007f8dcc81dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  208.025479][ T7024] RAX: ffffffffffffffda RBX: 00007f8dcc81e6c0 RCX: 00007f8dce58cfce
[  208.025495][ T7024] RDX: 000000000000000f RSI: 00007f8dcc81e0a0 RDI: 0000000000000004
[  208.025508][ T7024] RBP: 00007f8dcc81e090 R08: 0000000000000000 R09: 0000000000000000
[  208.025521][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.025533][ T7024] R13: 00007f8dce846038 R14: 00007f8dce845fa0 R15: 00007ffe0ce828c8
[  208.025570][ T7024]  </TASK>
[  208.362829][ T5944] dvb-usb: bulk message failed: -22 (1/0)
[  208.362852][ T5944] dw2102: command 0x51 transfer failed.
[  208.480129][ T7030] netlink: 32 bytes leftover after parsing attributes in process `syz.5.268'.
[  208.649417][ T7036] erofs (device loop6): cannot find valid erofs superblock
[  208.657861][ T5944] DVB: Unable to find symbol m88rs2000_attach()
[  208.657902][ T5944] dvb-usb: no frontend was attached by 'TeVii S421 PCI'
[  208.942292][ T5803] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  208.942465][ T5944] rc_core: IR keymap rc-su3000 not found
[  208.942479][ T5944] Registered IR keymap rc-empty
[  208.949299][ T5944] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  209.050625][ T5944] input: TeVii S421 PCI as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input9
[  209.104206][ T5803] usb 4-1: Using ep0 maxpacket: 32
[  209.108507][ T5803] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  209.108538][ T5803] usb 4-1: config 0 has no interface number 0
[  209.108586][ T5803] usb 4-1: config 0 interface 184 has no altsetting 0
[  209.116899][ T5803] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  209.116932][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.116953][ T5803] usb 4-1: Product: syz
[  209.116969][ T5803] usb 4-1: Manufacturer: syz
[  209.116984][ T5803] usb 4-1: SerialNumber: syz
[  209.250977][ T7048] FAULT_INJECTION: forcing a failure.
[  209.250977][ T7048] name failslab, interval 1, probability 0, space 0, times 0
[  209.251071][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.0.273 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  209.251101][ T7048] Tainted: [L]=SOFTLOCKUP
[  209.251109][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  209.251127][ T7048] Call Trace:
[  209.251134][ T7048]  <TASK>
[  209.251141][ T7048]  dump_stack_lvl+0xe8/0x150
[  209.251170][ T7048]  should_fail_ex+0x46b/0x600
[  209.251193][ T7048]  should_failslab+0xa8/0x100
[  209.251210][ T7048]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  209.251235][ T7048]  ? __alloc_skb+0x1d0/0x7d0
[  209.251256][ T7048]  ? __local_bh_enable_ip+0x1c2/0x2b0
[  209.251282][ T7048]  __alloc_skb+0x1d0/0x7d0
[  209.251308][ T7048]  netlink_sendmsg+0x5d4/0xb40
[  209.251355][ T7048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.251389][ T7048]  ? bpf_lsm_socket_sendmsg+0x4/0x20
[  209.251423][ T7048]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.251456][ T7048]  ____sys_sendmsg+0x94c/0x9c0
[  209.251484][ T7048]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.251522][ T7048]  ? import_iovec+0x73/0xa0
[  209.251548][ T7048]  ___sys_sendmsg+0x2a5/0x360
[  209.251567][ T7048]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.251607][ T7048]  ? __fget_files+0x2a/0x420
[  209.251627][ T7048]  ? __fget_files+0x3a6/0x420
[  209.251654][ T7048]  __x64_sys_sendmsg+0x1c3/0x2a0
[  209.251671][ T7048]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.251704][ T7048]  do_syscall_64+0x14d/0xf80
[  209.251729][ T7048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.251745][ T7048]  ? clear_bhb_loop+0x40/0x90
[  209.251764][ T7048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.251779][ T7048] RIP: 0033:0x7f8dce5cc799
[  209.251794][ T7048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.251807][ T7048] RSP: 002b:00007f8dcc81e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.251824][ T7048] RAX: ffffffffffffffda RBX: 00007f8dce845fa0 RCX: 00007f8dce5cc799
[  209.251835][ T7048] RDX: 00000000040040d4 RSI: 0000200000000200 RDI: 0000000000000004
[  209.251845][ T7048] RBP: 00007f8dcc81e090 R08: 0000000000000000 R09: 0000000000000000
[  209.251855][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.251864][ T7048] R13: 00007f8dce846038 R14: 00007f8dce845fa0 R15: 00007ffe0ce828c8
[  209.251888][ T7048]  </TASK>
[  210.035688][ T5944] dvb-usb: schedule remote query interval to 150 msecs.
[  210.035716][ T5944] dw2102: su3000_power_ctrl: 0, initialized 1
[  210.064304][ T5944] dvb-usb: TeVii S421 PCI successfully initialized and connected.
[  210.065288][ T5803] usb 4-1: config 0 descriptor??
[  210.119265][ T5944] usb 6-1: USB disconnect, device number 2
[  210.697233][ T5944] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected.
[  210.867451][ T7065] erofs (device loop1): cannot find valid erofs superblock
[  210.980518][ T7063] bridge0: port 3(macvlan2) entered blocking state
[  211.025220][ T7063] bridge0: port 3(macvlan2) entered disabled state
[  211.025729][ T7063] macvlan2: entered allmulticast mode
[  211.025750][ T7063] bridge0: entered allmulticast mode
[  211.097426][ T7063] macvlan2: left allmulticast mode
[  211.097453][ T7063] bridge0: left allmulticast mode
[  211.104691][ T5872] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  211.160046][ T5803] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[  211.160079][ T5803] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  211.288048][ T5872] usb 7-1: Using ep0 maxpacket: 8
[  211.292955][ T5872] usb 7-1: config 0 has an invalid interface number: 122 but max is 0
[  211.292985][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.293005][ T5872] usb 7-1: config 0 has no interface number 0
[  211.293053][ T5872] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  211.293076][ T5872] usb 7-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  211.334265][ T5872] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  211.334347][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.334369][ T5872] usb 7-1: Product: syz
[  211.334384][ T5872] usb 7-1: Manufacturer: syz
[  211.334399][ T5872] usb 7-1: SerialNumber: syz
[  211.355985][ T5803] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  211.356019][ T5803] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  211.356039][ T5803] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  211.356059][ T5803] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  211.356452][ T5803] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  211.479574][ T5803] usb 4-1: USB disconnect, device number 6
[  211.609721][ T5872] usb 7-1: config 0 descriptor??
[  212.353102][   T10] IPVS: starting estimator thread 0...
[  212.440154][ T7093] IPVS: using max 7 ests per chain, 16800 per kthread
[  212.543368][ T5872] usb 7-1: NFC: intf ffff8880213c9000 id ffffffff8e755220
[  212.612761][ T5872] usb 7-1: USB disconnect, device number 2
[  212.841627][ T7109] fuse: Bad value for 'fd'
[  214.412896][ T7130] FAULT_INJECTION: forcing a failure.
[  214.412896][ T7130] name failslab, interval 1, probability 0, space 0, times 0
[  214.412937][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.3.293 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  214.412967][ T7130] Tainted: [L]=SOFTLOCKUP
[  214.412975][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  214.412987][ T7130] Call Trace:
[  214.412997][ T7130]  <TASK>
[  214.413006][ T7130]  dump_stack_lvl+0xe8/0x150
[  214.413044][ T7130]  should_fail_ex+0x46b/0x600
[  214.413090][ T7130]  should_failslab+0xa8/0x100
[  214.413114][ T7130]  kmem_cache_alloc_noprof+0x87/0x680
[  214.413155][ T7130]  ? fuse_get_req+0x7da/0x10d0
[  214.413200][ T7130]  fuse_get_req+0x7da/0x10d0
[  214.413241][ T7130]  ? __lock_acquire+0x6b5/0x2cf0
[  214.413266][ T7130]  ? __pfx_fuse_get_req+0x10/0x10
[  214.413299][ T7130]  ? __lock_acquire+0x6b5/0x2cf0
[  214.413334][ T7130]  __fuse_simple_request+0x2cc/0x1c60
[  214.413374][ T7130]  ? __lock_acquire+0x6b5/0x2cf0
[  214.413400][ T7130]  ? __pfx___fuse_simple_request+0x10/0x10
[  214.413433][ T7130]  ? lockdep_hardirqs_on+0x7a/0x110
[  214.413466][ T7130]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  214.413501][ T7130]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  214.413529][ T7130]  ? reacquire_held_locks+0x104/0x190
[  214.413555][ T7130]  ? rt_spin_lock+0x1e0/0x400
[  214.413589][ T7130]  ? mntput_no_expire+0x1c/0x1c0
[  214.413625][ T7130]  fuse_getxattr+0x30e/0x4d0
[  214.413655][ T7130]  ? __asan_memcpy+0x40/0x70
[  214.413688][ T7130]  ? __pfx_fuse_getxattr+0x10/0x10
[  214.413731][ T7130]  ? smk_tskacc+0x311/0x3a0
[  214.413896][ T7130]  ? smack_inode_getxattr+0x155/0x1c0
[  214.413935][ T7130]  ? __pfx_smack_inode_getxattr+0x10/0x10
[  214.414029][ T7130]  ? rcu_is_watching+0x15/0xb0
[  214.414079][ T7130]  fuse_xattr_get+0x80/0xa0
[  214.414144][ T7130]  ? __pfx_fuse_xattr_get+0x10/0x10
[  214.414177][ T7130]  __vfs_getxattr+0x3f4/0x430
[  214.414215][ T7130]  vfs_getxattr+0x251/0x2b0
[  214.414250][ T7130]  ? __pfx_vfs_getxattr+0x10/0x10
[  214.414290][ T7130]  do_getxattr+0x176/0x320
[  214.414325][ T7130]  filename_getxattr+0x11f/0x220
[  214.414359][ T7130]  ? __pfx_filename_getxattr+0x10/0x10
[  214.414393][ T7130]  ? do_getname+0x151/0x250
[  214.414422][ T7130]  __x64_sys_lgetxattr+0x212/0x2b0
[  214.414460][ T7130]  ? __pfx___x64_sys_lgetxattr+0x10/0x10
[  214.414543][ T7130]  ? __pfx_ksys_write+0x10/0x10
[  214.414590][ T7130]  do_syscall_64+0x14d/0xf80
[  214.414619][ T7130]  ? trace_irq_disable+0x3b/0x150
[  214.414645][ T7130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.414667][ T7130]  ? clear_bhb_loop+0x40/0x90
[  214.414694][ T7130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.414716][ T7130] RIP: 0033:0x7fc3a09cc799
[  214.414738][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.414758][ T7130] RSP: 002b:00007fc39ec05028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  214.414781][ T7130] RAX: ffffffffffffffda RBX: 00007fc3a0c46090 RCX: 00007fc3a09cc799
[  214.414799][ T7130] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000100
[  214.414812][ T7130] RBP: 00007fc39ec05090 R08: 0000000000000000 R09: 0000000000000000
[  214.414825][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.414837][ T7130] R13: 00007fc3a0c46128 R14: 00007fc3a0c46090 R15: 00007fff839bd268
[  214.414868][ T7130]  </TASK>
[  214.514617][ T5803] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  214.802608][ T5803] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  214.802646][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  214.802692][ T5803] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  214.802717][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.840587][ T5803] usb 7-1: config 0 descriptor??
[  215.079038][ T5803] ath6kl: Failed to submit usb control message: -71
[  215.079095][ T5803] ath6kl: unable to send the bmi data to the device: -71
[  215.079111][ T5803] ath6kl: Unable to send get target info: -71
[  215.115185][ T5803] ath6kl: Failed to init ath6kl core: -71
[  215.120272][ T5803] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  215.210003][ T5803] usb 7-1: USB disconnect, device number 3
[  215.774570][ T5116] Bluetooth: hci3: command 0x0406 tx timeout
[  215.869192][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.300'.
[  215.869224][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.300'.
[  215.911717][ T5116] Bluetooth: hci1: command 0x0406 tx timeout
[  215.917763][ T5116] Bluetooth: hci4: command 0x0406 tx timeout
[  217.562821][ T1234] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  218.033102][ T7173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.304'.
[  218.033209][ T7173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.304'.
[  218.162876][ T1234] usb 7-1: Using ep0 maxpacket: 32
[  218.727777][ T1234] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  218.727809][ T1234] usb 7-1: config 0 has no interface number 0
[  218.749470][ T1234] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  218.749514][ T1234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.749545][ T1234] usb 7-1: Product: syz
[  218.749561][ T1234] usb 7-1: Manufacturer: syz
[  218.749577][ T1234] usb 7-1: SerialNumber: syz
[  218.822938][ T1234] usb 7-1: config 0 descriptor??
[  218.827688][ T1234] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  219.147468][ T1234] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  219.219025][ T1234] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  219.378714][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  219.379938][   T10] usb 7-1: USB disconnect, device number 4
[  219.617173][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  219.711434][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  219.712124][   T10] quatech2 7-1:0.51: device disconnected
[  219.944810][ T7201] FAULT_INJECTION: forcing a failure.
[  219.944810][ T7201] name failslab, interval 1, probability 0, space 0, times 0
[  219.944850][ T7201] CPU: 0 UID: 0 PID: 7201 Comm: syz.3.317 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  219.944880][ T7201] Tainted: [L]=SOFTLOCKUP
[  219.944889][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  219.944903][ T7201] Call Trace:
[  219.944912][ T7201]  <TASK>
[  219.944921][ T7201]  dump_stack_lvl+0xe8/0x150
[  219.944958][ T7201]  should_fail_ex+0x46b/0x600
[  219.944992][ T7201]  should_failslab+0xa8/0x100
[  219.945018][ T7201]  __kmalloc_noprof+0xdf/0x7b0
[  219.945052][ T7201]  ? mutex_rt_init_lockdep+0x66/0x80
[  219.945082][ T7201]  ? security_task_alloc+0x4d/0x330
[  219.945111][ T7201]  security_task_alloc+0x4d/0x330
[  219.945137][ T7201]  copy_process+0x16e7/0x3cd0
[  219.945183][ T7201]  ? copy_process+0x921/0x3cd0
[  219.945237][ T7201]  ? __pfx_copy_process+0x10/0x10
[  219.945282][ T7201]  kernel_clone+0x249/0x840
[  219.945320][ T7201]  ? __pfx_kernel_clone+0x10/0x10
[  219.945352][ T7201]  ? do_raw_spin_lock+0x12b/0x2f0
[  219.945402][ T7201]  __x64_sys_clone+0x1b6/0x230
[  219.945427][ T7201]  ? __pfx___x64_sys_clone+0x10/0x10
[  219.945465][ T7201]  ? __pfx_ksys_write+0x10/0x10
[  219.945512][ T7201]  do_syscall_64+0x14d/0xf80
[  219.945543][ T7201]  ? trace_irq_disable+0x3b/0x150
[  219.945569][ T7201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.945593][ T7201]  ? clear_bhb_loop+0x40/0x90
[  219.945621][ T7201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.945644][ T7201] RIP: 0033:0x7fc3a09cc799
[  219.945665][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.945684][ T7201] RSP: 002b:00007fc39ec25fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  219.945709][ T7201] RAX: ffffffffffffffda RBX: 00007fc3a0c45fa0 RCX: 00007fc3a09cc799
[  219.945726][ T7201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022080000
[  219.945740][ T7201] RBP: 00007fc39ec26090 R08: 0000000000000000 R09: 0000000000000000
[  219.945754][ T7201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  219.945768][ T7201] R13: 00007fc3a0c46038 R14: 00007fc3a0c45fa0 R15: 00007fff839bd268
[  219.945803][ T7201]  </TASK>
[  222.162863][ T5944] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  222.346736][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.324'.
[  222.353386][ T5944] usb 4-1: Using ep0 maxpacket: 32
[  222.355601][ T5944] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  222.355629][ T5944] usb 4-1: config 0 has no interface number 0
[  222.362486][ T5944] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  222.362519][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.362541][ T5944] usb 4-1: Product: syz
[  222.362556][ T5944] usb 4-1: Manufacturer: syz
[  222.362572][ T5944] usb 4-1: SerialNumber: syz
[  222.534736][ T1234] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  222.636750][ T5944] usb 4-1: config 0 descriptor??
[  222.665643][ T5944] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  222.834469][ T1234] usb 1-1: Using ep0 maxpacket: 32
[  222.837734][ T1234] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  222.837761][ T1234] usb 1-1: config 0 has no interface number 0
[  222.867350][ T1234] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  222.867382][ T1234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.867403][ T1234] usb 1-1: Product: syz
[  222.867417][ T1234] usb 1-1: Manufacturer: syz
[  222.867432][ T1234] usb 1-1: SerialNumber: syz
[  224.031482][ T1234] usb 1-1: config 0 descriptor??
[  224.034714][ T1234] usb 1-1: can't set config #0, error -71
[  224.062480][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  224.065803][ T1234] usb 1-1: USB disconnect, device number 12
[  224.098953][ T5944] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  224.126653][ T5944] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  224.155364][ T5944] usb 4-1: USB disconnect, device number 7
[  224.311072][ T5944] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  224.382540][ T5944] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  224.427840][ T5944] quatech2 4-1:0.51: device disconnected
[  224.573885][ T7251] fuse: Bad value for 'fd'
[  224.763040][ T7258] loop0: detected capacity change from 0 to 7
[  224.981907][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  224.982044][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.026709][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.026751][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.150832][ T7264] FAULT_INJECTION: forcing a failure.
[  225.150832][ T7264] name failslab, interval 1, probability 0, space 0, times 0
[  225.150870][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.3.335 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  225.150900][ T7264] Tainted: [L]=SOFTLOCKUP
[  225.150908][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  225.150921][ T7264] Call Trace:
[  225.150929][ T7264]  <TASK>
[  225.150939][ T7264]  dump_stack_lvl+0xe8/0x150
[  225.150976][ T7264]  should_fail_ex+0x46b/0x600
[  225.151009][ T7264]  should_failslab+0xa8/0x100
[  225.151034][ T7264]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  225.151067][ T7264]  ? __alloc_skb+0x1d0/0x7d0
[  225.151097][ T7264]  ? lockdep_hardirqs_on+0x7a/0x110
[  225.151145][ T7264]  __alloc_skb+0x1d0/0x7d0
[  225.151182][ T7264]  netlink_sendmsg+0x5d4/0xb40
[  225.151223][ T7264]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.151254][ T7264]  ? unwind_get_return_address+0x4d/0x90
[  225.151282][ T7264]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  225.151319][ T7264]  ____sys_sendmsg+0x94c/0x9c0
[  225.151369][ T7264]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.151401][ T7264]  ? import_iovec+0x73/0xa0
[  225.151437][ T7264]  ___sys_sendmsg+0x2a5/0x360
[  225.151465][ T7264]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.151526][ T7264]  ? __fget_files+0x2a/0x420
[  225.151552][ T7264]  ? __fget_files+0x3a6/0x420
[  225.151592][ T7264]  __x64_sys_sendmsg+0x1c3/0x2a0
[  225.151618][ T7264]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.151652][ T7264]  ? __pfx_ksys_write+0x10/0x10
[  225.151697][ T7264]  do_syscall_64+0x14d/0xf80
[  225.151728][ T7264]  ? trace_irq_disable+0x3b/0x150
[  225.151755][ T7264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.151778][ T7264]  ? clear_bhb_loop+0x40/0x90
[  225.151805][ T7264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.151829][ T7264] RIP: 0033:0x7fc3a09cc799
[  225.151850][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.151870][ T7264] RSP: 002b:00007fc39ec26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.151894][ T7264] RAX: ffffffffffffffda RBX: 00007fc3a0c45fa0 RCX: 00007fc3a09cc799
[  225.151911][ T7264] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003
[  225.151926][ T7264] RBP: 00007fc39ec26090 R08: 0000000000000000 R09: 0000000000000000
[  225.151941][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.151955][ T7264] R13: 00007fc3a0c46038 R14: 00007fc3a0c45fa0 R15: 00007fff839bd268
[  225.151990][ T7264]  </TASK>
[  225.208362][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.208468][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.315578][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.316129][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.318041][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.318574][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.334608][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.334707][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.341546][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.341647][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.342087][ T7258] ldm_validate_partition_table(): Disk read failed.
[  225.343192][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.343274][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.380800][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.380901][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.578913][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  225.578955][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  225.579137][ T7258] Dev loop0: unable to read RDB block 0
[  226.389624][ T7258]  loop0: unable to read partition table
[  226.753373][ T7258] loop0: partition table beyond EOD, truncated
[  226.753434][ T7258] loop_reread_partitions: partition scan of loop0 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  227.112997][ T7259] Invalid logical block size (1022)
[  227.635090][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  227.776990][   T10] usb 7-1: Using ep0 maxpacket: 32
[  227.779833][   T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  227.779865][   T10] usb 7-1: config 0 has no interface number 0
[  227.779915][   T10] usb 7-1: config 0 interface 184 has no altsetting 0
[  227.817931][   T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  227.817965][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.817987][   T10] usb 7-1: Product: syz
[  227.818003][   T10] usb 7-1: Manufacturer: syz
[  227.818018][   T10] usb 7-1: SerialNumber: syz
[  227.903147][   T10] usb 7-1: config 0 descriptor??
[  228.029969][ T7297] netlink: 'syz.1.343': attribute type 6 has an invalid length.
[  229.248562][ T7305] netlink: 56 bytes leftover after parsing attributes in process `syz.3.344'.
[  229.390980][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'.
[  229.391120][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  229.391147][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  229.391676][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  229.391704][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  229.391724][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  229.391743][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  229.392052][   T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  229.594737][   T10] usb 7-1: USB disconnect, device number 5
[  229.946151][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  230.089956][   T10] usb 6-1: Using ep0 maxpacket: 32
[  230.093223][   T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  230.093254][   T10] usb 6-1: config 0 has no interface number 0
[  230.129852][   T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  230.129885][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.129907][   T10] usb 6-1: Product: syz
[  230.129922][   T10] usb 6-1: Manufacturer: syz
[  230.129937][   T10] usb 6-1: SerialNumber: syz
[  230.186286][   T10] usb 6-1: config 0 descriptor??
[  230.199564][   T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  230.787611][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  230.834226][   T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  230.882793][   T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  230.903973][   T10] usb 6-1: USB disconnect, device number 3
[  231.069819][ T5885] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  231.176258][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  231.228077][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  231.228972][   T10] quatech2 6-1:0.51: device disconnected
[  231.263058][ T5885] usb 7-1: Using ep0 maxpacket: 32
[  231.273644][ T5885] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  231.273740][ T5885] usb 7-1: config 0 has no interface number 0
[  231.273874][ T5885] usb 7-1: config 0 interface 184 has no altsetting 0
[  231.304966][ T5885] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  231.305000][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.305023][ T5885] usb 7-1: Product: syz
[  231.305039][ T5885] usb 7-1: Manufacturer: syz
[  231.305054][ T5885] usb 7-1: SerialNumber: syz
[  231.553719][ T5885] usb 7-1: config 0 descriptor??
[  233.585569][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  234.076829][ T5885] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  234.076862][ T5885] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  234.084267][ T5885] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  234.084392][ T5885] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  234.084449][ T5885] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  234.084495][ T5885] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  234.085263][ T5885] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  234.321106][ T5885] usb 7-1: USB disconnect, device number 6
[  234.338011][   T10] usb 6-1: Using ep0 maxpacket: 32
[  234.359674][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  234.362429][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.362458][   T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  234.422819][   T10] usb 6-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[  234.422850][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.422873][   T10] usb 6-1: Product: syz
[  234.422888][   T10] usb 6-1: Manufacturer: syz
[  234.422903][   T10] usb 6-1: SerialNumber: syz
[  235.238860][ T7336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.354'.
[  235.238901][ T7336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.354'.
[  235.937470][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.355'.
[  235.937504][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.355'.
[  237.181975][   T10] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor
[  237.182043][   T10] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  237.213547][   T10] usb 6-1: unit 37 not found!
[  237.213573][   T10] usb 6-1: unit 0 not found!
[  238.471131][   T10] usb 6-1: USB disconnect, device number 4
[  238.965179][ T7369] FAULT_INJECTION: forcing a failure.
[  238.965179][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.965221][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.6.365 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  238.965252][ T7369] Tainted: [L]=SOFTLOCKUP
[  238.965260][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  238.965274][ T7369] Call Trace:
[  238.965283][ T7369]  <TASK>
[  238.965293][ T7369]  dump_stack_lvl+0xe8/0x150
[  238.965333][ T7369]  should_fail_ex+0x46b/0x600
[  238.965367][ T7369]  _copy_from_user+0x2d/0xb0
[  238.965401][ T7369]  wants_mount_setattr+0x1ba/0x8f0
[  238.965427][ T7369]  ? lockdep_hardirqs_on+0x7a/0x110
[  238.965463][ T7369]  ? __pfx_wants_mount_setattr+0x10/0x10
[  238.965482][ T7369]  ? rt_mutex_slowunlock+0x1cb/0x300
[  238.965524][ T7369]  __se_sys_mount_setattr+0x16a/0x280
[  238.965561][ T7369]  ? __pfx___se_sys_mount_setattr+0x10/0x10
[  238.965600][ T7369]  ? __x64_sys_mount_setattr+0x20/0xc0
[  238.965633][ T7369]  do_syscall_64+0x14d/0xf80
[  238.965666][ T7369]  ? trace_irq_disable+0x3b/0x150
[  238.965692][ T7369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.965715][ T7369]  ? clear_bhb_loop+0x40/0x90
[  238.965743][ T7369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.965766][ T7369] RIP: 0033:0x7f315263c799
[  238.965787][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.965806][ T7369] RSP: 002b:00007f3150896028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[  238.965830][ T7369] RAX: ffffffffffffffda RBX: 00007f31528b5fa0 RCX: 00007f315263c799
[  238.965847][ T7369] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000003
[  238.965861][ T7369] RBP: 00007f3150896090 R08: 0000000000000020 R09: 0000000000000000
[  238.965875][ T7369] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  238.965889][ T7369] R13: 00007f31528b6038 R14: 00007f31528b5fa0 R15: 00007fff97d2a2c8
[  238.965924][ T7369]  </TASK>
[  239.350351][ T7371] netlink: 1012 bytes leftover after parsing attributes in process `syz.3.366'.
[  239.525149][ T6799] udevd[6799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  239.699754][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  239.806340][ T7378] netlink: 'syz.0.368': attribute type 4 has an invalid length.
[  239.806367][ T7378] netlink: 17 bytes leftover after parsing attributes in process `syz.0.368'.
[  239.842576][   T10] usb 6-1: Using ep0 maxpacket: 32
[  239.845078][   T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  239.845107][   T10] usb 6-1: config 0 has no interface number 0
[  239.848265][   T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  239.848296][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.848318][   T10] usb 6-1: Product: syz
[  239.848333][   T10] usb 6-1: Manufacturer: syz
[  239.848348][   T10] usb 6-1: SerialNumber: syz
[  239.954297][   T10] usb 6-1: config 0 descriptor??
[  240.009551][   T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  240.288902][   T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  240.447220][   T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  240.623479][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  240.692986][ T5944] usb 6-1: USB disconnect, device number 5
[  240.729941][ T5944] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  240.756550][ T5944] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  240.770990][ T5944] quatech2 6-1:0.51: device disconnected
[  241.808784][ T5914] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  242.747774][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64
[  242.747830][ T5914] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  242.747855][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.818974][ T5914] usb 2-1: config 0 descriptor??
[  242.884863][ T7412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  243.589500][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589541][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589571][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589600][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589629][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589665][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589694][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589723][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589752][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.589780][ T5914] wacom 0003:056A:5000.0005: unknown main item tag 0x0
[  243.593698][ T5914] wacom 0003:056A:5000.0005: reserved main item tag 0xd
[  244.015988][ T5885] usb 2-1: USB disconnect, device number 6
[  244.110296][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  244.168182][ T7431] program syz.3.382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.434341][ T5913] usb 6-1: device descriptor read/64, error -71
[  244.735827][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  244.862832][ T5913] usb 6-1: device descriptor read/64, error -71
[  245.082060][ T5913] usb usb6-port1: attempt power cycle
[  245.406015][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  245.425975][ T5913] usb 6-1: device descriptor read/8, error -71
[  245.691451][ T5913] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  245.721030][ T5913] usb 6-1: device descriptor read/8, error -71
[  245.827384][ T5913] usb usb6-port1: unable to enumerate USB device
[  247.211619][ T7466] FAULT_INJECTION: forcing a failure.
[  247.211619][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.211673][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.5.392 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  247.211704][ T7466] Tainted: [L]=SOFTLOCKUP
[  247.211713][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  247.211737][ T7466] Call Trace:
[  247.211746][ T7466]  <TASK>
[  247.211755][ T7466]  dump_stack_lvl+0xe8/0x150
[  247.211797][ T7466]  should_fail_ex+0x46b/0x600
[  247.211831][ T7466]  _copy_from_iter+0x1d3/0x1670
[  247.211871][ T7466]  ? trace_kmem_cache_alloc+0x29/0xf0
[  247.211905][ T7466]  ? __alloc_skb+0x27d/0x7d0
[  247.211936][ T7466]  ? __pfx__copy_from_iter+0x10/0x10
[  247.211971][ T7466]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  247.212003][ T7466]  ? __alloc_skb+0x27d/0x7d0
[  247.212042][ T7466]  ? netlink_sendmsg+0x650/0xb40
[  247.212071][ T7466]  ? skb_put+0x11b/0x210
[  247.212108][ T7466]  netlink_sendmsg+0x6c0/0xb40
[  247.212148][ T7466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.212181][ T7466]  ? unwind_get_return_address+0x4d/0x90
[  247.212209][ T7466]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  247.212247][ T7466]  ____sys_sendmsg+0x94c/0x9c0
[  247.212275][ T7466]  ? __pfx_____sys_sendmsg+0x10/0x10
[  247.212308][ T7466]  ? import_iovec+0x73/0xa0
[  247.212344][ T7466]  ___sys_sendmsg+0x2a5/0x360
[  247.212373][ T7466]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.212442][ T7466]  ? __fget_files+0x2a/0x420
[  247.212471][ T7466]  ? __fget_files+0x3a6/0x420
[  247.212511][ T7466]  __x64_sys_sendmsg+0x1c3/0x2a0
[  247.212537][ T7466]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  247.212571][ T7466]  ? __pfx_ksys_write+0x10/0x10
[  247.212616][ T7466]  do_syscall_64+0x14d/0xf80
[  247.212648][ T7466]  ? trace_irq_disable+0x3b/0x150
[  247.212675][ T7466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.212699][ T7466]  ? clear_bhb_loop+0x40/0x90
[  247.212727][ T7466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.212749][ T7466] RIP: 0033:0x7efddebdc799
[  247.212771][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.212790][ T7466] RSP: 002b:00007efddce2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.212815][ T7466] RAX: ffffffffffffffda RBX: 00007efddee55fa0 RCX: 00007efddebdc799
[  247.212831][ T7466] RDX: 0000000004040084 RSI: 00002000000001c0 RDI: 0000000000000004
[  247.212847][ T7466] RBP: 00007efddce2e090 R08: 0000000000000000 R09: 0000000000000000
[  247.212861][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.212875][ T7466] R13: 00007efddee56038 R14: 00007efddee55fa0 R15: 00007ffc89f30f98
[  247.212912][ T7466]  </TASK>
[  247.834399][   T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  247.993933][   T10] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  247.993966][   T10] usb 2-1: config 0 has no interface number 0
[  247.994015][   T10] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 32210, setting to 64
[  248.045026][   T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  248.045062][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.045084][   T10] usb 2-1: Product: syz
[  248.045099][   T10] usb 2-1: Manufacturer: syz
[  248.045116][   T10] usb 2-1: SerialNumber: syz
[  248.127641][   T10] usb 2-1: config 0 descriptor??
[  248.128489][ T7469] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  248.615936][   T10] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  248.618952][   T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  248.619052][   T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  248.619143][   T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  248.704673][   T10] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  248.728964][   T10] usb 2-1: USB disconnect, device number 7
[  248.798982][   T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  248.841063][   T10] keyspan 2-1:0.133: device disconnected
[  250.921236][ T5914] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  250.922141][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  251.099755][ T5914] usb 6-1: Using ep0 maxpacket: 32
[  251.104473][ T5914] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  251.104505][ T5914] usb 6-1: config 0 has no interface number 0
[  251.128881][   T10] usb 1-1: Using ep0 maxpacket: 8
[  251.142893][   T10] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  251.142925][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.142946][   T10] usb 1-1: config 0 has no interface number 0
[  251.142998][   T10] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  251.143083][   T10] usb 1-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  251.254995][ T5914] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  251.255095][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.255118][ T5914] usb 6-1: Product: syz
[  251.255134][ T5914] usb 6-1: Manufacturer: syz
[  251.255149][ T5914] usb 6-1: SerialNumber: syz
[  251.292744][   T10] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  251.292776][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.292798][   T10] usb 1-1: Product: syz
[  251.292814][   T10] usb 1-1: Manufacturer: syz
[  251.292829][   T10] usb 1-1: SerialNumber: syz
[  251.373464][   T10] usb 1-1: config 0 descriptor??
[  251.381023][ T5914] usb 6-1: config 0 descriptor??
[  251.428260][ T5914] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  251.826790][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'.
[  251.891622][ T5914] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  251.989997][ T5914] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  252.007975][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  252.113646][ T5914] usb 6-1: USB disconnect, device number 10
[  252.207236][ T5914] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  252.245293][ T5914] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  252.253368][ T5914] quatech2 6-1:0.51: device disconnected
[  252.769494][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  252.769573][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  253.420685][   T10] usb 1-1: NFC: intf ffff8880388e2000 id ffffffff8e755220
[  253.484446][   T10] usb 1-1: USB disconnect, device number 13
[  253.941912][  T810] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  254.322086][  T810] usb 6-1: device descriptor read/64, error -71
[  255.150352][  T810] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  255.274061][  T810] usb 6-1: device descriptor read/64, error -71
[  255.380483][  T810] usb usb6-port1: attempt power cycle
[  255.712144][  T810] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  255.733120][  T810] usb 6-1: device descriptor read/8, error -71
[  256.034742][  T810] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  256.094286][  T810] usb 6-1: device descriptor read/8, error -71
[  256.198759][  T810] usb usb6-port1: unable to enumerate USB device
[  256.203426][ T7545] CUSE: zero length info key specified
[  256.893637][ T7555] loop1: detected capacity change from 0 to 4096
[  256.950869][   T37] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  257.255328][   T37] usb 1-1: Using ep0 maxpacket: 32
[  257.259173][   T37] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  257.259202][   T37] usb 1-1: config 0 has no interface number 0
[  257.264198][   T37] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  257.264231][   T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.264252][   T37] usb 1-1: Product: syz
[  257.264268][   T37] usb 1-1: Manufacturer: syz
[  257.264284][   T37] usb 1-1: SerialNumber: syz
[  257.448237][   T37] usb 1-1: config 0 descriptor??
[  257.710342][   T37] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  257.729281][   T37] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  258.306770][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  258.798532][ T7575] overlayfs: invalid origin (000000790000006c6530002600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  259.062192][   T37] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  259.148880][   T37] usb 1-1: USB disconnect, device number 14
[  259.256753][   T37] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  259.277832][   T37] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  259.278782][   T37] quatech2 1-1:0.51: device disconnected
[  262.761110][  T810] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  262.904142][  T810] usb 1-1: Using ep0 maxpacket: 16
[  262.906856][  T810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  262.906888][  T810] usb 1-1: config 0 has no interface number 0
[  262.953483][  T810] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  262.953520][  T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.953544][  T810] usb 1-1: Product: syz
[  262.953560][  T810] usb 1-1: Manufacturer: syz
[  262.953577][  T810] usb 1-1: SerialNumber: syz
[  263.008894][ T5803] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  263.058053][  T810] usb 1-1: config 0 descriptor??
[  263.087122][  T810] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  263.151608][ T5803] usb 7-1: Using ep0 maxpacket: 32
[  263.158992][ T5803] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  263.159032][ T5803] usb 7-1: config 0 has no interface number 0
[  263.194927][ T5803] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  263.195019][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.195042][ T5803] usb 7-1: Product: syz
[  263.195058][ T5803] usb 7-1: Manufacturer: syz
[  263.195074][ T5803] usb 7-1: SerialNumber: syz
[  263.478092][ T5803] usb 7-1: config 0 descriptor??
[  263.562644][ T5803] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  263.573979][  T810] gspca_spca1528: reg_w err -110
[  263.589950][  T810] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[  264.515370][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  264.564919][ T5803] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  264.569834][ T5803] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  264.662425][ T5803] usb 7-1: USB disconnect, device number 7
[  264.690813][ T5803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  264.719258][ T5803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  264.720209][ T5803] quatech2 7-1:0.51: device disconnected
[  264.907920][ T5803] usb 1-1: USB disconnect, device number 15
[  265.815069][ T7633] Driver unsupported XDP return value 0 on prog  (id 82) dev N/A, expect packet loss!
[  266.064024][ T7640] pimreg: tun_chr_ioctl cmd 1074025676
[  266.064050][ T7640] pimreg: owner set to 0
[  266.209556][ T5803] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  266.383718][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  266.383758][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.383800][ T5803] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  266.383835][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.467276][ T5803] usb 7-1: config 0 descriptor??
[  266.529096][ T5803] hub 7-1:0.0: USB hub found
[  266.870815][ T7654] FAULT_INJECTION: forcing a failure.
[  266.870815][ T7654] name failslab, interval 1, probability 0, space 0, times 0
[  266.870856][ T7654] CPU: 1 UID: 0 PID: 7654 Comm: syz.3.445 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  266.870887][ T7654] Tainted: [L]=SOFTLOCKUP
[  266.870895][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  266.870908][ T7654] Call Trace:
[  266.870917][ T7654]  <TASK>
[  266.870926][ T7654]  dump_stack_lvl+0xe8/0x150
[  266.870965][ T7654]  should_fail_ex+0x46b/0x600
[  266.870999][ T7654]  should_failslab+0xa8/0x100
[  266.871022][ T7654]  __kmalloc_noprof+0xdf/0x7b0
[  266.871056][ T7654]  ? __pcs_replace_empty_main+0x443/0x710
[  266.871088][ T7654]  __pcs_replace_empty_main+0x443/0x710
[  266.871118][ T7654]  ? rt_spin_trylock+0x13a/0x2b0
[  266.871151][ T7654]  kmem_cache_alloc_noprof+0x433/0x680
[  266.871183][ T7654]  ? get_pid_task+0x20/0x1f0
[  266.871204][ T7654]  ? do_fcntl_add_lease+0xa1/0x480
[  266.871238][ T7654]  do_fcntl_add_lease+0xa1/0x480
[  266.871267][ T7654]  ? __lock_acquire+0x6b5/0x2cf0
[  266.871300][ T7654]  ? __pfx_do_fcntl_add_lease+0x10/0x10
[  266.871344][ T7654]  fcntl_setlease+0x126/0x180
[  266.871372][ T7654]  ? __lock_acquire+0x6b5/0x2cf0
[  266.871394][ T7654]  ? __pfx_fcntl_setlease+0x10/0x10
[  266.871432][ T7654]  do_fcntl+0x8d6/0x19e0
[  266.871470][ T7654]  ? smack_file_fcntl+0x150/0x320
[  266.871503][ T7654]  ? __pfx_do_fcntl+0x10/0x10
[  266.871537][ T7654]  ? __pfx_smack_file_fcntl+0x10/0x10
[  266.871579][ T7654]  ? __fget_files+0x2a/0x420
[  266.871615][ T7654]  ? bpf_lsm_file_fcntl+0x9/0x20
[  266.871641][ T7654]  __se_sys_fcntl+0xcb/0x160
[  266.871677][ T7654]  do_syscall_64+0x14d/0xf80
[  266.871710][ T7654]  ? trace_irq_disable+0x3b/0x150
[  266.871736][ T7654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.871760][ T7654]  ? clear_bhb_loop+0x40/0x90
[  266.871788][ T7654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.871811][ T7654] RIP: 0033:0x7fc3a09cc799
[  266.871832][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.871851][ T7654] RSP: 002b:00007fc39ec26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  266.871875][ T7654] RAX: ffffffffffffffda RBX: 00007fc3a0c45fa0 RCX: 00007fc3a09cc799
[  266.871891][ T7654] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000003
[  266.871905][ T7654] RBP: 00007fc39ec26090 R08: 0000000000000000 R09: 0000000000000000
[  266.871919][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.871932][ T7654] R13: 00007fc3a0c46038 R14: 00007fc3a0c45fa0 R15: 00007fff839bd268
[  266.871966][ T7654]  </TASK>
[  266.880002][ T5803] hub 7-1:0.0: 1 port detected
[  268.181307][ T5803] usb 7-1: USB disconnect, device number 8
[  268.212665][ T5914] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  268.459048][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.448'.
[  268.494946][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.448'.
[  268.638838][ T7666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.447'.
[  268.841220][ T5914] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  269.057922][ T5914] usb 4-1: Using ep0 maxpacket: 16
[  269.084013][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.084043][ T5914] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  269.134532][ T5914] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  269.134565][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.134587][ T5914] usb 4-1: Product: syz
[  269.134613][ T5914] usb 4-1: Manufacturer: syz
[  269.134629][ T5914] usb 4-1: SerialNumber: syz
[  269.548649][ T5914] usb 4-1: unit 2 not found!
[  269.548676][ T5914] usb 4-1: unit 8 not found!
[  269.558932][ T5914] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  269.620889][ T5914] usb 4-1: unit 2 not found!
[  269.620914][ T5914] usb 4-1: unit 8 not found!
[  269.953108][  T810] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  270.148251][  T810] usb 1-1: Using ep0 maxpacket: 16
[  270.152455][  T810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  270.152484][  T810] usb 1-1: config 0 has no interface number 0
[  270.197959][ T5914] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  270.217646][  T810] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  270.217680][  T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.217701][  T810] usb 1-1: Product: syz
[  270.217717][  T810] usb 1-1: Manufacturer: syz
[  270.217731][  T810] usb 1-1: SerialNumber: syz
[  270.313821][  T810] usb 1-1: config 0 descriptor??
[  270.374003][  T810] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  270.395162][ T5914] usb 4-1: USB disconnect, device number 8
[  270.721577][ T7229] udevd[7229]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  270.858790][  T810] gspca_spca1528: reg_w err -110
[  270.879141][  T810] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[  271.604887][ T7713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'.
[  272.853641][ T7736] capability: warning: `syz.3.466' uses deprecated v2 capabilities in a way that may be insecure
[  272.980243][ T7740] netlink: 84 bytes leftover after parsing attributes in process `syz.3.467'.
[  273.720467][   T37] usb 1-1: USB disconnect, device number 16
[  275.687261][ T5913] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  275.908413][ T5913] usb 6-1: Using ep0 maxpacket: 8
[  276.211674][ T5913] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  276.211710][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.211731][ T5913] usb 6-1: config 0 has no interface number 0
[  276.271968][ T5913] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  276.272006][ T5913] usb 6-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  276.304420][ T5913] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  276.304456][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.304480][ T5913] usb 6-1: Product: syz
[  276.304496][ T5913] usb 6-1: Manufacturer: syz
[  276.304511][ T5913] usb 6-1: SerialNumber: syz
[  276.414851][ T5913] usb 6-1: config 0 descriptor??
[  277.117415][ T7787] netlink: 2 bytes leftover after parsing attributes in process `syz.3.479'.
[  277.728771][ T7793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.476'.
[  278.052514][ T5913] usb 6-1: NFC: intf ffff8880298c6000 id ffffffff8e755220
[  278.102973][ T5913] usb 6-1: USB disconnect, device number 15
[  279.263238][   T60] Bluetooth: hci5: command 0x0406 tx timeout
[  279.263311][ T5804] Bluetooth: hci6: command 0x0406 tx timeout
[  280.611103][ T7830] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'.
[  281.595044][ T7852] FAULT_INJECTION: forcing a failure.
[  281.595044][ T7852] name failslab, interval 1, probability 0, space 0, times 0
[  281.595086][ T7852] CPU: 1 UID: 0 PID: 7852 Comm: syz.5.500 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  281.595114][ T7852] Tainted: [L]=SOFTLOCKUP
[  281.595123][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.595136][ T7852] Call Trace:
[  281.595144][ T7852]  <TASK>
[  281.595153][ T7852]  dump_stack_lvl+0xe8/0x150
[  281.595201][ T7852]  should_fail_ex+0x46b/0x600
[  281.595234][ T7852]  should_failslab+0xa8/0x100
[  281.595257][ T7852]  kmem_cache_alloc_noprof+0x87/0x680
[  281.595318][ T7852]  ? posix_lock_inode+0x35d/0x3db0
[  281.595351][ T7852]  posix_lock_inode+0x35d/0x3db0
[  281.595376][ T7852]  ? smk_tskacc+0x311/0x3a0
[  281.595410][ T7852]  ? smack_file_lock+0x1e4/0x280
[  281.595443][ T7852]  ? __pfx_smack_file_lock+0x10/0x10
[  281.595482][ T7852]  ? __pfx_posix_lock_inode+0x10/0x10
[  281.595520][ T7852]  fcntl_setlk+0x9de/0x10c0
[  281.595547][ T7852]  ? __lock_acquire+0x6b5/0x2cf0
[  281.595586][ T7852]  ? __pfx_fcntl_setlk+0x10/0x10
[  281.595632][ T7852]  do_fcntl+0x981/0x19e0
[  281.595669][ T7852]  ? smack_file_fcntl+0x150/0x320
[  281.595699][ T7852]  ? __pfx_do_fcntl+0x10/0x10
[  281.595731][ T7852]  ? __pfx_smack_file_fcntl+0x10/0x10
[  281.595772][ T7852]  ? __fget_files+0x2a/0x420
[  281.595806][ T7852]  ? bpf_lsm_file_fcntl+0x9/0x20
[  281.595830][ T7852]  __se_sys_fcntl+0xcb/0x160
[  281.595863][ T7852]  do_syscall_64+0x14d/0xf80
[  281.595895][ T7852]  ? trace_irq_disable+0x3b/0x150
[  281.595921][ T7852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.595944][ T7852]  ? clear_bhb_loop+0x40/0x90
[  281.595971][ T7852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.595994][ T7852] RIP: 0033:0x7efddebdc799
[  281.596015][ T7852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.596035][ T7852] RSP: 002b:00007efddce2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  281.596058][ T7852] RAX: ffffffffffffffda RBX: 00007efddee55fa0 RCX: 00007efddebdc799
[  281.596074][ T7852] RDX: 0000200000000040 RSI: 0000000000000026 RDI: 0000000000000004
[  281.596089][ T7852] RBP: 00007efddce2e090 R08: 0000000000000000 R09: 0000000000000000
[  281.596104][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.596117][ T7852] R13: 00007efddee56038 R14: 00007efddee55fa0 R15: 00007ffc89f30f98
[  281.596154][ T7852]  </TASK>
[  281.612516][ T5913] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  281.616993][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.6.499'.
[  281.748257][ T5944] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  281.866077][ T5913] usb 1-1: Using ep0 maxpacket: 32
[  281.902676][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.902715][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.902759][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  281.902786][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.974720][ T5944] usb 4-1: Using ep0 maxpacket: 16
[  281.977559][ T5913] usb 1-1: config 0 descriptor??
[  281.987056][ T5944] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  281.987089][ T5944] usb 4-1: config 0 has no interface number 0
[  282.030728][ T5913] hub 1-1:0.0: USB hub found
[  282.043425][ T5944] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  282.043521][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.043544][ T5944] usb 4-1: Product: syz
[  282.043559][ T5944] usb 4-1: Manufacturer: syz
[  282.043575][ T5944] usb 4-1: SerialNumber: syz
[  282.204470][ T5913] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  282.282601][ T5944] usb 4-1: config 0 descriptor??
[  282.329173][ T5944] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  282.801461][ T5913] hid_parser_main: 457 callbacks suppressed
[  282.801489][ T5913] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0
[  282.817351][ T5944] gspca_spca1528: reg_w err -110
[  282.839910][ T5944] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  283.238081][ T5913] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[  283.257243][ T7856] usb 4-1: USB disconnect, device number 9
[  283.352107][ T5913] usb 1-1: USB disconnect, device number 17
[  283.625195][ T7876] netlink: 2 bytes leftover after parsing attributes in process `syz.5.504'.
[  283.918420][ T7880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.506'.
[  284.713831][ T7886] fido_id[7886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  286.199343][ T7904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.276369][ T7915] loop2: detected capacity change from 0 to 7
[  287.325032][ T7915] Dev loop2: unable to read RDB block 7
[  287.325092][ T7915]  loop2: unable to read partition table
[  287.326552][ T7915] loop2: partition table beyond EOD, truncated
[  287.326596][ T7915] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  289.065705][ T7929] blktrace: Concurrent blktraces are not allowed on loop2
[  290.813411][ T7945] FAULT_INJECTION: forcing a failure.
[  290.813411][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.813452][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.1.525 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  290.813484][ T7945] Tainted: [L]=SOFTLOCKUP
[  290.813492][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  290.813505][ T7945] Call Trace:
[  290.813514][ T7945]  <TASK>
[  290.813523][ T7945]  dump_stack_lvl+0xe8/0x150
[  290.813562][ T7945]  should_fail_ex+0x46b/0x600
[  290.813596][ T7945]  _copy_to_user+0x31/0xb0
[  290.813633][ T7945]  simple_read_from_buffer+0xe1/0x170
[  290.813668][ T7945]  proc_fail_nth_read+0x1be/0x230
[  290.813700][ T7945]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  290.813731][ T7945]  ? rw_verify_area+0x2ac/0x4e0
[  290.813764][ T7945]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  290.813792][ T7945]  vfs_read+0x212/0xa80
[  290.813835][ T7945]  ? __pfx_vfs_read+0x10/0x10
[  290.813875][ T7945]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  290.813911][ T7945]  ? lockdep_hardirqs_on+0x7a/0x110
[  290.813945][ T7945]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  290.813980][ T7945]  ? mutex_lock_nested+0x152/0x1d0
[  290.814006][ T7945]  ? fdget_pos+0x252/0x320
[  290.814044][ T7945]  ksys_read+0x156/0x270
[  290.814080][ T7945]  ? __pfx_ksys_read+0x10/0x10
[  290.814126][ T7945]  do_syscall_64+0x14d/0xf80
[  290.814160][ T7945]  ? trace_irq_disable+0x3b/0x150
[  290.814187][ T7945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.814211][ T7945]  ? clear_bhb_loop+0x40/0x90
[  290.814237][ T7945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.814266][ T7945] RIP: 0033:0x7f4d1f0ecfce
[  290.814286][ T7945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  290.814305][ T7945] RSP: 002b:00007f4d1d385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  290.814328][ T7945] RAX: ffffffffffffffda RBX: 00007f4d1d3866c0 RCX: 00007f4d1f0ecfce
[  290.814345][ T7945] RDX: 000000000000000f RSI: 00007f4d1d3860a0 RDI: 0000000000000005
[  290.814358][ T7945] RBP: 00007f4d1d386090 R08: 0000000000000000 R09: 0000000000000000
[  290.814371][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.814383][ T7945] R13: 00007f4d1f3a6038 R14: 00007f4d1f3a5fa0 R15: 00007ffd72ab30a8
[  290.814419][ T7945]  </TASK>
[  295.056361][ T7965] FAULT_INJECTION: forcing a failure.
[  295.056361][ T7965] name failslab, interval 1, probability 0, space 0, times 0
[  295.056404][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz.1.532 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  295.056435][ T7965] Tainted: [L]=SOFTLOCKUP
[  295.056443][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.056456][ T7965] Call Trace:
[  295.056465][ T7965]  <TASK>
[  295.056475][ T7965]  dump_stack_lvl+0xe8/0x150
[  295.056515][ T7965]  should_fail_ex+0x46b/0x600
[  295.056550][ T7965]  should_failslab+0xa8/0x100
[  295.056576][ T7965]  __kmalloc_cache_noprof+0x84/0x690
[  295.056612][ T7965]  ? percpu_ref_init+0xc5/0x360
[  295.056643][ T7965]  ? __pfx_io_ring_ctx_ref_free+0x10/0x10
[  295.056679][ T7965]  percpu_ref_init+0xc5/0x360
[  295.056710][ T7965]  io_ring_ctx_alloc+0x2be/0xc70
[  295.056744][ T7965]  ? io_prepare_config+0x906/0xc70
[  295.056772][ T7965]  io_uring_create+0x50/0x980
[  295.056814][ T7965]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  295.056838][ T7965]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  295.056868][ T7965]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  295.056909][ T7965]  ? __pfx_ksys_write+0x10/0x10
[  295.056955][ T7965]  do_syscall_64+0x14d/0xf80
[  295.056997][ T7965]  ? trace_irq_disable+0x3b/0x150
[  295.057025][ T7965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.057049][ T7965]  ? clear_bhb_loop+0x40/0x90
[  295.057077][ T7965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.057100][ T7965] RIP: 0033:0x7f4d1f12c799
[  295.057121][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.057141][ T7965] RSP: 002b:00007f4d1d386028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  295.057165][ T7965] RAX: ffffffffffffffda RBX: 00007f4d1f3a5fa0 RCX: 00007f4d1f12c799
[  295.057183][ T7965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000899
[  295.057198][ T7965] RBP: 00007f4d1d386090 R08: 0000000000000000 R09: 0000000000000000
[  295.057211][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.057224][ T7965] R13: 00007f4d1f3a6038 R14: 00007f4d1f3a5fa0 R15: 00007ffd72ab30a8
[  295.057259][ T7965]  </TASK>
[  295.496633][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[  295.703791][  T810] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  295.817651][ T7991] FAULT_INJECTION: forcing a failure.
[  295.817651][ T7991] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.817693][ T7991] CPU: 1 UID: 0 PID: 7991 Comm: syz.3.542 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  295.817723][ T7991] Tainted: [L]=SOFTLOCKUP
[  295.817731][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.817745][ T7991] Call Trace:
[  295.817754][ T7991]  <TASK>
[  295.817763][ T7991]  dump_stack_lvl+0xe8/0x150
[  295.817801][ T7991]  should_fail_ex+0x46b/0x600
[  295.817836][ T7991]  _copy_from_iter+0x1d3/0x1670
[  295.817874][ T7991]  ? trace_kmem_cache_alloc+0x29/0xf0
[  295.817908][ T7991]  ? __alloc_skb+0x27d/0x7d0
[  295.817940][ T7991]  ? __pfx__copy_from_iter+0x10/0x10
[  295.817967][ T7991]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  295.818002][ T7991]  ? __alloc_skb+0x27d/0x7d0
[  295.818038][ T7991]  ? netlink_sendmsg+0x650/0xb40
[  295.818067][ T7991]  ? skb_put+0x11b/0x210
[  295.818102][ T7991]  netlink_sendmsg+0x6c0/0xb40
[  295.818143][ T7991]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.818175][ T7991]  ? unwind_get_return_address+0x4d/0x90
[  295.818202][ T7991]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  295.818240][ T7991]  ____sys_sendmsg+0x94c/0x9c0
[  295.818269][ T7991]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.818303][ T7991]  ? import_iovec+0x73/0xa0
[  295.818339][ T7991]  ___sys_sendmsg+0x2a5/0x360
[  295.818366][ T7991]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.818434][ T7991]  ? __fget_files+0x2a/0x420
[  295.818463][ T7991]  ? __fget_files+0x3a6/0x420
[  295.818504][ T7991]  __x64_sys_sendmsg+0x1c3/0x2a0
[  295.818531][ T7991]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  295.818564][ T7991]  ? __pfx_ksys_write+0x10/0x10
[  295.818611][ T7991]  do_syscall_64+0x14d/0xf80
[  295.818644][ T7991]  ? trace_irq_disable+0x3b/0x150
[  295.818670][ T7991]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.818693][ T7991]  ? clear_bhb_loop+0x40/0x90
[  295.818723][ T7991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.818746][ T7991] RIP: 0033:0x7fc3a09cc799
[  295.818767][ T7991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.818786][ T7991] RSP: 002b:00007fc39ec26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.818810][ T7991] RAX: ffffffffffffffda RBX: 00007fc3a0c45fa0 RCX: 00007fc3a09cc799
[  295.818827][ T7991] RDX: 0000000000004080 RSI: 0000200000000b40 RDI: 0000000000000004
[  295.818842][ T7991] RBP: 00007fc39ec26090 R08: 0000000000000000 R09: 0000000000000000
[  295.818856][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.818870][ T7991] R13: 00007fc3a0c46038 R14: 00007fc3a0c45fa0 R15: 00007fff839bd268
[  295.818905][ T7991]  </TASK>
[  296.203227][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  296.203265][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.203307][  T810] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  296.203333][  T810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.309365][  T810] usb 6-1: config 0 descriptor??
[  296.331707][  T810] hub 6-1:0.0: USB hub found
[  296.579599][  T810] hub 6-1:0.0: 1 port detected
[  297.065450][  T810] usb 6-1: USB disconnect, device number 16
[  297.309567][ T8003] tmpfs: Bad value for 'mpol'
[  297.314425][ T8003] netlink: 168 bytes leftover after parsing attributes in process `syz.6.546'.
[  298.158475][ T5885] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  298.267550][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'.
[  298.389301][ T5872] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  298.389475][ T5885] usb 6-1: Using ep0 maxpacket: 32
[  298.446653][ T5885] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  298.446685][ T5885] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  298.446709][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  298.446731][ T5885] usb 6-1: config 1 has no interface number 0
[  298.446777][ T5885] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  298.446805][ T5885] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  298.446849][ T5885] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  298.446873][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.544408][ T5944] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  298.666197][ T5885] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  298.684901][ T5944] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  298.684960][ T5944] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  298.685006][ T5944] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  298.685031][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.953336][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.969266][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.167439][ T5872] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  299.167475][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.167498][ T5872] usb 2-1: Product: syz
[  299.167513][ T5872] usb 2-1: Manufacturer: syz
[  299.167529][ T5872] usb 2-1: SerialNumber: syz
[  299.224536][ T5872] usb 2-1: config 0 descriptor??
[  299.268910][ T5885] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  299.869418][ T5944] usb 4-1: string descriptor 0 read error: -71
[  299.872167][ T5944] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1
[  299.980192][  T810] usb 6-1: USB disconnect, device number 17
[  299.983258][  T810] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  299.989736][ T5944] usb 4-1: USB disconnect, device number 10
[  300.615831][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.616520][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.959552][ T5872] usb 2-1: f81604_read: reg: 100f failed: -EPIPE
[  301.253825][ T8044] FAULT_INJECTION: forcing a failure.
[  301.253825][ T8044] name failslab, interval 1, probability 0, space 0, times 0
[  301.253866][ T8044] CPU: 0 UID: 0 PID: 8044 Comm: syz.5.560 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  301.253901][ T8044] Tainted: [L]=SOFTLOCKUP
[  301.253909][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  301.253922][ T8044] Call Trace:
[  301.253931][ T8044]  <TASK>
[  301.253940][ T8044]  dump_stack_lvl+0xe8/0x150
[  301.253978][ T8044]  should_fail_ex+0x46b/0x600
[  301.254012][ T8044]  should_failslab+0xa8/0x100
[  301.254036][ T8044]  kmem_cache_alloc_noprof+0x87/0x680
[  301.254069][ T8044]  ? bpf_lsm_cred_prepare+0x9/0x20
[  301.254093][ T8044]  ? copy_fs_struct+0x4f/0x270
[  301.254122][ T8044]  copy_fs_struct+0x4f/0x270
[  301.254150][ T8044]  __se_sys_setns+0x450/0x1bb0
[  301.254193][ T8044]  ? __pfx___se_sys_setns+0x10/0x10
[  301.254239][ T8044]  do_syscall_64+0x14d/0xf80
[  301.254270][ T8044]  ? trace_irq_disable+0x3b/0x150
[  301.254296][ T8044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.254319][ T8044]  ? clear_bhb_loop+0x40/0x90
[  301.254347][ T8044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.254371][ T8044] RIP: 0033:0x7efddebdc799
[  301.254393][ T8044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.254414][ T8044] RSP: 002b:00007efddce2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  301.254437][ T8044] RAX: ffffffffffffffda RBX: 00007efddee55fa0 RCX: 00007efddebdc799
[  301.254455][ T8044] RDX: 0000000000000000 RSI: 0000000034020000 RDI: 0000000000000003
[  301.254469][ T8044] RBP: 00007efddce2e090 R08: 0000000000000000 R09: 0000000000000000
[  301.254484][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.254498][ T8044] R13: 00007efddee56038 R14: 00007efddee55fa0 R15: 00007ffc89f30f98
[  301.254542][ T8044]  </TASK>
[  301.438498][  T810] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  301.711319][  T810] usb 4-1: device descriptor read/64, error -71
[  301.835490][ T5872] usb 2-1: USB disconnect, device number 8
[  301.939909][  T810] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  302.012336][ T5872] usb 2-1: f81604_read: reg: 100f failed: -ENODEV
[  302.073430][  T810] usb 4-1: device descriptor read/64, error -71
[  302.181489][  T810] usb usb4-port1: attempt power cycle
[  302.521003][  T810] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  302.540995][  T810] usb 4-1: device descriptor read/8, error -71
[  302.768728][  T810] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  302.803645][  T810] usb 4-1: device descriptor read/8, error -71
[  302.911044][  T810] usb usb4-port1: unable to enumerate USB device
[  304.530910][ T8067] FAULT_INJECTION: forcing a failure.
[  304.530910][ T8067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.530950][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: syz.6.568 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  304.530986][ T8067] Tainted: [L]=SOFTLOCKUP
[  304.530994][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  304.531009][ T8067] Call Trace:
[  304.531018][ T8067]  <TASK>
[  304.531028][ T8067]  dump_stack_lvl+0xe8/0x150
[  304.531066][ T8067]  should_fail_ex+0x46b/0x600
[  304.531101][ T8067]  _copy_to_user+0x31/0xb0
[  304.531138][ T8067]  simple_read_from_buffer+0xe1/0x170
[  304.531171][ T8067]  proc_fail_nth_read+0x1be/0x230
[  304.531203][ T8067]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  304.531234][ T8067]  ? rw_verify_area+0x2ac/0x4e0
[  304.531265][ T8067]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  304.531293][ T8067]  vfs_read+0x212/0xa80
[  304.531335][ T8067]  ? __pfx_vfs_read+0x10/0x10
[  304.531369][ T8067]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  304.531405][ T8067]  ? lockdep_hardirqs_on+0x7a/0x110
[  304.531439][ T8067]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  304.531473][ T8067]  ? mutex_lock_nested+0x152/0x1d0
[  304.531500][ T8067]  ? fdget_pos+0x252/0x320
[  304.531536][ T8067]  ksys_read+0x156/0x270
[  304.531572][ T8067]  ? __pfx_ksys_read+0x10/0x10
[  304.531618][ T8067]  do_syscall_64+0x14d/0xf80
[  304.531649][ T8067]  ? trace_irq_disable+0x3b/0x150
[  304.531675][ T8067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.531705][ T8067]  ? clear_bhb_loop+0x40/0x90
[  304.531734][ T8067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.531758][ T8067] RIP: 0033:0x7f31525fcfce
[  304.531780][ T8067] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  304.531800][ T8067] RSP: 002b:00007f3150895fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  304.531825][ T8067] RAX: ffffffffffffffda RBX: 00007f31508966c0 RCX: 00007f31525fcfce
[  304.531841][ T8067] RDX: 000000000000000f RSI: 00007f31508960a0 RDI: 0000000000000004
[  304.531855][ T8067] RBP: 00007f3150896090 R08: 0000000000000000 R09: 0000000000000000
[  304.531868][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.531880][ T8067] R13: 00007f31528b6038 R14: 00007f31528b5fa0 R15: 00007fff97d2a2c8
[  304.531917][ T8067]  </TASK>
[  305.005011][ T5872] usb 2-1: f81604_read: reg: 200f failed: -ENODEV
[  306.630388][ T8084] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  306.687129][ T8053] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  306.687159][ T8053] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  307.363842][ T8053] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  307.363869][ T8053] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  307.837078][ T5944] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  307.926980][ T8053] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  307.927028][ T8053] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  308.846363][ T5944] usb 2-1: Using ep0 maxpacket: 16
[  308.852042][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.852071][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.897330][ T5913] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  308.928036][ T5944] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.928071][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.928093][ T5944] usb 2-1: Product: syz
[  308.928108][ T5944] usb 2-1: Manufacturer: syz
[  308.928122][ T5944] usb 2-1: SerialNumber: syz
[  309.036703][ T5913] usb 6-1: Using ep0 maxpacket: 8
[  309.136115][ T5913] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  309.136146][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.136167][ T5913] usb 6-1: config 0 has no interface number 0
[  309.136294][ T5913] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  309.136320][ T5913] usb 6-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  309.146842][ T5913] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  309.146934][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.146957][ T5913] usb 6-1: Product: syz
[  309.146973][ T5913] usb 6-1: Manufacturer: syz
[  309.146988][ T5913] usb 6-1: SerialNumber: syz
[  309.183737][ T8095] netlink: 68 bytes leftover after parsing attributes in process `syz.1.578'.
[  309.184149][ T8095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.578'.
[  309.270972][ T5944] usb 2-1: 0:2 : does not exist
[  309.310640][ T5944] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  309.340691][ T5913] usb 6-1: config 0 descriptor??
[  309.884246][ T5808] Bluetooth: hci4: command 0x0406 tx timeout
[  310.039480][ T5944] usb 2-1: USB disconnect, device number 9
[  310.653103][ T8115] erofs (device loop6): cannot find valid erofs superblock
[  311.286213][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  311.287952][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  311.388881][ T7229] udevd[7229]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  311.626177][ T5913] usb 6-1: NFC: intf ffff88803488e000 id ffffffff8e755220
[  311.694829][ T5913] usb 6-1: USB disconnect, device number 18
[  314.575414][ T8153] FAULT_INJECTION: forcing a failure.
[  314.575414][ T8153] name fail_futex, interval 1, probability 0, space 0, times 1
[  314.575456][ T8153] CPU: 0 UID: 0 PID: 8153 Comm: syz.3.592 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  314.575486][ T8153] Tainted: [L]=SOFTLOCKUP
[  314.575494][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  314.575507][ T8153] Call Trace:
[  314.575516][ T8153]  <TASK>
[  314.575525][ T8153]  dump_stack_lvl+0xe8/0x150
[  314.575563][ T8153]  should_fail_ex+0x46b/0x600
[  314.575597][ T8153]  get_futex_key+0x1ac/0x1690
[  314.575642][ T8153]  ? __pfx_get_futex_key+0x10/0x10
[  314.575671][ T8153]  ? __lock_acquire+0x6b5/0x2cf0
[  314.575701][ T8153]  ? __lock_acquire+0x6b5/0x2cf0
[  314.575726][ T8153]  futex_wait_setup+0x4c/0x560
[  314.575753][ T8153]  ? arch_stack_walk+0xfb/0x150
[  314.575786][ T8153]  __futex_wait+0x175/0x420
[  314.575821][ T8153]  ? __pfx___futex_wait+0x10/0x10
[  314.575852][ T8153]  ? __pfx_futex_wake_mark+0x10/0x10
[  314.575891][ T8153]  ? __hrtimer_setup+0x181/0x200
[  314.575914][ T8153]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  314.575944][ T8153]  ? hrtimer_setup_sleeper_on_stack+0xdc/0x130
[  314.575971][ T8153]  ? ktime_add_safe+0x38/0x70
[  314.575998][ T8153]  futex_wait+0x119/0x380
[  314.576028][ T8153]  ? __pfx_futex_wait+0x10/0x10
[  314.576057][ T8153]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  314.576100][ T8153]  do_futex+0x333/0x420
[  314.576127][ T8153]  ? __pfx_do_futex+0x10/0x10
[  314.576147][ T8153]  ? rt_mutex_slowunlock+0x1cb/0x300
[  314.576175][ T8153]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  314.576210][ T8153]  __se_sys_futex+0x3a8/0x450
[  314.576239][ T8153]  ? __pfx___se_sys_futex+0x10/0x10
[  314.576261][ T8153]  ? __pfx_ksys_write+0x10/0x10
[  314.576300][ T8153]  ? __x64_sys_futex+0x21/0xf0
[  314.576325][ T8153]  do_syscall_64+0x14d/0xf80
[  314.576357][ T8153]  ? trace_irq_disable+0x3b/0x150
[  314.576383][ T8153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.576406][ T8153]  ? clear_bhb_loop+0x40/0x90
[  314.576434][ T8153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.576456][ T8153] RIP: 0033:0x7fc3a09cc799
[  314.576477][ T8153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.576497][ T8153] RSP: 002b:00007fc39ec26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  314.576521][ T8153] RAX: ffffffffffffffda RBX: 00007fc3a0c45fa0 RCX: 00007fc3a09cc799
[  314.576537][ T8153] RDX: 0000000000000000 RSI: 0000000000000189 RDI: 0000200000000580
[  314.576552][ T8153] RBP: 00007fc39ec26090 R08: 0000000000000000 R09: 0000000000000002
[  314.576568][ T8153] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001
[  314.576583][ T8153] R13: 00007fc3a0c46038 R14: 00007fc3a0c45fa0 R15: 00007fff839bd268
[  314.576619][ T8153]  </TASK>
[  315.485699][ T5886] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  315.838057][ T5886] usb 6-1: Using ep0 maxpacket: 16
[  315.839953][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.839987][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.840011][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  315.840058][ T5886] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  315.840083][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.854712][ T5886] usb 6-1: config 0 descriptor??
[  316.123488][ T8170] netlink: 1012 bytes leftover after parsing attributes in process `syz.3.597'.
[  316.490084][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490126][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490158][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490184][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490212][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490239][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490266][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490294][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490323][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.490363][ T5886] a4tech 0003:09DA:000A.0007: unknown main item tag 0x0
[  316.554965][ T5886] a4tech 0003:09DA:000A.0007: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.5-1/input0
[  317.720402][ T8053] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  317.720429][ T8053] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  318.079762][ T8053] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  318.079790][ T8053] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  318.174558][ T5886] usb 6-1: USB disconnect, device number 19
[  319.179580][ T8210] FAULT_INJECTION: forcing a failure.
[  319.179580][ T8210] name failslab, interval 1, probability 0, space 0, times 0
[  319.179656][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.3.604 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  319.179695][ T8210] Tainted: [L]=SOFTLOCKUP
[  319.179703][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  319.179718][ T8210] Call Trace:
[  319.179726][ T8210]  <TASK>
[  319.179737][ T8210]  dump_stack_lvl+0xe8/0x150
[  319.179775][ T8210]  should_fail_ex+0x46b/0x600
[  319.179810][ T8210]  should_failslab+0xa8/0x100
[  319.179836][ T8210]  kmem_cache_alloc_noprof+0x87/0x680
[  319.179878][ T8210]  ? alloc_empty_file+0x55/0x1d0
[  319.179911][ T8210]  alloc_empty_file+0x55/0x1d0
[  319.179939][ T8210]  path_openat+0x11b/0x38a0
[  319.179991][ T8210]  ? try_to_take_rt_mutex+0x840/0xb00
[  319.180021][ T8210]  ? arch_stack_walk+0xfb/0x150
[  319.180054][ T8210]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  319.180095][ T8210]  ? __pfx_path_openat+0x10/0x10
[  319.180129][ T8210]  ? __lock_acquire+0x6b5/0x2cf0
[  319.180154][ T8210]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  319.180195][ T8210]  ? do_raw_spin_lock+0x12b/0x2f0
[  319.180238][ T8210]  do_file_open+0x23e/0x4a0
[  319.180271][ T8210]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  319.180311][ T8210]  ? __pfx_do_file_open+0x10/0x10
[  319.180343][ T8210]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  319.180395][ T8210]  ? alloc_fd+0x64e/0x6c0
[  319.180434][ T8210]  do_sys_openat2+0x113/0x200
[  319.180465][ T8210]  ? __pfx_do_sys_openat2+0x10/0x10
[  319.180497][ T8210]  ? __x64_sys_openat+0x122/0x170
[  319.180533][ T8210]  __x64_sys_openat+0x138/0x170
[  319.180566][ T8210]  do_syscall_64+0x14d/0xf80
[  319.180598][ T8210]  ? trace_irq_disable+0x3b/0x150
[  319.180624][ T8210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.180648][ T8210]  ? clear_bhb_loop+0x40/0x90
[  319.180676][ T8210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.180699][ T8210] RIP: 0033:0x7fc3a098cfce
[  319.180721][ T8210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  319.180740][ T8210] RSP: 002b:00007fc39ebe3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  319.180764][ T8210] RAX: ffffffffffffffda RBX: 00007fc39ebe46c0 RCX: 00007fc3a098cfce
[  319.180781][ T8210] RDX: 0000000000000002 RSI: 00007fc39ebe3c00 RDI: ffffffffffffff9c
[  319.180797][ T8210] RBP: 00007fc39ebe3c00 R08: 0000000000000000 R09: 0000000000000000
[  319.180812][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  319.180827][ T8210] R13: 00007fc3a0c46218 R14: 00007fc3a0c46180 R15: 00007fff839bd268
[  319.180863][ T8210]  </TASK>
[  320.780249][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[  320.780284][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[  323.585638][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.609'.
[  323.585673][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.609'.
[  324.121011][ T8243] blktrace: Concurrent blktraces are not allowed on loop2
[  325.658875][ T5944] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  325.766300][ T8260] FAULT_INJECTION: forcing a failure.
[  325.766300][ T8260] name failslab, interval 1, probability 0, space 0, times 0
[  325.766341][ T8260] CPU: 1 UID: 0 PID: 8260 Comm: syz.1.617 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  325.766372][ T8260] Tainted: [L]=SOFTLOCKUP
[  325.766380][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  325.766393][ T8260] Call Trace:
[  325.766402][ T8260]  <TASK>
[  325.766412][ T8260]  dump_stack_lvl+0xe8/0x150
[  325.766451][ T8260]  should_fail_ex+0x46b/0x600
[  325.766482][ T8260]  ? create_io_worker+0x27/0x5c0
[  325.766506][ T8260]  should_failslab+0xa8/0x100
[  325.766530][ T8260]  __kmalloc_cache_noprof+0x84/0x690
[  325.766568][ T8260]  ? create_io_worker+0xab/0x5c0
[  325.766591][ T8260]  ? create_io_worker+0x27/0x5c0
[  325.766614][ T8260]  create_io_worker+0xab/0x5c0
[  325.766641][ T8260]  io_wq_enqueue+0x675/0x8a0
[  325.766672][ T8260]  ? io_wq_enqueue+0x332/0x8a0
[  325.766702][ T8260]  ? __pfx_io_wq_work_match_item+0x10/0x10
[  325.766742][ T8260]  io_submit_sqes+0x152f/0x2400
[  325.766803][ T8260]  __se_sys_io_uring_enter+0x2d2/0x18c0
[  325.766825][ T8260]  ? lockdep_hardirqs_on+0x7a/0x110
[  325.766863][ T8260]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  325.766900][ T8260]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  325.766924][ T8260]  ? fput+0xa0/0xd0
[  325.766952][ T8260]  ? ksys_write+0x248/0x270
[  325.766996][ T8260]  ? __pfx_ksys_write+0x10/0x10
[  325.767036][ T8260]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  325.767062][ T8260]  do_syscall_64+0x14d/0xf80
[  325.767095][ T8260]  ? trace_irq_disable+0x3b/0x150
[  325.767120][ T8260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.767143][ T8260]  ? clear_bhb_loop+0x40/0x90
[  325.767170][ T8260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.767192][ T8260] RIP: 0033:0x7f4d1f12c799
[  325.767214][ T8260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.767233][ T8260] RSP: 002b:00007f4d1d386028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  325.767256][ T8260] RAX: ffffffffffffffda RBX: 00007f4d1f3a5fa0 RCX: 00007f4d1f12c799
[  325.767272][ T8260] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  325.767286][ T8260] RBP: 00007f4d1d386090 R08: 0000000000000000 R09: 0000000000000000
[  325.767300][ T8260] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  325.767313][ T8260] R13: 00007f4d1f3a6038 R14: 00007f4d1f3a5fa0 R15: 00007ffd72ab30a8
[  325.767349][ T8260]  </TASK>
[  326.078193][ T5944] usb 7-1: Using ep0 maxpacket: 16
[  326.130536][ T5944] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  326.130568][ T5944] usb 7-1: config 0 has no interface number 0
[  326.159861][ T5944] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  326.159895][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.159917][ T5944] usb 7-1: Product: syz
[  326.159940][ T5944] usb 7-1: Manufacturer: syz
[  326.159957][ T5944] usb 7-1: SerialNumber: syz
[  326.284861][ T5944] usb 7-1: config 0 descriptor??
[  326.415917][ T8259] FAULT_INJECTION: forcing a failure.
[  326.415917][ T8259] name fail_futex, interval 1, probability 0, space 0, times 0
[  326.415960][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.5.616 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  326.415992][ T8259] Tainted: [L]=SOFTLOCKUP
[  326.416000][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  326.416012][ T8259] Call Trace:
[  326.416022][ T8259]  <TASK>
[  326.416031][ T8259]  dump_stack_lvl+0xe8/0x150
[  326.416069][ T8259]  should_fail_ex+0x46b/0x600
[  326.416103][ T8259]  get_futex_key+0x1022/0x1690
[  326.416145][ T8259]  ? perf_lock_task_context+0xf3/0x850
[  326.416173][ T8259]  ? __lock_acquire+0x6b5/0x2cf0
[  326.416196][ T8259]  ? __pfx_get_futex_key+0x10/0x10
[  326.416241][ T8259]  futex_wake+0x114/0x580
[  326.416267][ T8259]  ? __lock_acquire+0x6b5/0x2cf0
[  326.416293][ T8259]  ? __pfx_futex_wake+0x10/0x10
[  326.416321][ T8259]  ? do_raw_spin_lock+0x12b/0x2f0
[  326.416365][ T8259]  do_futex+0x395/0x420
[  326.416393][ T8259]  ? __pfx_do_futex+0x10/0x10
[  326.416429][ T8259]  ? __might_fault+0xaf/0x130
[  326.416467][ T8259]  mm_release+0x103/0x290
[  326.416501][ T8259]  exit_mm+0x51/0x220
[  326.416523][ T8259]  ? unwind_deferred_task_exit+0x67/0xa0
[  326.416552][ T8259]  do_exit+0x6a2/0x23c0
[  326.416578][ T8259]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  326.416616][ T8259]  ? __pfx_do_exit+0x10/0x10
[  326.416638][ T8259]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  326.416664][ T8259]  ? reacquire_held_locks+0x104/0x190
[  326.416689][ T8259]  ? rt_spin_lock+0x1e0/0x400
[  326.416729][ T8259]  do_group_exit+0x21b/0x2d0
[  326.416754][ T8259]  ? rt_spin_unlock+0x160/0x200
[  326.416785][ T8259]  get_signal+0x125c/0x1310
[  326.416837][ T8259]  arch_do_signal_or_restart+0xbc/0x830
[  326.416868][ T8259]  ? __x64_sys_sendmsg+0x275/0x2a0
[  326.416891][ T8259]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  326.416940][ T8259]  exit_to_user_mode_loop+0x86/0x480
[  326.416974][ T8259]  ? rcu_is_watching+0x15/0xb0
[  326.417003][ T8259]  do_syscall_64+0x32d/0xf80
[  326.417036][ T8259]  ? trace_irq_disable+0x3b/0x150
[  326.417061][ T8259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.417084][ T8259]  ? clear_bhb_loop+0x40/0x90
[  326.417112][ T8259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.417135][ T8259] RIP: 0033:0x7efddebdc799
[  326.417157][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.417177][ T8259] RSP: 002b:00007efddce0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  326.417201][ T8259] RAX: fffffffffffffe00 RBX: 00007efddee56090 RCX: 00007efddebdc799
[  326.417217][ T8259] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003
[  326.417231][ T8259] RBP: 00007efddce0d090 R08: 0000000000000000 R09: 0000000000000000
[  326.417245][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.417258][ T8259] R13: 00007efddee56128 R14: 00007efddee56090 R15: 00007ffc89f30f98
[  326.417293][ T8259]  </TASK>
[  327.952537][ T5944] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  328.968279][ T5944] gspca_spca1528: reg_w err -110
[  328.983282][ T5944] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110
[  330.107627][ T5944] usb 7-1: USB disconnect, device number 9
[  334.004096][ T8285] tmpfs: Bad value for 'huge'
[  334.232242][ T5885] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  334.698990][ T5885] usb 4-1: Using ep0 maxpacket: 16
[  334.701721][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  334.701749][ T5885] usb 4-1: config 0 has no interface number 0
[  334.706792][ T5885] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  334.706823][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.706844][ T5885] usb 4-1: Product: syz
[  334.706859][ T5885] usb 4-1: Manufacturer: syz
[  334.706874][ T5885] usb 4-1: SerialNumber: syz
[  334.771289][ T5885] usb 4-1: config 0 descriptor??
[  335.146244][ T5885] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  335.820787][ T5885] gspca_spca1528: reg_w err -110
[  335.887894][ T5885] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  336.865979][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  336.894398][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  336.897345][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  336.901176][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  336.912431][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.204123][ T5885] usb 4-1: USB disconnect, device number 15
[  337.435414][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.472742][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.488142][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.489504][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.529352][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  339.535293][ T5806] Bluetooth: hci0: command tx timeout
[  341.537592][ T5806] Bluetooth: hci0: command tx timeout
[  343.549285][ T5806] Bluetooth: hci0: command tx timeout
[  345.489055][ T5806] Bluetooth: hci0: command tx timeout
[  355.282383][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  355.301743][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  356.183209][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  356.203277][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  356.204222][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  356.231958][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  356.268328][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  356.306394][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  356.337697][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  356.352690][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  357.036045][ T8190] chnl_net:caif_netlink_parms(): no params data found
[  357.126367][ T5804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  357.150006][ T5804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  357.160620][ T5804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  357.183641][ T5804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  357.189556][ T5804] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  358.265371][ T5808] Bluetooth: hci2: command tx timeout
[  358.427285][ T5808] Bluetooth: hci4: command tx timeout
[  359.614474][ T5804] Bluetooth: hci7: command tx timeout
[  360.589708][ T5804] Bluetooth: hci4: command tx timeout
[  360.592330][ T5808] Bluetooth: hci2: command tx timeout
[  361.561261][ T5808] Bluetooth: hci7: command tx timeout
[  362.542291][ T5808] Bluetooth: hci2: command tx timeout
[  362.542328][ T5808] Bluetooth: hci4: command tx timeout
[  363.559743][ T5804] Bluetooth: hci7: command tx timeout
[  364.523622][ T5804] Bluetooth: hci4: command tx timeout
[  364.523658][ T5804] Bluetooth: hci2: command tx timeout
[  365.514595][ T5808] Bluetooth: hci7: command tx timeout
[  370.097367][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  370.097456][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  372.964307][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  372.986059][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  372.987711][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  372.989364][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  372.990454][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.039959][ T5804] Bluetooth: hci5: command tx timeout
[  377.097595][ T5804] Bluetooth: hci5: command tx timeout
[  379.105591][ T5808] Bluetooth: hci5: command tx timeout
[  381.136368][ T5804] Bluetooth: hci5: command tx timeout
[  383.345815][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  383.378697][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  383.404189][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.414906][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.416070][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  386.547110][ T5804] Bluetooth: hci6: command tx timeout
[  388.551010][ T5804] Bluetooth: hci6: command tx timeout
[  390.595377][ T5804] Bluetooth: hci6: command tx timeout
[  392.576740][ T5804] Bluetooth: hci6: command tx timeout
[  395.977597][ T8331] chnl_net:caif_netlink_parms(): no params data found
[  398.567815][ T8332] chnl_net:caif_netlink_parms(): no params data found
[  402.585731][ T8338] chnl_net:caif_netlink_parms(): no params data found
[  405.084010][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.084143][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.084417][ T8331] bridge_slave_0: entered allmulticast mode
[  405.087416][ T8331] bridge_slave_0: entered promiscuous mode
[  414.388344][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.388493][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.388777][ T8331] bridge_slave_1: entered allmulticast mode
[  414.458497][ T8331] bridge_slave_1: entered promiscuous mode
[  417.707419][ T8357] chnl_net:caif_netlink_parms(): no params data found
[  418.103613][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  418.139318][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  418.153086][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  418.182272][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  418.283417][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  419.138206][ T5804] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  419.152282][ T5804] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  419.191428][ T5804] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  419.242787][   T60] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  419.277075][   T60] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  419.285954][ T5806] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  419.299732][ T5806] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  419.314171][ T5806] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  419.429452][ T5808] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  419.476343][ T5808] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  420.696311][ T5804] Bluetooth: hci0: command tx timeout
[  421.372503][ T5808] Bluetooth: hci8: command tx timeout
[  421.905981][ T5808] Bluetooth: hci9: command tx timeout
[  422.676238][ T5808] Bluetooth: hci0: command tx timeout
[  423.354271][ T5808] Bluetooth: hci8: command tx timeout
[  423.834277][ T8370] chnl_net:caif_netlink_parms(): no params data found
[  423.889470][ T5808] Bluetooth: hci9: command tx timeout
[  423.907810][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.907941][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.908223][ T8357] bridge_slave_0: entered allmulticast mode
[  423.916103][ T8357] bridge_slave_0: entered promiscuous mode
[  424.659215][ T5808] Bluetooth: hci0: command tx timeout
[  425.335276][ T5808] Bluetooth: hci8: command tx timeout
[  425.868666][ T5808] Bluetooth: hci9: command tx timeout
[  426.630891][ T5808] Bluetooth: hci0: command tx timeout
[  427.369972][ T5808] Bluetooth: hci8: command tx timeout
[  427.849991][ T5808] Bluetooth: hci9: command tx timeout
[  428.314378][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  428.314453][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  434.755442][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  434.824656][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  434.897660][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  434.901309][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  434.918827][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.027307][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.067094][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.145100][ T8357] bridge_slave_1: entered allmulticast mode
[  436.214716][ T8357] bridge_slave_1: entered promiscuous mode
[  436.395933][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  436.403431][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  436.414628][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  436.417687][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  436.421731][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  436.975454][ T5808] Bluetooth: hci2: command tx timeout
[  438.366310][ T5808] Bluetooth: hci4: command tx timeout
[  438.899766][ T5808] Bluetooth: hci2: command tx timeout
[  440.347607][ T5808] Bluetooth: hci4: command tx timeout
[  440.881168][ T5808] Bluetooth: hci2: command tx timeout
[  442.328990][ T5808] Bluetooth: hci4: command tx timeout
[  442.862719][ T5804] Bluetooth: hci2: command tx timeout
[  444.319884][ T5804] Bluetooth: hci4: command tx timeout
[  478.909869][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  478.939502][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  478.953826][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  478.967900][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  478.969041][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  480.119108][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  480.134914][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  480.158876][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  480.612818][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  480.648283][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  480.864715][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  480.881874][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  480.902345][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  480.907306][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  480.911005][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  480.971419][ T5808] Bluetooth: hci3: command tx timeout
[  482.965262][ T5808] Bluetooth: hci5: command tx timeout
[  482.965824][ T5808] Bluetooth: hci6: command tx timeout
[  482.966018][ T5808] Bluetooth: hci3: command tx timeout
[  485.034775][   T60] Bluetooth: hci3: command tx timeout
[  485.034817][   T60] Bluetooth: hci6: command tx timeout
[  485.034841][   T60] Bluetooth: hci5: command tx timeout
[  485.887321][   T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  485.935456][   T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  485.945075][   T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  485.950248][   T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  485.951706][   T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  486.890422][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  486.890499][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  486.986714][   T60] Bluetooth: hci5: command tx timeout
[  486.986748][   T60] Bluetooth: hci6: command tx timeout
[  486.986771][   T60] Bluetooth: hci3: command tx timeout
[  487.899436][ T5808] Bluetooth: hci7: command tx timeout
[  488.966350][ T5808] Bluetooth: hci6: command tx timeout
[  488.966386][ T5808] Bluetooth: hci5: command tx timeout
[  489.880822][   T60] Bluetooth: hci7: command tx timeout
[  491.890723][ T5808] Bluetooth: hci7: command tx timeout
[  493.845087][ T5808] Bluetooth: hci7: command tx timeout
[  496.939049][   T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  496.950601][   T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  496.951908][   T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  496.970136][   T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  496.971012][   T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  498.949207][   T60] Bluetooth: hci10: command tx timeout
[  500.930561][   T60] Bluetooth: hci10: command tx timeout
[  503.154206][   T60] Bluetooth: hci10: command tx timeout
[  505.121867][   T60] Bluetooth: hci10: command tx timeout
[  506.341693][   T39] INFO: task syz-executor:6411 blocked for more than 143 seconds.
[  506.341725][   T39]       Tainted: G             L      syzkaller #0
[  506.341740][   T39]       Blocked by coredump.
[  506.341747][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  506.341757][   T39] task:syz-executor    state:D stack:21968 pid:6411  tgid:6411  ppid:1      task_flags:0x40054c flags:0x00080003
[  506.341834][   T39] Call Trace:
[  506.341843][   T39]  <TASK>
[  506.341859][   T39]  __schedule+0x1553/0x5240
[  506.342072][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  506.342152][   T39]  ? unwind_next_frame+0xa5/0x23c0
[  506.342198][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  506.342223][   T39]  ? __pfx___schedule+0x10/0x10
[  506.342273][   T39]  rt_mutex_schedule+0x76/0xf0
[  506.342310][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  506.342359][   T39]  rt_mutex_slowlock+0x2dc/0x7b0
[  506.342390][   T39]  ? rt_mutex_slowlock+0x1fd/0x7b0
[  506.342419][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  506.342468][   T39]  ? rcu_barrier+0x4c/0x580
[  506.342510][   T39]  ? rcu_barrier+0x4c/0x580
[  506.342536][   T39]  mutex_lock_nested+0x168/0x1d0
[  506.342561][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  506.342595][   T39]  rcu_barrier+0x4c/0x580
[  506.342634][   T39]  netdev_run_todo+0x2e0/0xde0
[  506.342737][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  506.342761][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  506.342884][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  506.342970][   T39]  ? netdev_state_change+0x1ca/0x220
[  506.343034][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  506.343157][   T39]  tun_chr_close+0x13f/0x1c0
[  506.343192][   T39]  __fput+0x461/0xa90
[  506.343263][   T39]  task_work_run+0x1d9/0x270
[  506.343302][   T39]  ? __pfx_task_work_run+0x10/0x10
[  506.343330][   T39]  ? kmem_cache_free+0x185/0x6b0
[  506.343392][   T39]  ? put_net+0x191/0x260
[  506.343429][   T39]  do_exit+0x70f/0x23c0
[  506.343465][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  506.343531][   T39]  ? __pfx_do_exit+0x10/0x1[  506.343531][   T39]  ? __pfx_do_exit+0x10/0x10
[  506.343553][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  506.343581][   T39]  ? reacquire_held_locks+0x104/0x190
[  506.343608][   T39]  ? rt_spin_lock+0x1e0/0x400
[  506.343650][   T39]  do_group_exit+0x21b/0x2d0
[  506.343676][   T39]  ? rt_spin_unlock+0x160/0x200
[  506.343708][   T39]  get_signal+0x125c/0x1310
[  506.343762][   T39]  arch_do_signal_or_restart+0xbc/0x830
[  506.343818][   T39]  ? __pfx___x64_sys_wait4+0x10/0x10
[  506.343847][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  506.343899][   T39]  exit_to_user_mode_loop+0x86/0x480
[  506.343950][   T39]  ? rcu_is_watching+0x15/0xb0
[  506.343981][   T39]  do_syscall_64+0x32d/0xf80
[  506.344015][   T39]  ? trace_irq_disable+0x3b/0x150
[  506.344054][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.344105][   T39]  ? clear_bhb_loop+0x40/0x90
[  506.344135][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.344159][   T39] RIP: 0033:0x7efddeb9cfce
[  506.344181][   T39] RSP: 002b:00007ffc89f31298 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  506.344207][   T39] RAX: fffffffffffffe00 RBX: 0000555562fae500 RCX: 00007efddeb9cfce
[  506.344225][   T39] RDX: 0000000040000000 RSI: 00007ffc89f3133c RDI: ffffffffffffffff
[  506.344241][   T39] RBP: 00007ffc89f3133c R08: 0000000000000000 R09: 0000000000000000
[  506.344255][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004e
[  506.344269][   T39] R13: 0000555562fc19f0 R14: 0000000000053606 R15: 00007ffc89f31390
[  506.344305][   T39]  </TASK>
[  506.344316][   T39] INFO: task syz-executor:6417 blocked for more than 143 seconds.
[  506.344336][   T39]       Tainted: G             L      syzkaller #0
[  506.344348][   T39]       Blocked by coredump.
[  506.344355][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  506.344366][   T39] task:syz-executor    state:D stack:21704 pid:6417  tgid:6417  ppid:1      task_flags:0x40054c flags:0x00080003
[  506.344425][   T39] Call Trace:
[  506.344433][   T39]  <TASK>
[  506.344447][   T39]  __schedule+0x1553/0x5240
[  506.344484][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  506.344514][   T39]  ? unwind_next_frame+0xa5/0x23c0
[  506.344547][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  506.344572][   T39]  ? __pfx___schedule+0x10/0x10
[  506.344621][   T39]  rt_mutex_schedule+0x76/0xf0
[  506.344649][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  506.344697][   T39]  rt_mutex_slowlock+0x2dc/0x7b0
[  506.344728][   T39]  ? rt_mutex_slowlock+0x1fd/0x7b0
[  506.344758][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  506.344807][   T39]  ? rcu_barrier+0x4c/0x580
[  506.344841][   T39]  ? rcu_barrier+0x4c/0x580
[  506.344867][   T39]  mutex_lock_nested+0x168/0x1d0
[  506.344893][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  506.344927][   T39]  rcu_barrier+0x4c/0x580
[  506.344966][   T39]  netdev_run_todo+0x2e0/0xde0
[  506.344999][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  506.345022][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  506.345054][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  506.345104][   T39]  ? netdev_state_change+0x1ca/0x220
[  506.345138][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  506.345171][   T39]  tun_chr_close+0x13f/0x1c0
[  506.345206][   T39]  __fput+0x461/0xa90
[  506.345247][   T39]  task_work_run+0x1d9/0x270
[  506.345277][   T39]  ? __pfx_task_work_run+0x10/0x10
[  506.345305][   T39]  ? kmem_cache_free+0x185/0x6b0
[  506.345327][   T39]  ? put_net+0x191/0x260
[  506.345364][   T39]  do_exit+0x70f/0x23c0
[  506.345392][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  506.345431][   T39]  ? __pfx_do_exit+0x10/0x10
[  506.345453][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  506.345481][   T39]  ? reacquire_held_locks+0x104/0x190
[  506.345507][   T39]  ? rt_spin_lock+0x1e0/0x400
[  506.345548][   T39]  do_group_exit+0x21b/0x2d0
[  506.345580][   T39]  ? rt_spin_unlock+0x160/0x200
[  506.345612][   T39]  get_signal+0x125c/0x1310
[  506.345667][   T39]  arch_do_signal_or_restart+0xbc/0x830
[  506.345696][   T39]  ? __pfx___x64_sys_wait4+0x10/0x10
[  506.345725][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  506.345776][   T39]  exit_to_user_mode_loop+0x86/0x480
[  506.345809][   T39]  ? rcu_is_watching+0x15/0xb0
[  506.345838][   T39]  do_syscall_64+0x32d/0xf80
[  506.345871][   T39]  ? trace_irq_disable+0x3b/0x150
[  506.345896][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.345920][   T39]  ? clear_bhb_loop+0x40/0x90
[  506.345949][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.345973][   T39] RIP: 0033:0x7f31525fcfce
[  506.345992][   T39] RSP: 002b:00007fff97d2a5c8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  506.346015][   T39] RAX: fffffffffffffe00 RBX: 000055557a894500 RCX: 00007f31525fcfce
[  506.346032][   T39] RDX: 0000000040000000 RSI: 00007fff97d2a66c RDI: ffffffffffffffff
[  506.346048][   T39] RBP: 00007fff97d2a66c R08: 0000000000000000 R09: 0000000000000000
[  506.346063][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045
[  506.346085][   T39] R13: 000055557a8a79f0 R14: 0000000000054cca R15: 00007fff97d2a6c0
[  506.346121][   T39]  </TASK>
[  506.346154][   T39] INFO: task syz.3.633:8321 blocked for more than 143 seconds.
[  506.346173][   T39]       Tainted: G             L      syzkaller #0
[  506.346185][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  506.346195][   T39] task:syz.3.633       state:D stack:23104 pid:8321  tgid:8319  ppid:5799   task_flags:0x400140 flags:0x00080003
[  506.346254][   T39] Call Trace:
[  506.346262][   T39]  <TASK>
[  506.346275][   T39]  __schedule+0x1553/0x5240
[  506.346313][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  506.346353][   T39]  ? __lock_acquire+0x6b5/0x2cf0
[  506.346378][   T39]  ? __pfx___schedule+0x10/0x10
[  506.346428][   T39]  rt_mutex_schedule+0x76/0xf0
[  506.346456][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  506.346503][   T39]  rt_mutex_slowlock+0x2dc/0x7b0
[  506.346535][   T39]  ? rt_mutex_slowlock+0x1fd/0x7b0
[  506.346565][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  506.346590][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  506.346649][   T39]  ? rcu_barrier+0x4c/0x580
[  506.346676][   T39]  mutex_lock_nested+0x168/0x1d0
[  506.346703][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  506.346736][   T39]  rcu_barrier+0x4c/0x580
[  506.346765][   T39]  ? rt_write_unlock+0x190/0x230
[  506.346802][   T39]  kvm_mmu_uninit_vm+0x53/0x90
[  506.346849][   T39]  kvm_arch_destroy_vm+0x26e/0x2d0
[  506.346895][   T39]  kvm_put_kvm+0x6ca/0xa80
[  506.346940][   T39]  ? __pfx_kvm_vcpu_release+0x10/0x10
[  506.346967][   T39]  kvm_vcpu_release+0x57/0x70
[  506.346993][   T39]  __fput+0x461/0xa90
[  506.347032][   T39]  task_work_run+0x1d9/0x270
[  506.347063][   T39]  ? __pfx_task_work_run+0x10/0x10
[  506.347109][   T39]  get_signal+0x11c3/0x1310
[  506.347162][   T39]  arch_do_signal_or_restart+0xbc/0x830
[  506.347193][   T39]  ? __pfx_task_work_add+0x10/0x10
[  506.347220][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  506.347260][   T39]  ? __fput_deferred+0x253/0x3e0
[  506.347299][   T39]  exit_to_user_mode_loop+0x86/0x480
[  506.347331][   T39]  ? rcu_is_watching+0x15/0xb0
[  506.347361][   T39]  do_syscall_64+0x32d/0xf80
[  506.347395][   T39]  ? trace_irq_disable+0x3b/0x150
[  506.347420][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.347444][   T39]  ? clear_bhb_loop+0x40/0x90
[  506.347472][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.347496][   T39] RIP: 0033:0x7fc3a09cc799
[  506.347516][   T39] RSP: 002b:00007fc39ec26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  506.347538][   T39] RAX: fffffffffffffffc RBX: 00007fc3a0c45fa0 RCX: 00007fc3a09cc799
[  506.347555][   T39] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  506.347569][   T39] RBP: 00007fc3a0a62c99 R08: 0000000000000000 R09: 0000000000000000
[  506.347584][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  506.347598][   T39] R13: 00007fc3a0c46038 R14: 00007fc3a0c45fa0 R15: 00007fff839bd268
[  506.347635][   T39]  </TASK>
[  506.347673][   T39] 
[  506.347673][   T39] Showing all locks held in the system:
[  506.347685][   T39] 9 locks held by kworker/u8:1/13:
[  506.347700][   T39] 3 locks held by rcuc/0/20:
[  506.347714][   T39] 1 lock held by khungtaskd/39:
[  506.347726][   T39]  #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  506.347817][   T39] 10 locks held by kworker/u8:12/1282:
[  506.347847][   T39] 2 locks held by getty/5556:
[  506.347859][   T39]  #0: ffff88803702d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  506.347990][   T39]  #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0
[  506.348057][   T39] 3 locks held by kworker/1:5/5885:
[  506.348071][   T39] 3 locks held by kworker/1:6/5886:
[  506.348091][   T39]  #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  506.348157][   T39]  #1: ffffc90004d6fc40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  506.348219][   T39]  #2: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348279][   T39] 1 lock held by syz-executor/6411:
[  506.348292][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348373][   T39] 1 lock held by syz-executor/6417:
[  506.348386][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348448][   T39] 1 lock held by syz.0.563/8053:
[  506.348461][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348520][   T39] 1 lock held by syz-executor/8190:
[  506.348533][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348591][   T39] 1 lock held by syz.1.624/8287:
[  506.348603][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348663][   T39] 1 lock held by syz.6.625/8302:
[  506.348675][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348734][   T39] 1 lock held by syz.3.633/8321:
[  506.348747][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348806][   T39] 1 lock held by syz-executor/8331:
[  506.348818][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348878][   T39] 1 lock held by syz-executor/8332:
[  506.348890][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.348949][   T39] 1 lock held by syz-executor/8338:
[  506.348961][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349021][   T39] 1 lock held by syz-executor/8357:
[  506.349034][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349099][   T39] 1 lock held by syz-executor/8370:
[  506.349112][   T39]  #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349173][   T39] 2 locks held by syz-executor/8399:
[  506.349185][   T39]  #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.349315][   T39]  #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349374][   T39] 2 locks held by syz-executor/8402:
[  506.349387][   T39]  #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.349448][   T39]  #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349507][   T39] 2 locks held by syz-executor/8403:
[  506.349520][   T39]  #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.349579][   T39]  #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349640][   T39] 2 locks held by syz-executor/8414:
[  506.349653][   T39]  #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.349712][   T39]  #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349771][   T39] 2 locks held by syz-executor/8419:
[  506.349784][   T39]  #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.349843][   T39]  #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.349902][   T39] 2 locks held by syz-executor/8431:
[  506.349916][   T39] 2 locks held by syz-executor/8436:
[  506.349928][   T39]  #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.349988][   T39]  #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60
[  506.350043][   T39] 2 locks held by syz-executor/8438:
[  506.350058][   T39] 2 locks held by syz-executor/8441:
[  506.350070][   T39]  #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.350136][   T39]  #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60
[  506.350189][   T39] 1 lock held by syz-executor/8447:
[  506.350202][   T39] 
[  506.350209][   T39] =============================================
[  506.350209][   T39] 
[  506.350231][   T39] NMI backtrace for cpu 0
[  506.350256][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  506.350309][   T39] Tainted: [L]=SOFTLOCKUP
[  506.350324][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  506.350347][   T39] Call Trace:
[  506.350363][   T39]  <TASK>
[  506.350379][   T39]  dump_stack_lvl+0xe8/0x150
[  506.350427][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  506.350507][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  506.350542][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  506.350573][   T39]  sys_info+0x135/0x170
[  506.350596][   T39]  watchdog+0xfd9/0x1030
[  506.350630][   T39]  ? watchdog+0x21a/0x1030
[  506.350666][   T39]  kthread+0x388/0x470
[  506.350690][   T39]  ? __pfx_watchdog+0x10/0x10
[  506.350716][   T39]  ? __pfx_kthread+0x10/0x10
[  506.350741][   T39]  ret_from_fork+0x51e/0xb90
[  506.350785][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  506.350816][   T39]  ? __switch_to+0xc7d/0x1450
[  506.350848][   T39]  ? __pfx_kthread+0x10/0x10
[  506.350874][   T39]  ret_from_fork_asm+0x1a/0x30
[  506.350913][   T39]  </TASK>
[  506.350989][   T39] Sending NMI from CPU 0 to CPUs 1:
[  506.351020][    C1] NMI backtrace for cpu 1
[  506.351037][    C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  506.351063][    C1] Tainted: [L]=SOFTLOCKUP
[  506.351070][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  506.351084][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  506.351175][    C1] RIP: 0010:__lock_acquire+0x56f/0x2cf0
[  506.351195][    C1] Code: 85 c0 74 1c 83 3d 54 12 ca 0d 00 75 13 48 8d 3d 07 23 cd 0d 48 c7 c6 34 4c 67 8d 67 48 0f b9 3a 90 31 c9 0f b6 81 c4 00 00 00 <84> c0 0f 84 77 ff ff ff 41 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80
[  506.351212][    C1] RSP: 0018:ffffc90000126558 EFLAGS: 00000002
[  506.351228][    C1] RAX: 0000000000000003 RBX: ffff88801ca9e870 RCX: ffffffff92f70c88
[  506.351242][    C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000
[  506.351253][    C1] RBP: ffff88801ca9e878 R08: ffffffff81767e65 R09: ffffffff8ddcb980
[  506.351267][    C1] R10: ffffc90000126848 R11: fffff52000024d15 R12: 0000000000000003
[  506.351281][    C1] R13: ffff88801ca9e878 R14: ffff88801ca9db80 R15: 0000000000000007
[  506.351295][    C1] FS:  0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000
[  506.351310][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  506.351323][    C1] CR2: 00007fd245ea499d CR3: 000000003b84e000 CR4: 00000000003526f0
[  506.351341][    C1] Call Trace:
[  506.351347][    C1]  <TASK>
[  506.351358][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  506.351379][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  506.351398][    C1]  lock_acquire+0xf0/0x2e0
[  506.351414][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  506.351434][    C1]  ? __unwind_start+0xf7/0x760
[  506.351458][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  506.351474][    C1]  unwind_next_frame+0xc2/0x23c0
[  506.351490][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  506.351510][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  506.351527][    C1]  ? get_stack_info_noinstr+0x1b/0x130
[  506.351552][    C1]  __unwind_start+0x5b8/0x760
[  506.351571][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  506.351605][    C1]  arch_stack_walk+0xe3/0x150
[  506.351624][    C1]  ? __unwind_start+0xf7/0x760
[  506.351641][    C1]  ? __alloc_skb+0x27d/0x7d0
[  506.351695][    C1]  stack_trace_save+0xa9/0x100
[  506.351719][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  506.351746][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  506.351762][    C1]  ? __alloc_skb+0x1d0/0x7d0
[  506.351787][    C1]  kasan_save_track+0x3e/0x80
[  506.351866][    C1]  __kasan_slab_alloc+0x6c/0x80
[  506.351893][    C1]  kmem_cache_alloc_node_noprof+0x22a/0x6e0
[  506.351943][    C1]  ? __alloc_skb+0x27d/0x7d0
[  506.351971][    C1]  __alloc_skb+0x27d/0x7d0
[  506.351998][    C1]  synproxy_send_client_synack+0x172/0xe30
[  506.352105][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  506.352132][    C1]  ? nft_log_dump+0xc0/0x4e0
[  506.352202][    C1]  ? synproxy_pernet+0x45/0x270
[  506.352222][    C1]  nft_synproxy_eval_v4+0x34a/0x4e0
[  506.352243][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  506.352263][    C1]  ? nf_ip_checksum+0x13c/0x510
[  506.352317][    C1]  nft_synproxy_do_eval+0x305/0x580
[  506.352337][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  506.352362][    C1]  nft_do_chain+0x45e/0x1990
[  506.352381][    C1]  ? nft_do_chain+0x16e9/0x1990
[  506.352398][    C1]  ? update_cfs_rq_load_avg+0x3fb/0x4e0
[  506.352422][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  506.352452][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  506.352472][    C1]  nft_do_chain_inet+0x29d/0x380
[  506.352544][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  506.352585][    C1]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  506.352623][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  506.352651][    C1]  nf_hook_slow+0xc5/0x220
[  506.352702][    C1]  NF_HOOK+0x21f/0x3c0
[  506.352759][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  506.352778][    C1]  ? NF_HOOK+0x9e/0x3c0
[  506.352794][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  506.352810][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  506.352830][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  506.352850][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  506.352870][    C1]  NF_HOOK+0x336/0x3c0
[  506.352886][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  506.352913][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  506.352931][    C1]  ? NF_HOOK+0x9e/0x3c0
[  506.352947][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  506.352965][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  506.352985][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  506.353002][    C1]  ? process_backlog+0x271/0xc60
[  506.353024][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  506.353041][    C1]  process_backlog+0x569/0xc60
[  506.353073][    C1]  __napi_poll+0xaf/0x580
[  506.353095][    C1]  ? skb_defer_free_flush+0x233/0x260
[  506.353119][    C1]  net_rx_action+0x696/0xe00
[  506.353150][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  506.353173][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  506.353202][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  506.353224][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  506.353258][    C1]  handle_softirqs+0x1de/0x6f0
[  506.353288][    C1]  __local_bh_enable_ip+0x170/0x2b0
[  506.353313][    C1]  ? __alloc_skb+0x186/0x7d0
[  506.353339][    C1]  __alloc_skb+0x1aa/0x7d0
[  506.353365][    C1]  nsim_dev_trap_report_work+0x29f/0xbc0
[  506.353398][    C1]  ? process_scheduled_works+0xa8d/0x18c0
[  506.353424][    C1]  process_scheduled_works+0xb6e/0x18c0
[  506.353463][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  506.353491][    C1]  ? assign_work+0x3d5/0x5e0
[  506.353518][    C1]  worker_thread+0xa53/0xfc0
[  506.353555][    C1]  kthread+0x388/0x470
[  506.353574][    C1]  ? __pfx_worker_thread+0x10/0x10
[  506.353605][    C1]  ? __pfx_kthread+0x10/0x10
[  506.353623][    C1]  ret_from_fork+0x51e/0xb90
[  506.353649][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  506.353673][    C1]  ? __switch_to+0xc7d/0x1450
[  506.353696][    C1]  ? __pfx_kthread+0x10/0x10
[  506.353715][    C1]  ret_from_fork_asm+0x1a/0x30
[  506.353739][    C1]  </TASK>
[  506.582973][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  506.583046][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  506.583133][   T39] Tainted: [L]=SOFTLOCKUP
[  506.583155][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  506.583195][   T39] Call Trace:
[  506.583217][   T39]  <TASK>
[  506.583241][   T39]  vpanic+0x56c/0xa60
[  506.583358][   T39]  ? __pfx___schedule+0x10/0x10
[  506.583450][   T39]  ? __pfx_vpanic+0x10/0x10
[  506.583560][   T39]  panic+0xc5/0xd0
[  506.583646][   T39]  ? __pfx_panic+0x10/0x10
[  506.583808][   T39]  ? preempt_schedule_thunk+0x16/0x30
[  506.583937][   T39]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  506.584024][   T39]  watchdog+0x1023/0x1030
[  506.584112][   T39]  ? watchdog+0x21a/0x1030
[  506.584207][   T39]  kthread+0x388/0x470
[  506.584270][   T39]  ? __pfx_watchdog+0x10/0x10
[  506.584347][   T39]  ? __pfx_kthread+0x10/0x10
[  506.584412][   T39]  ret_from_fork+0x51e/0xb90
[  506.584507][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  506.584584][   T39]  ? __switch_to+0xc7d/0x1450
[  506.584663][   T39]  ? __pfx_kthread+0x10/0x10
[  506.584728][   T39]  ret_from_fork_asm+0x1a/0x30
[  506.584818][   T39]  </TASK>
[  506.585458][   T39] Kernel Offset: disabled