last executing test programs:

8m27.988040623s ago: executing program 2 (id=1383):
timer_create(0x3, 0x0, &(0x7f0000000300))
setrlimit(0x9, &(0x7f0000000180)={0x2, 0x3})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)
prctl$PR_SET_NAME(0xf, 0x0)
setrlimit(0x0, &(0x7f00000000c0)={0x3, 0x800})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f00000002c0)={<r1=>r0, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, &(0x7f0000000200)={@align=0x400, {0x1, 0x0, 0x8}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x8c})
getdents(r1, &(0x7f0000000340)=""/219, 0xdb)
r2 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
write$cgroup_type(r2, 0x0, 0x0)
r3 = socket(0x1a, 0x6, 0x600000)
r4 = eventfd2(0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000034e5155033fbe9dcbbf5e45c8f0e25a3a011c57549f723dd78ae5fe3bef1c7ed98590969833134baf60269dccf4348bc1346b6d2a541a54602a1a7c1f43f8c"], 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000819000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a3100"], 0xc8}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r3, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r4)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x4, 0x2}, 0xc)
r8 = syz_io_uring_setup(0x5b12, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2, 0x10a}, &(0x7f0000002000)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r9, r10, 0x0, &(0x7f0000000000))
r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_SREGS2(r11, 0x8140aecc, &(0x7f0000000580))
io_uring_enter(r8, 0x48e9, 0x225e, 0x2, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

8m27.715246504s ago: executing program 2 (id=1384):
r0 = socket(0x0, 0x2, 0xa6)
mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x587, 0x0, 0x8000000000}]})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001b86ab068feb5854fc06edca54af66baedd5a1ddf48ec62e4cdfe79af738a6289ab404cb6159d41838f3fc4c568e0423c17b1b105d4456508df1b77e51c367ed168d4ac1a75514c7f9c81d4213ea298828067be764c6f19eb78a0c61a64e4ed466827349d7bf7ebb967033464e8ede8a40a327093f99bdb60eecdb7bb707ad378f24756ed8721670f50f689f032a56", @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc000000050006000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000043000/0x4000)=nil, 0x4000, 0x15)

8m27.029399094s ago: executing program 2 (id=1386):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e0000000c225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e", 0x24}], 0x1)

8m26.92821263s ago: executing program 2 (id=1387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000641000/0x2000)=nil, 0x2000, 0x400000a, 0x1f, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001e8, 0x12)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x7, 0x0, &(0x7f0000000000)="c03cba2d1f1f78", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x8001)
madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f0000000300)=[{0x0}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x364, 0x0, 0x11, 0x148, 0x1d4, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 'hsr0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x46}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xcc, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

8m25.021929978s ago: executing program 2 (id=1393):
syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x9801)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0)
write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1a40a9, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r0, 0x0, 0x0) (async)
open_tree(r1, &(0x7f0000000640)='\x00', 0x9801) (async)
syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') (async)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) (async)
write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) (async)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1a40a9, 0x0) (async)

8m24.777943894s ago: executing program 2 (id=1396):
syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000073c2b403b1b5129ee9e01020301090246000100000002090419cd010e0100000624060000a105240405000d240f0124000000090008004706241a0a00210724140080f9ff06"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

8m9.753297698s ago: executing program 32 (id=1396):
syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000073c2b403b1b5129ee9e01020301090246000100000002090419cd010e0100000624060000a105240405000d240f0124000000090008004706241a0a00210724140080f9ff06"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

10.276218533s ago: executing program 3 (id=3185):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x29, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfd4}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0xfff, [0xb, 0xffffffffffffffff, 0x5, 0x3ff, 0x9, 0x1000]}}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x4, [0x800, 0x0, 0x8c4, 0x101, 0xfffffffff95fafb7, 0x3]}}, @enc_lim]}, 0xb8)

9.924011578s ago: executing program 1 (id=3186):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r2 = epoll_create1(0x80000)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0)
close(0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_usb_disconnect(r3)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000000})
epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x401, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200))
open(&(0x7f0000000000)='./file0\x00', 0xa002, 0x0)

9.285981345s ago: executing program 3 (id=3188):
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {0x0, 0x4, {0xa, 0x4e20, 0x0, @mcast1, 0xfff}}}, 0x38)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc143b00004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

8.611093865s ago: executing program 3 (id=3191):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', <r1=>0x0})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)=@can={{0x9b50, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "339aece7b5f08070"}, 0x10}, 0x2, 0x0, 0x0, 0x10000000}, 0x1004885d)

8.360216843s ago: executing program 3 (id=3193):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x210})
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000)
ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000)
r2 = eventfd2(0x4, 0x800)
pselect6(0x40, &(0x7f0000000240)={0x1, 0x5, 0x8, 0x3, 0x3, 0xa, 0x3ff, 0x1}, 0x0, &(0x7f0000000300)={0x9, 0x2, 0x2, 0xffff, 0x0, 0xe, 0x7, 0x9}, 0x0, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/147, 0x93}], 0x1)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
getresuid(&(0x7f0000001080), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={<r6=>0x0, 0x6}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x0, 0xe, 0x0, 0xffffff7f, r6}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0)="be", 0x1)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000003c0))
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
memfd_secret(0x80000)

7.964120472s ago: executing program 4 (id=3195):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x2404c845)

7.402121307s ago: executing program 5 (id=3197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="650f380195d20066b9e006000066b8511673d166ba129442030f300ff7c7f30f090f350f30b880018ee8f30f060f01c366b80e0000000f23c00f21f8663502000e000f23f8"}], 0x43, 0x29, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000240)={0x6, 0x0, [{0x1, 0x2, 0x2, [0x8, 0x7, 0x6, 0x0, 0x8, 0xa, 0x9, 0xa]}, {0x9, 0x4, 0x7, [0x873, 0x3ff, 0xe, 0x5, 0x9, 0x3ecd, 0x8, 0x8]}, {0x2, 0x100, 0x1, [0x4, 0x9, 0xe1ab74d, 0x7f2e, 0x56552706, 0x5, 0x0, 0x9]}, {0x7, 0x7fffffff, 0x6, [0x5, 0xfffffffe, 0xffffb800, 0x80000000, 0x3, 0x98, 0x7]}, {0x6, 0x80, 0x8, [0x1, 0x5, 0xcfba, 0x7ff, 0x489, 0x5, 0x3, 0x3]}, {0x4, 0x1, 0x1, [0x201, 0x9, 0x1, 0x400, 0x5, 0x1, 0xc, 0x59ca]}]})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800)

7.242261447s ago: executing program 5 (id=3198):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x29, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfd4}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0xfff, [0xb, 0xffffffffffffffff, 0x5, 0x3ff, 0x9, 0x1000]}}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x4, [0x800, 0x0, 0x8c4, 0x101, 0xfffffffff95fafb7, 0x3]}}, @enc_lim]}, 0xb8)

6.411936829s ago: executing program 4 (id=3199):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000004c0)={r5, 0x5, 0xa}, &(0x7f0000000500)=0x8)
write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@deltaction={0x94, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcbc}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xffffffffffffffd1, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6(0xa, 0x80000, 0x8)
readv(r7, &(0x7f00000012c0)=[{&(0x7f0000001040)=""/113, 0x71}, {&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f00000011c0)=""/210, 0xd2}], 0x3)
vmsplice(r6, &(0x7f0000000240)=[{0x0}, {&(0x7f00000005c0)="806e9d34865f", 0x6}], 0x2, 0x1)
sched_getaffinity(0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x1e4, 0x2, 0x1b, 0xb, 0x1b, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000)
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000001300))
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(r10, 0x4008550d, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./cgroup.net/cgroup.procs\x00')

6.344506265s ago: executing program 5 (id=3200):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpgid(0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f000001e740)=[{{&(0x7f00000190c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000019240)=[{&(0x7f000001d640)=""/258, 0x102}], 0x1, &(0x7f0000019280)=""/2, 0x2}, 0x5c1}, {{&(0x7f00000192c0)=@generic, 0x80, &(0x7f000001a480)=[{&(0x7f000001a3c0)=""/171, 0xab}], 0x1, &(0x7f000001a4c0)=""/192, 0xc0}, 0x4}, {{&(0x7f000001a580)=@tipc=@name, 0x80, &(0x7f000001ea40)=[{&(0x7f000001a600)=""/74, 0x4a}, {&(0x7f000001a680)=""/240, 0xf0}, {&(0x7f000001a780)=""/217, 0xd9}, {&(0x7f000001a880)=""/4096, 0x1000}, {&(0x7f000001b880)=""/64, 0x40}, {&(0x7f000001b8c0)=""/131, 0x83}, {&(0x7f000001cf80)=""/103, 0x67}, {&(0x7f000001e840)=""/228, 0xe4}, {&(0x7f000001e940)=""/36, 0x24}, {&(0x7f000001e980)=""/158, 0x9e}], 0xa, &(0x7f0000019140)=""/253, 0xfd}, 0x1000}, {{&(0x7f000001bb40)=@un=@abs, 0x80, &(0x7f000001cec0)=[{&(0x7f000001bbc0)=""/145, 0x91}, {&(0x7f000001bc80)=""/4096, 0x1000}, {&(0x7f000001eac0)=""/250, 0xfa}, {&(0x7f000001cd80)=""/47, 0x2f}, {&(0x7f000001cdc0)=""/80, 0x50}, {&(0x7f000001ce40)=""/96, 0x60}], 0x6, &(0x7f000001cf00)=""/73, 0x49}, 0x8}, {{0x0, 0x0, &(0x7f000001d2c0)=[{&(0x7f000001d000)=""/245, 0xf5}, {&(0x7f000001d100)=""/143, 0x8f}, {&(0x7f000001d1c0)=""/199, 0xc7}], 0x3, &(0x7f000001d300)=""/107, 0x6b}, 0x5}, {{&(0x7f000001d380)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f000001d540)=[{&(0x7f000001d400)=""/123, 0x7b}, {&(0x7f000001d480)=""/150, 0x96}], 0x2, &(0x7f000001d580)=""/56, 0x38}, 0x6}, {{&(0x7f000001d5c0)=@nfc_llcp, 0x80, &(0x7f000001e640)=[{&(0x7f000001ebc0)=""/4101, 0x1005}], 0x1, &(0x7f000001cc80)=""/194, 0xc2}, 0x8}], 0x7, 0x11043, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r1, &(0x7f000001a380)=[{&(0x7f0000000100)=',', 0x1}, {&(0x7f0000019380)="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", 0x1000}], 0x2)

6.254493169s ago: executing program 5 (id=3201):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0xc, 0x0, 0x0, 0x4, 0x8, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1]})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x40000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x3, 0x6}, {0x1, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0xc, 0xf8, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x5000, 0x60000, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x7f}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x16}, 0x40019, 0x0, 0xd000, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xcd)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180)
fcntl$getownex(r5, 0x10, &(0x7f0000000040))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800)
mknod$loop(0x0, 0xfff, 0x0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r8 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r8, r7, 0x9, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f00000004c0)=[0x7e], 0xffffffffffffffff}}, 0x30)
setsockopt$packet_int(r8, 0x107, 0x3, 0x0, 0x0)
getpid()
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd})
r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r9, r9, r9}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5.980723234s ago: executing program 1 (id=3203):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x686b, 0x10000)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000, 0x1})
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0xb001, 0xff03, 0x3d0, 0xe8, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="f170c2aa2cf8", @empty, @multicast1, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffb, 0x7fffffff, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420)

5.980068409s ago: executing program 3 (id=3204):
syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$ptp(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$vim2m(0x0, 0x2, 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4})
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0)
r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=<r3=>0xffffffffffffffff)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x2400c080)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002)

5.798571549s ago: executing program 1 (id=3205):
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x0, {0x80, 0x20, 0x10, 0x0, 0x0, 0x11, 0x0, 0xa, 0x300}, [@RTA_TABLE={0x8, 0xf, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000002c00)=@buf)
unshare(0x22020600)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00')
setns(r4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7, 0xf728, 0x3d0a, 0x979, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}}}}})
r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f041})
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00')
pread64(r7, &(0x7f0000000600)=""/4091, 0xffb, 0x12c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40)

5.79821724s ago: executing program 4 (id=3206):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sync_file_range(r0, 0x2000000, 0x0, 0x5)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x2c, 0x28, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x44}}]}, 0x2c}}, 0x0)
r7 = socket(0x10, 0x3, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8)
r10 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f00000001c0)={{r10}})
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x8, 0x17, {0x21, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f0000000000)={0xb3, 0x6, 0x2, 0x6, 0x3, [0x7fffffff, 0x7, 0x8000]})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x6})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x68, 0x14, 0xf0b, 0xffffffff, 0x2, {0x2, 0x0, 0x0, 0x0, {0x8}, {0xb, 0x2}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0xcca, 0xe, 0x0, 0x10, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x5, 0xe, 0x6, 0x38, 0x0, 0x9, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x8090)

5.041795595s ago: executing program 4 (id=3207):
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x800, 0x1)
read$FUSE(r3, &(0x7f0000004d00)={0x2020}, 0x2020)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x55, 0x400})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r5, 0x0)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000100)=0xdbf)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="19"], 0x48)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xa, 0x10001, 0x3011, 0x0, 0x2, 0x7, 0x3, 0x1}})

4.492047122s ago: executing program 5 (id=3208):
unshare(0x22020400)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x10002023})
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x6}, 0x1)
r3 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000001080)={0x18, &(0x7f0000000e80)={0xa0, 0x30, 0x2, 'x4'}, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xf743}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x0, 0xf4, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1_to_bridge\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0xff, 0x0, 0x5}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x2, 0x4, 0x2, 0x7, 0x7], 0x4, 0x7}, {0xffffffffffffffff, [0x7, 0x6, 0x1, 0x6, 0x1, 0x1], 0x3, 0x2}}}}, {{@ip={@rand_addr=0x64010102, @local, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'lo\x00', {0xff}, {0xff}, 0x89, 0x1, 0x4}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x2, 0x6, [0x18, 0x1b, 0x16, 0x2, 0x40, 0x10, 0x16, 0x6, 0x28, 0x2, 0x2c, 0x2f, 0x34, 0x6, 0x3d, 0x40], 0x1, 0x6, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x3, 0x0, 0x0, 0x2, 0x1], 0x1}, {0x0, [0x0, 0x7, 0x0, 0x4, 0x1, 0x6], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x35c)

3.547342442s ago: executing program 0 (id=3210):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x29, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfd4}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0xfff, [0xb, 0xffffffffffffffff, 0x5, 0x3ff, 0x9, 0x1000]}}, @pad1, @generic={0x7}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x4, [0x800, 0x0, 0x8c4, 0x101, 0xfffffffff95fafb7, 0x3]}}, @enc_lim]}, 0xc0)

3.373721326s ago: executing program 1 (id=3211):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpgid(0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f000001e740)=[{{&(0x7f00000190c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000019240)=[{&(0x7f000001d640)=""/258, 0x102}], 0x1, &(0x7f0000019280)=""/2, 0x2}, 0x5c1}, {{&(0x7f00000192c0)=@generic, 0x80, &(0x7f000001a480)=[{&(0x7f000001a3c0)=""/171, 0xab}], 0x1, &(0x7f000001a4c0)=""/192, 0xc0}, 0x4}, {{&(0x7f000001a580)=@tipc=@name, 0x80, &(0x7f000001ea40)=[{&(0x7f000001a600)=""/74, 0x4a}, {&(0x7f000001a680)=""/240, 0xf0}, {&(0x7f000001a780)=""/217, 0xd9}, {&(0x7f000001a880)=""/4096, 0x1000}, {&(0x7f000001b880)=""/64, 0x40}, {&(0x7f000001b8c0)=""/131, 0x83}, {&(0x7f000001cf80)=""/103, 0x67}, {&(0x7f000001e840)=""/228, 0xe4}, {&(0x7f000001e940)=""/36, 0x24}, {&(0x7f000001e980)=""/158, 0x9e}], 0xa, &(0x7f0000019140)=""/253, 0xfd}, 0x1000}, {{&(0x7f000001bb40)=@un=@abs, 0x80, &(0x7f000001cec0)=[{&(0x7f000001bbc0)=""/145, 0x91}, {&(0x7f000001bc80)=""/4096, 0x1000}, {&(0x7f000001eac0)=""/250, 0xfa}, {&(0x7f000001cd80)=""/47, 0x2f}, {&(0x7f000001cdc0)=""/80, 0x50}, {&(0x7f000001ce40)=""/96, 0x60}], 0x6, &(0x7f000001cf00)=""/73, 0x49}, 0x8}, {{0x0, 0x0, &(0x7f000001d2c0)=[{&(0x7f000001d000)=""/245, 0xf5}, {&(0x7f000001d100)=""/143, 0x8f}, {&(0x7f000001d1c0)=""/199, 0xc7}], 0x3, &(0x7f000001d300)=""/107, 0x6b}, 0x5}, {{&(0x7f000001d380)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f000001d540)=[{&(0x7f000001d400)=""/123, 0x7b}, {&(0x7f000001d480)=""/150, 0x96}], 0x2, &(0x7f000001d580)=""/56, 0x38}, 0x6}, {{&(0x7f000001d5c0)=@nfc_llcp, 0x80, &(0x7f000001e640)=[{&(0x7f000001ebc0)=""/4101, 0x1005}], 0x1, &(0x7f000001cc80)=""/194, 0xc2}, 0x8}], 0x7, 0x11043, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r1, &(0x7f000001a380)=[{&(0x7f0000000100)=',', 0x1}, {&(0x7f0000019380)="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", 0x1000}], 0x2)

3.188994859s ago: executing program 1 (id=3212):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x2, 0x0, 0x0, 0x7}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1920a901, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xa2a, 0x2, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x4, 0xf6, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0x3e3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f0000000000)={{0x0, 0x2710}, 0x15, 0x0, 0xfffffffe}, 0x18)
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
timer_create(0x2, 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f0000000200)='m', 0x1)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100))
r3 = openat$vim2m(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x7, 0x2, 0x0, "9c2db27a43793b7e7419005d340f233baee86557d9d8a53e02b4b10ad94a59e7"})
ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000580))
r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40044146, &(0x7f0000000180)=0x8)
timer_settime(0x0, 0x1, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000000)={0x8d, 0x6})
clock_settime(0x2, &(0x7f0000000000))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f00000005c0)={0x3, 'wg2\x00', {0x33}, 0x9})
landlock_restrict_self(r7, 0xc)

2.912080006s ago: executing program 3 (id=3213):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r1, 0x7, 0x8, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto(r1, &(0x7f0000000180), 0x0, 0x840, 0x0, 0x0)
fanotify_init(0x200, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, 0x0, 0x3, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x40020, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfa9f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@seclabel}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="006517910500"], 0x0, 0x0, 0x0, 0x0})
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000080))

2.636865812s ago: executing program 0 (id=3214):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800cef010006000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRES32=r1], 0xb4}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

2.392137608s ago: executing program 0 (id=3215):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000100), 0xaa0, 0x40201)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000140)={0x0, 0x8, 0xa3})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000380)={{0x28, 0xe}, {0x2, 0x6}, 0x8, 0x6})
ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x400c586e, &(0x7f0000000240)={0x0, 0xfffffff7})
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x86)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00')
mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r7, 0xffffffffffffffff, 0x0)

2.295506793s ago: executing program 1 (id=3216):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc0009058239da"], 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

1.755319194s ago: executing program 4 (id=3217):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x3c}}, 0x80) (fail_nth: 9)
openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x3, 0x0, 0x1, 0x0, 0x0)
stat(&(0x7f0000006d80)='./file0/file0\x00', &(0x7f0000006dc0))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x78, 0x0, 0x400, {0x2, 0x26b, 0x0, {0x3, 0x6, 0x9, 0x8, 0x7b, 0x5, 0x8, 0x9, 0xd2, 0x2000, 0x9, 0x0, 0x0, 0x3ff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007340), 0x0)

1.112190272s ago: executing program 5 (id=3218):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000300000000000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000004000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095000000000000008520000004000000183300000100000000000000000000001829000023c3f8aef11b1362ca8ec03d731696f80d0b4acb33d4c2fbf049fbfbe5ee228b2079bd154575a23fc9ab", @ANYRES32=r1, @ANYBLOB="000000000000000095000000000000009500000000000000d5780600ffffffff9500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x4, 0x800006})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x28c080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5b1ee000)
epoll_create(0x8)
socket(0x10, 0x803, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

1.111694789s ago: executing program 4 (id=3219):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc0009058239da"], 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7182, 0x0)
sendfile(r1, r1, 0x0, 0x2000fb)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
sendfile(r3, r2, &(0x7f0000002700)=0x23, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', <r4=>0x0, 0x20, 0x20, 0x6, 0x69, {{0x25, 0x4, 0x2, 0x5, 0x94, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x20, [@broadcast]}, @timestamp={0x44, 0x1c, 0xa1, 0x0, 0x8, [0x7, 0x0, 0x9, 0xfffffff9, 0xa, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0x35, 0x3, 0x9, [{@remote, 0x2}, {@multicast1, 0x6}, {@remote, 0x4}]}, @timestamp={0x44, 0x20, 0xd9, 0x0, 0xc, [0x0, 0x10000, 0x101, 0x100, 0x4, 0x4, 0x80]}, @ssrr={0x89, 0x1b, 0x9e, [@rand_addr=0x64010102, @rand_addr=0x64010100, @remote, @multicast2, @loopback, @local]}, @generic={0x86, 0x4, "ecc4"}]}}}}})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x441, 0x12, r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r4, 0x11, 0x7, 0x6, 0x3, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0x7fff, 0x1c}})
r7 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0, {0xf}}, './file0\x00'})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x1, 0x40080c0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000440)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000540)=0xe4)
fchown(r13, r14, 0x0)
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
r15 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

684.667443ms ago: executing program 0 (id=3220):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x10, 0x9, 0x2, {{0x16, 0x4, 0x2, 0x21, 0x58, 0x6b, 0x0, 0x51, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x17, 0x46, [@empty, @empty, @rand_addr=0x64010101, @remote, @private=0xa010100]}, @end, @timestamp={0x44, 0x14, 0xdb, 0x0, 0x9, [0x7, 0x8, 0xfff, 0xd]}, @ssrr={0x89, 0x17, 0x87, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @local]}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setneightbl={0x1c, 0x43, 0x2, 0x70bd2b, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0xffffffffffffffec, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000008c0)='wchan\x00')
pread64(r2, &(0x7f0000000680)=""/236, 0xffffffffffffff9d, 0x7ffffffffffffffe)
ioctl$sock_SIOCSIFBR(r0, 0x80108907, 0x0)
r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x50000, 0x0)
ioctl$TUNDETACHFILTER(r3, 0x400854d6, 0x0)
pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(0x0, 0x3c, 0x0, 0x0, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f0000000780)={&(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4000000)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x9700}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre}]}, 0xa2}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x8)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x2d80, 0x1}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000200)={0x10000000})
getdents(r5, &(0x7f0000000ec0)=""/4114, 0x1012)

461.765051ms ago: executing program 0 (id=3221):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r0, r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x200000000000000, &(0x7f0000000580)="b318"})

0s ago: executing program 0 (id=3222):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f000001e740)=[{{&(0x7f00000190c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000019240)=[{&(0x7f000001d640)=""/258, 0x102}], 0x1, &(0x7f0000019280)=""/2, 0x2}, 0x5c1}, {{&(0x7f00000192c0)=@generic, 0x80, &(0x7f000001a480)=[{&(0x7f000001a3c0)=""/171, 0xab}], 0x1, &(0x7f000001a4c0)=""/192, 0xc0}, 0x4}, {{&(0x7f000001a580)=@tipc=@name, 0x80, &(0x7f000001ea40)=[{&(0x7f000001a600)=""/74, 0x4a}, {&(0x7f000001a680)=""/240, 0xf0}, {&(0x7f000001a780)=""/217, 0xd9}, {&(0x7f000001a880)=""/4096, 0x1000}, {&(0x7f000001b880)=""/64, 0x40}, {&(0x7f000001b8c0)=""/131, 0x83}, {&(0x7f000001cf80)=""/103, 0x67}, {&(0x7f000001e840)=""/228, 0xe4}, {&(0x7f000001e940)=""/36, 0x24}, {&(0x7f000001e980)=""/158, 0x9e}], 0xa, &(0x7f0000019140)=""/253, 0xfd}, 0x1000}, {{&(0x7f000001bb40)=@un=@abs, 0x80, &(0x7f000001cec0)=[{&(0x7f000001bbc0)=""/145, 0x91}, {&(0x7f000001bc80)=""/4096, 0x1000}, {&(0x7f000001eac0)=""/250, 0xfa}, {&(0x7f000001cd80)=""/47, 0x2f}, {&(0x7f000001cdc0)=""/80, 0x50}, {&(0x7f000001ce40)=""/96, 0x60}], 0x6, &(0x7f000001cf00)=""/73, 0x49}, 0x8}, {{0x0, 0x0, &(0x7f000001d2c0)=[{&(0x7f000001d000)=""/245, 0xf5}, {&(0x7f000001d100)=""/143, 0x8f}, {&(0x7f000001d1c0)=""/199, 0xc7}], 0x3, &(0x7f000001d300)=""/107, 0x6b}, 0x5}, {{&(0x7f000001d380)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f000001d540)=[{&(0x7f000001d400)=""/123, 0x7b}, {&(0x7f000001d480)=""/150, 0x96}], 0x2, &(0x7f000001d580)=""/56, 0x38}, 0x6}, {{&(0x7f000001d5c0)=@nfc_llcp, 0x80, &(0x7f000001e640)=[{&(0x7f000001ebc0)=""/4101, 0x1005}], 0x1, &(0x7f000001cc80)=""/194, 0xc2}, 0x8}], 0x7, 0x11043, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
socket(0x2, 0x80805, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r3, &(0x7f000001a380)=[{&(0x7f0000000100)=',', 0x1}, {&(0x7f0000019380)="c43689eadf67d2f674f384e1ed7654b33dd3fba0127d9f516efe5f5ae1819ec6e0309275f466451cc93be7a1d2b88730a7795c46d36c64a5198b91ab196ff1d888a41decded73abb2f3cd354c96c48dc77b29ae85c8fa6f2b12c61cced52e19f704a2ed478bb8bacb5cac324f9362ea8b866cd3499bfc6bebaede04b0e901c92a1b38d0669bac6035d48aba4bbb224a489f16b21ae3ebbaaedcb3a7afe149558e3ee8b8c1279459fbe809f7fa365847ca64b103bc1ac6ac9b86f3e9b902b499b966690da0d459bc44dd5c87faaef86480e0fcd55126e97dc05c31193addb78385a03bfd96d02c28759d77a2bc181fd3c8b3b8c696cdd520a57315adddc60213747efa92b0780738ea7a91c587145d32bf4f828cf0a8179cb0eadcb84b6e05dfb958322de7d75ae104e0dba65764472d4839b1f203d210fa7dd8fbd7e77d33070d369b6563c189399da3f54a232c2b78f66d5c28b7c7fbda30a5bdf19988ac5ce15b2b978471c89690a5e907b20153bb81dc2a85ae0a9d7e262d14eaa4e87d7d8a9cd901f35fb322ef5001313e9454c35b185c0ad99fb121f1e23ec4373bd69fe22f9c3c114652bfaa8aa6ae4ca5fe925d03c0fe11d31caf56db55336d9c0ac2622d90097248b56c17aa39e7a6577b2edfc87bee7ed6b51365044ecfe980c5a85ee25b6b415990c4d9c5f8947ceb559a04c04a54ead7c132f8076dfe58331cb9948a4eb3291c021b498c77fb86653291b2a0ea0550f614bc87980fdcc46df70c23abb9dd5967a30d6e74a3946f8273e8cadb36932658335221296cfeba9d97197ec63a3c0bff00bd8bd22e983c8aba7603b910c3943908a730888792da707907bc6efc0a2f24e7632978e3ccc90ed3d03a21052ccf5e76df8686ab872fdbedb1be8b0379dc026c6a11e49722162d6b77f510614648b9aa14cba87ac2c83da1dd4d9cf729e85d3b6415bf177b6afbb99e0b0bce12050ba57dd2709765736abff5a70ff11879da9dd80bf31da4c6d0769648cf00d9a57ea4910ae5beeac0a820953a18a8e28a1b36eaf7ffce8a8b0bdb1e477594665f2d043f918d7da885b630d3d8ed891b7c8f31cd2b020f5834a07ae72e559e0acdefb8ada23d7620fe3b0eebf82bae9ae9baa26999d4100a7bccd277ed10711b0442e573599f9dde622706098906c8cd735280a8ff98dc2916ca616fdd278cc109e12fb630918ffc6e3e9e3ef4fe5bc13b9b61e321c25e1ea727b328573efbfca236b1985e06213f3aceee9d386c4eed041a3f7bc0522cf2eb670935eb608d075bfd0cda330dcc7e9f592468be8075c517d1f337b8b0e29dfee3b6984aa9c5aee1e4376c09d3b0a1041748aaf926a34293cda23613bb885976c72631c1c1859f131748c3f510edb29d445df12321d0f439589193f11c16ed7f156b7bbd961372724b4d38cd26c3f5c6519bcd3dd3b1b5aca1ecbeba482bba5e74589de799eb9aee893e88a870357cf43f62ed04be5f0043834bc047dc251c887969deb4641a1d619ede176dd8a3f99b4175315a388bc2649507bf3952340ac9b7c10ac9d35bb395448578b05d97245c238405fa2beaa5ed1c0c7942a88d066190c040dfeef3acb75057e97b31af127cae33d6d4111c45545544201cf19a90b1beb7b9686f0f6545376c50953d40d7808280780c25ac89066caa88bc51a5f8f959cf3821cf441a0e108923c04043bd0e67fb630746a3f4d3c94750e4fd9079bfd7e772cbfe5372910aad28ccbf42a8355488d4ccc54b61a18f715ab88c42f3dff8cc5311947819bdd37d5d3c6bdedf2b10f2b918b4b00bdfadaf62f7e4a22ef17fffa6c90bf5b6c1422fbf2f51adaf251e69ff9dd8b255758c513a7bb6250c5d6ac5bbac0588047ef81456a5f6c6f5c4a91e93f75d569438a889c6072c632ef5666fbca6feaedaff78c4a94ca6fac9b0fa8b99e842eed832c701a08acfa5cbd4d71aa26b8826a89595b9aeb6b8c98b41608cc87c7e89dd6769b9e1cd8b4c2aef5f1610f7453c108849c8adcfaad00cb7b7b840b0212c72c7d5e05bf9716657a1f1e25daf88f6a67a3612eb1a4c5e04279798c4268d908fa56ff3aaf61e5efae4b19052920333563b95619557062cdb489e652fef0aeb578cd0867d7ae9b23e0f3e9a744549dc975eae69b468750ae24d04618ad397598feba11b361e1f09cdc2d1b93d62de5391e00719b936a895a6364a1ae8dd7c5e89846388336aa7bb14764b503bb12377d57cbe40565b6968b240bb6bf8ed8d09c16d109c1562cce4460b3014dc2a0adfc8df85d156eccb22297091239d8058a44b8cdc278ee17861593e09987333c3eddd61615fba20b03c99fb47b41f50ba887a3be166018adbd54204ab4f313c869beb6c357127ba6184d76c54807059730790a59ff901f003a599c478c282241bd4c1b74d5e90b98095c28b25f7dc799a3ed3b276af5583a752bfa4f7e868b31a3a57effd596eec9530dba918987463be5897bb7fb57e86f196de89f047dd8eee70208ef9312bbacbc132b09fb69699e1d2e304093716060e7df44c1c3c835a27a1579064d4db7661dc1835ce44c07416d3376b3757fea6d712458e2dcce6d720eeef94219c44f2bd5fe078ff201d00fc852954fe1908d29e6d48ab0d0e8d8d5596b794da7dc88141ac1f670df92d80ea16af668ee8d93b8efa23a96047fca9861f659dac8b46e09f179667a7f9264be6295369c2abcb6045cc9a04c0f36024e8cf077250381c0841c199eb134f368e832ad493f5fb88441d908a3dcc11377ef85e07197a4945b8facd66945002bad502f41798c8fdd9605f5c7a9995d85354a042c4797c15561e4d32942021b054e73ce791b199df26fa28c0102acf298fb9afcee0d1841d752956fe5e96424107feab5137f66f553a9d11237334a2ed662f80984d1916e451626412a58bd4e05310eab746c7941fdae9d56cb0d9d610e6c3b76d0eccdcdcbf04d3a26ae3f34dbbe1b2887bc01aaf173ea4eb5f1f13736566ed93d3d7bea2717ded80aa5d0c97e214e6e58268a0008be78b1f6ee1204b5c0be47c06a680381f71c135206dc4491578f81f93d915eff5fe9ba39dd1b7e3ba49c3bba611aa18f734d9080d4570b9e0ed2eba2c180e65aad8ec87dcca0fef79415e4bfa5a754cd8537647012b616991801333dad330f92abe1a440b602cc3368eb2e05578e8731e999cf957b25db5391ded1a7ea5df8da031e39f374f6f62fcdb832853c732b199988ef02c74bb3f72f2c1406470ca861d78def0b2c758c46513d37d188555000ecb32d3aea92c7f66f05e645ab3c87c6808b523c79d644d937d4b32974420f2fc701ab105c9624a84951c4f188e825b53a09bb23c5b2bc0cc9a61e30775014659d30fe79bfed5aa0d5749c097dd0ed4b88ffbd1ccc6999fe209b63e85f73d8b86fdb3a3453d35e0bf62df1be73dfe7eeee68406b35e3aab204667e7a3c5656ae2b34e7c2c8d01d4f4a6ceed10942aa2fb959211a31a53fe374683e65ef695d6f6ec84fbeeeac32d7053580db279334e78574d99e071636e13279f88d1776e87e9b9d5a0bbb369430f2cb8164a2824b3e36456370e18a5bdda11dce48cceedfb85e2037d8a4a8ea5e17ff657cc49c2cb05b729093df885e2ae7b40c859deba003f0846358502da13997807eb05e1732e606e17ad7d44718fd4173312ddc6d92e8ab53b5943e95db924d064ecf4312357fd25303aebc4f2e2042453fd109c9bf774ba9eea487eac23cf77fb99e976ca3bd37af6731c3eec3bc99def86e9bec150471ca2916d91b6fca0ccb0fd061a0708656c5a747d1b4e1cb476dfedd8b40abd73c298eeeab69be69ce2ced3b7ce648ca9879ead9b3ff0774bd24aa2b4df36ac20d9164c7ebfa236131e2c064eff0721be81fbe3ed0f261f3954df5ea432b152b0398c7e07a4ba88e70b372351f7676476756d63826397139cc2d85e27f4311be8bc6c638c7ec286ab08dc090c9b3488d47279d0478a3a07e74fcbf0a231869b2e7bfe3a24af622772c1bf2bab8ad7e4ce595c41a5a1c600925c586d63ee6491b80d677f5fcb09aaadb121b1c8bd5479507e446298b34c4a94a7f8b8b436e2bce07c156caf970475e4d564c87deb22a97053ab51b1a143014792e5142f3e86d907165ea51c48be432c27f24a4aa22b2958fc306a3ed1df5a69fc0f5831371d0378802d604ddf65d2a1d0b5f86c5b0f6e5e1f74c54a16876880fed5d648b904ce5fa97f3a9c60ea0dde8592e28fc3b3ef3c1cbae313084f943fc95ca1fd7c8a9e1f7225412112ffe5821860b69ca2b1a03944404fcc325feadf4ee2daf8c7524a17b4f189f094388bca6bbff8e252a73cb18ade1f7dd07d09cd2eef2b0f92622b75597e58bb0ab7aa5b4f4d7e79e5800ef26c05deab980d754f025a80a30a02b1ae940a07f51ee4d52d4a62a28588a248061e346587f578e3cc8a95be70a6a8da6b63ebcebd27593dca9b0fb50276f1f864198543553589b2e135adce9737fb61b1b69930648bb4dc795f8deaf5926ce7472eb3cbf99dd8826a6f4ac01123d0b5de944574538c8b042acee8f389548f0a28a8bb093530c16a0705ddd68508528428fd09bd43e64a46d08c98bf5d12f4e849562c9b7978aca3abce1c7c914113fb0beebe1884c9f4f050f0c662cc0484e00a69f6926c6f3fb45c51f6496a97503562c2333b066828ecddae229aa95d53fbd1b6628cc9e10b746e150e64c8290ec815d7c74ccf20068027f9352e2a06b410bd614d6b67e129f0ff3a9df1b13b3830488eea0d836620f4707635ac780a7e89271bf79c6b9c3271a805989a96c6a48b046271b0d45a8c23ec98839249b53f8d5cd5343358f72f408d868bb1f6991210646243a9f2c75cfc84905149496f2cb9cb0df84ed22a9c5728d1bce1d96a3424e4ae9e0386f33886338c11038d65ad212422f6ee379fd72fbc23879d2a7c117f863e156aa039b6a63f7bce5bb1b7b1c2d7d44ecb6e96f781e9b5a0c7fdd3fbfbfe980b48d427cbd8db9e08672ecc6a7ce73c58ecea54145efc50590799d9080d6027da3471c241d185024a62a47a05ae54d7978d518dc0b9eba3747b53be2ba3a540e0fefda3feea09f0f78e287c184ae4c0bada451eb4364974ab32aaa4a4c392d2a26e8e67c6bc096fe12a9472db718488deb64fd340f03363512e73da44864e28a5e820a427fcdd57fe8afd4df35605d271ff9151545942dbb38334abd0a4e6cb3dff4e00918a8fdb04f5a77698048c7a40ef42003cac0edf1104535c20db5dc515fd5db70fb9919b84427a7ba23a33290416090fd6f500d94a91ba363008851fe1b40590dd91babbe89a141c6485890b816a9029fc97dbed3a5583bd1963896104a347236360d177a0a66a5abb332ab253f4d6bcba2638166e198aff7249013cb0ac7975684f2dd543d25c28e330b62b310f75333c48e762d8df6af6fe2eab5e94eb739bc491368452d18e58a66509c1dc5a77aa579aa8167d98df4c671429a2e93fa43a0f15370fe767472f84af3d89751eddbe1c130dffa95bc1e4b84e43c7c3d51e78c01e9e560dfa8bd7d6163ca0a56fd93c288611ebccb6b3fc06093ddd1f411f97d17c5287f9dd99e8cc9e16342695d0780190b52dccc620dfb6d0936687c44562f4bd12348b991ec1e557e7556181898038a7cf3a361b091f06a6aca4e9e8609523c38d947b9446f9b38cedc9534aab34d15b28467ddf23263cd8e7ccb57421ed2671283d2683c4b076d47171afd6ddd37a9c429e598a009e8fafe1b8b5daf80f32fdb25", 0x1000}], 0x2)

kernel console output (not intermixed with test programs):

e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  988.158972][T18311] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  988.158986][T18311] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001240
[  988.158994][T18311] RDX: 00000000000007ff RSI: 0000000000000000 RDI: 0000000000000000
[  988.159001][T18311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  988.159008][T18311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  988.159015][T18311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  988.159031][T18311]  </TASK>
[  988.639499][ T5903] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: f8 failed: -71
[  988.648114][ T5903] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  988.655413][ T5903] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  988.663197][ T5903] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  988.684301][ T5903] usb 2-1: USB disconnect, device number 12
[  988.837671][   T29] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  989.027670][   T29] usb 5-1: Using ep0 maxpacket: 16
[  989.035036][   T29] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[  989.044379][   T29] usb 5-1: config 4 has no interface number 0
[  989.051274][   T29] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  989.062083][   T29] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  989.085902][   T29] usb 5-1: config 4 interface 9 has no altsetting 0
[  989.110672][   T29] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  989.120156][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.146042][   T29] usb 5-1: Product: syz
[  989.159078][   T29] usb 5-1: Manufacturer: syz
[  989.176618][   T29] usb 5-1: SerialNumber: syz
[  989.203700][T18316] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  989.211735][T18316] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  989.326590][   T29] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  989.465144][ T5910] usb 6-1: USB disconnect, device number 67
[  989.524337][   T13] usb 5-1: Failed to submit usb control message: -71
[  989.524702][ T5919] usb 5-1: USB disconnect, device number 17
[  989.587147][   T13] usb 5-1: unable to send the bmi data to the device: -71
[  989.626211][   T13] usb 5-1: unable to get target info from device
[  989.650544][   T13] usb 5-1: could not get target info (-71)
[  989.679389][   T13] usb 5-1: could not probe fw (-71)
[  989.853675][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'.
[  989.877822][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'.
[  990.037147][ T5910] usb 6-1: new full-speed USB device number 68 using dummy_hcd
[  990.200985][ T5910] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  990.215267][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.239481][ T5910] usb 6-1: Product: syz
[  990.254144][ T5910] usb 6-1: Manufacturer: syz
[  990.271524][ T5910] usb 6-1: SerialNumber: syz
[  990.297737][ T5910] usb 6-1: config 0 descriptor??
[  990.315973][ T5910] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  990.365248][T18347] netlink: 'syz.0.2897': attribute type 1 has an invalid length.
[  990.483891][T18347] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address
[  990.502752][T18347] bond15: (slave vxcan3): Error -95 calling set_mac_address
[  990.682723][T18347] bond15: (slave gretap1): making interface the new active one
[  990.698121][T18350] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2897'.
[  990.728071][T18347] bond15: (slave gretap1): Enslaving as an active interface with an up link
[  990.796442][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.846843][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  991.027639][T15798] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  991.178985][T15798] usb 4-1: Using ep0 maxpacket: 32
[  991.186543][T15798] usb 4-1: config 0 has no interfaces?
[  991.197444][T15798] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  991.207280][T15798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.215433][T15798] usb 4-1: Product: syz
[  991.223149][T15798] usb 4-1: Manufacturer: syz
[  991.230385][T15798] usb 4-1: SerialNumber: syz
[  991.247018][T15798] usb 4-1: config 0 descriptor??
[  991.402463][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'.
[  991.452444][ T5910] gspca_stk1135: reg_w 0x7 err -71
[  991.458936][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  991.468157][ T5903] usb 4-1: USB disconnect, device number 70
[  991.474454][ T5910] gspca_stk1135: Sensor write failed
[  991.482919][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  991.515288][ T5910] gspca_stk1135: Sensor write failed
[  991.521366][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  991.529293][ T5910] gspca_stk1135: Sensor read failed
[  991.534814][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  991.543717][ T5910] gspca_stk1135: Sensor read failed
[  991.549517][ T5910] gspca_stk1135: Detected sensor type unknown (0x0)
[  991.557053][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  991.572291][ T5910] gspca_stk1135: Sensor read failed
[  991.861648][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  991.997659][ T5910] gspca_stk1135: Sensor read failed
[  992.003049][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  992.009929][ T5910] gspca_stk1135: Sensor write failed
[  992.015650][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[  992.022501][ T5910] gspca_stk1135: Sensor write failed
[  992.028793][ T5910] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[  992.042075][ T5910] usb 6-1: USB disconnect, device number 68
[  992.247592][T18370] syz_tun: entered allmulticast mode
[  992.361240][T18375] kAFS: unable to lookup cell 'ŒÉúZ°ÿ-ñn$vï(,bÅÌñ©ih¾Ì'
[  992.627655][ T5903] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  992.697690][ T5910] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  992.789594][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  992.810382][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  992.897932][ T5910] usb 6-1: Using ep0 maxpacket: 16
[  992.916626][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  992.943650][ T5910] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  992.963403][ T5910] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  992.975172][ T5903] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  992.988957][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.997207][ T5910] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  993.016484][ T5903] usb 2-1: config 0 descriptor??
[  993.024205][ T5910] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  993.045819][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0
[  993.074868][ T5910] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  993.094425][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.124556][ T5910] usb 6-1: Product: syz
[  993.129690][ T5910] usb 6-1: Manufacturer: syz
[  993.137606][ T5910] usb 6-1: SerialNumber: syz
[  993.150485][ T5910] usb 6-1: config 0 descriptor??
[  993.160656][T18370] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  993.261474][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  993.268062][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  993.410643][T18370] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  993.450036][ T5903] hid-multitouch 0003:0457:07DA.0046: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0
[  993.499053][ T5910] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input76
[  993.644362][T18376] FAULT_INJECTION: forcing a failure.
[  993.644362][T18376] name failslab, interval 1, probability 0, space 0, times 0
[  993.667895][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'.
[  993.677821][T18391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2911'.
[  993.777392][T18376] CPU: 1 UID: 0 PID: 18376 Comm: syz.1.2905 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  993.777416][T18376] Tainted: [L]=SOFTLOCKUP
[  993.777420][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  993.777431][T18376] Call Trace:
[  993.777437][T18376]  <TASK>
[  993.777442][T18376]  dump_stack_lvl+0xe8/0x150
[  993.777464][T18376]  should_fail_ex+0x412/0x560
[  993.777496][T18376]  should_failslab+0xa8/0x100
[  993.777521][T18376]  __kmalloc_noprof+0xe8/0x760
[  993.777542][T18376]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  993.777568][T18376]  tomoyo_realpath_from_path+0xe3/0x5d0
[  993.777601][T18376]  tomoyo_check_open_permission+0x229/0x470
[  993.777629][T18376]  ? tomoyo_check_open_permission+0x1d3/0x470
[  993.777649][T18376]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  993.777690][T18376]  security_file_open+0xa9/0x240
[  993.777707][T18376]  do_dentry_open+0x384/0x14e0
[  993.777727][T18376]  ? vfs_open+0x31/0x340
[  993.777746][T18376]  vfs_open+0x3b/0x340
[  993.777760][T18376]  ? path_openat+0x2df0/0x3860
[  993.777775][T18376]  path_openat+0x2e08/0x3860
[  993.777797][T18376]  ? __pfx_stack_trace_save+0x10/0x10
[  993.777813][T18376]  ? stack_depot_save_flags+0x33/0x810
[  993.777846][T18376]  ? __pfx_path_openat+0x10/0x10
[  993.777865][T18376]  ? __ia32_compat_sys_openat+0x131/0x160
[  993.777890][T18376]  ? do_int80_emulation+0x173/0x4d0
[  993.777912][T18376]  ? asm_int80_emulation+0x1a/0x20
[  993.777939][T18376]  ? __lock_acquire+0x6b5/0x2cf0
[  993.777964][T18376]  do_file_open+0x23e/0x4a0
[  993.777980][T18376]  ? __pfx_do_file_open+0x10/0x10
[  993.778005][T18376]  ? _raw_spin_unlock+0x28/0x50
[  993.778018][T18376]  ? alloc_fd+0x64b/0x6c0
[  993.778042][T18376]  do_sys_openat2+0x113/0x200
[  993.778060][T18376]  ? __pfx_do_sys_openat2+0x10/0x10
[  993.778078][T18376]  ? ksys_write+0x242/0x270
[  993.778091][T18376]  ? __pfx_ksys_write+0x10/0x10
[  993.778106][T18376]  __ia32_compat_sys_openat+0x131/0x160
[  993.778128][T18376]  do_int80_emulation+0x173/0x4d0
[  993.778143][T18376]  ? trace_irq_disable+0x3b/0x150
[  993.778153][T18376]  ? asm_int80_emulation+0x1a/0x20
[  993.778163][T18376]  ? clear_bhb_loop+0x40/0x90
[  993.778183][T18376]  ? clear_bhb_loop+0x40/0x90
[  993.778197][T18376]  asm_int80_emulation+0x1a/0x20
[  993.778208][T18376] RIP: 0023:0xf71c5cab
[  993.778222][T18376] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  993.778232][T18376] RSP: 002b:00000000f547d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  993.778246][T18376] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d100
[  993.778255][T18376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  993.778262][T18376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  993.778269][T18376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  993.778276][T18376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  993.778293][T18376]  </TASK>
[  994.109099][T18376] ERROR: Out of memory at tomoyo_realpath_from_path.
[  994.202663][T18369] syz_tun: left allmulticast mode
[  994.209361][T15798] usb 6-1: USB disconnect, device number 69
[  994.222241][ T5903] usb 2-1: USB disconnect, device number 13
[  994.357646][   T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  994.517631][   T29] usb 5-1: Using ep0 maxpacket: 16
[  994.539922][   T29] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  994.558181][   T29] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  994.578292][   T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  994.598803][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.937633][ T5919] usb 1-1: new full-speed USB device number 125 using dummy_hcd
[  995.047010][T18395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  995.061709][T18395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  995.078159][T18409] bridge0: port 3(macvtap1) entered blocking state
[  995.104447][T18409] bridge0: port 3(macvtap1) entered disabled state
[  995.111605][   T29] mcp2221 0003:04D8:00DD.0047: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  995.129178][T18409] macvtap1: entered allmulticast mode
[  995.136275][T18409] bridge0: entered allmulticast mode
[  995.159786][T18409] macvtap1: left allmulticast mode
[  995.168928][ T5919] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  995.188248][T18409] bridge0: left allmulticast mode
[  995.220120][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.239852][ T5919] usb 1-1: Product: syz
[  995.245701][ T5919] usb 1-1: Manufacturer: syz
[  995.253460][ T5919] usb 1-1: SerialNumber: syz
[  995.272648][ T5919] usb 1-1: config 0 descriptor??
[  995.286507][ T5919] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  995.470636][   T29] usb 5-1: USB disconnect, device number 18
[  995.498576][ T5917] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  995.507639][ T5903] usb 6-1: new full-speed USB device number 70 using dummy_hcd
[  995.662262][ T5917] usb 2-1: config 0 has an invalid interface number: 84 but max is 0
[  995.672738][ T5917] usb 2-1: config 0 has no interface number 0
[  995.679744][ T5917] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64
[  995.692101][ T5917] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  995.712403][ T5917] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0
[  995.732964][ T5917] usb 2-1: config 0 interface 84 has no altsetting 0
[  995.749304][ T5917] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05
[  995.774539][ T5903] usb 6-1: config 0 has no interfaces?
[  995.783932][ T5903] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  995.803712][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.814081][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.842450][ T5903] usb 6-1: config 0 descriptor??
[  995.849017][ T5917] usb 2-1: config 0 descriptor??
[  995.870357][T18414] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  995.898921][ T5917] option 2-1:0.84: GSM modem (1-port) converter detected
[  996.427722][T15798] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  996.464632][ T5919] gspca_stk1135: reg_w 0x7 err -71
[  996.471710][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.479675][ T5919] gspca_stk1135: Sensor write failed
[  996.485165][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.492212][ T5919] gspca_stk1135: Sensor write failed
[  996.499920][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.512855][ T5919] gspca_stk1135: Sensor read failed
[  996.539810][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.552657][ T5919] gspca_stk1135: Sensor read failed
[  996.561989][ T5919] gspca_stk1135: Detected sensor type unknown (0x0)
[  996.577608][T15798] usb 5-1: Using ep0 maxpacket: 32
[  996.583407][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.597709][ T5919] gspca_stk1135: Sensor read failed
[  996.603274][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.610428][ T5919] gspca_stk1135: Sensor read failed
[  996.616545][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.644459][T15798] usb 5-1: unable to get BOS descriptor or descriptor too short
[  996.689838][ T5919] gspca_stk1135: Sensor write failed
[  996.696068][ T5919] gspca_stk1135: serial bus timeout: status=0x00
[  996.706516][T15798] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  996.716059][T15798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.724651][T15798] usb 5-1: Product: syz
[  996.845023][ T5919] gspca_stk1135: Sensor write failed
[  996.852125][T15798] usb 5-1: Manufacturer: syz
[  996.856861][T15798] usb 5-1: SerialNumber: syz
[  996.865620][ T5919] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  997.111562][ T5919] usb 1-1: USB disconnect, device number 125
[  997.576326][T15798] usb 5-1: USB disconnect, device number 19
[  997.827318][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'.
[  997.845220][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2925'.
[  997.888239][ T5903] usb 6-1: USB disconnect, device number 70
[  998.135942][ T5903] usb 2-1: USB disconnect, device number 14
[  998.161096][ T5903] option 2-1:0.84: device disconnected
[  999.837833][ T5903] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1000.038468][ T5903] usb 5-1: Using ep0 maxpacket: 32
[ 1000.059067][ T5903] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1000.069731][ T5903] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1000.099791][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1000.115648][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1000.126587][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1000.148692][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1000.164575][ T5903] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1000.174599][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.175511][T18477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2933'.
[ 1000.205318][ T5903] usb 5-1: config 0 descriptor??
[ 1000.307714][   T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1000.325606][T18486] FAULT_INJECTION: forcing a failure.
[ 1000.325606][T18486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1000.339344][T18486] CPU: 1 UID: 0 PID: 18486 Comm: syz.3.2935 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1000.339379][T18486] Tainted: [L]=SOFTLOCKUP
[ 1000.339387][T18486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1000.339399][T18486] Call Trace:
[ 1000.339408][T18486]  <TASK>
[ 1000.339416][T18486]  dump_stack_lvl+0xe8/0x150
[ 1000.339447][T18486]  should_fail_ex+0x412/0x560
[ 1000.339480][T18486]  _copy_from_iter+0x1d3/0x1670
[ 1000.339499][T18486]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1000.339529][T18486]  ? __pfx_policy_nodemask+0x10/0x10
[ 1000.339556][T18486]  ? __pfx__copy_from_iter+0x10/0x10
[ 1000.339583][T18486]  ? set_page_refcounted+0xa0/0x1e0
[ 1000.339610][T18486]  ? page_copy_sane+0x4e/0x270
[ 1000.339634][T18486]  copy_page_from_iter+0xdd/0x170
[ 1000.339660][T18486]  tun_get_user+0x1d4b/0x3dd0
[ 1000.339680][T18486]  ? tun_get_user+0x6ff/0x3dd0
[ 1000.339719][T18486]  ? aa_file_perm+0x50e/0x15e0
[ 1000.339740][T18486]  ? __pfx_tun_get_user+0x10/0x10
[ 1000.339759][T18486]  ? aa_file_perm+0x192/0x15e0
[ 1000.339799][T18486]  ? ref_tracker_alloc+0x35c/0x4c0
[ 1000.339820][T18486]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1000.339845][T18486]  ? tun_get+0x1c/0x2f0
[ 1000.339874][T18486]  ? tun_get+0x1c/0x2f0
[ 1000.339896][T18486]  ? tun_get+0x1c/0x2f0
[ 1000.339922][T18486]  tun_chr_write_iter+0x113/0x200
[ 1000.339948][T18486]  vfs_write+0x61d/0xb90
[ 1000.339978][T18486]  ? __pfx_vfs_write+0x10/0x10
[ 1000.340010][T18486]  ? __fget_files+0x2a/0x420
[ 1000.340047][T18486]  ksys_write+0x150/0x270
[ 1000.340073][T18486]  ? __pfx_ksys_write+0x10/0x10
[ 1000.340097][T18486]  ? asm_int80_emulation+0x1a/0x20
[ 1000.340121][T18486]  do_int80_emulation+0x173/0x4d0
[ 1000.340147][T18486]  ? trace_irq_disable+0x3b/0x150
[ 1000.340164][T18486]  ? asm_int80_emulation+0x1a/0x20
[ 1000.340180][T18486]  ? clear_bhb_loop+0x40/0x90
[ 1000.340198][T18486]  ? clear_bhb_loop+0x40/0x90
[ 1000.340220][T18486]  asm_int80_emulation+0x1a/0x20
[ 1000.340239][T18486] RIP: 0023:0xf7115cab
[ 1000.340256][T18486] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1000.340271][T18486] RSP: 002b:00000000f53d644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1000.340293][T18486] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0
[ 1000.340307][T18486] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000
[ 1000.340318][T18486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1000.340330][T18486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1000.340341][T18486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1000.340369][T18486]  </TASK>
[ 1000.447945][   T10] usb 6-1: device descriptor read/64, error -71
[ 1000.452254][T15798] usb 1-1: new full-speed USB device number 126 using dummy_hcd
[ 1000.508792][ T5903] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1000.780270][   T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1000.809263][T15798] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1000.819192][T15798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.828026][T15798] usb 1-1: Product: syz
[ 1000.832482][T15798] usb 1-1: Manufacturer: syz
[ 1000.837313][T15798] usb 1-1: SerialNumber: syz
[ 1000.845456][T15798] usb 1-1: config 0 descriptor??
[ 1000.855523][T15798] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1000.920590][   T10] usb 6-1: device descriptor read/64, error -71
[ 1001.028048][   T10] usb usb6-port1: attempt power cycle
[ 1001.367619][   T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1001.412961][   T10] usb 6-1: device descriptor read/8, error -71
[ 1001.657651][   T10] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1001.690205][   T10] usb 6-1: device descriptor read/8, error -71
[ 1001.810422][   T10] usb usb6-port1: unable to enumerate USB device
[ 1001.937631][ T5917] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1001.980705][T15798] gspca_stk1135: reg_w 0x7 err -71
[ 1001.990098][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1001.998525][T15798] gspca_stk1135: Sensor write failed
[ 1002.003869][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1002.010613][T15798] gspca_stk1135: Sensor write failed
[ 1002.015981][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1002.022729][T15798] gspca_stk1135: Sensor read failed
[ 1002.028857][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1002.035381][T15798] gspca_stk1135: Sensor read failed
[ 1002.041871][T15798] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1002.048810][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1002.055168][T15798] gspca_stk1135: Sensor read failed
[ 1002.060746][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1002.067204][T15798] gspca_stk1135: Sensor read failed
[ 1002.072632][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1002.079031][T15798] gspca_stk1135: Sensor write failed
[ 1002.084436][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1002.091240][T15798] gspca_stk1135: Sensor write failed
[ 1002.096953][T15798] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[ 1002.098921][ T5917] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[ 1002.109667][T15798] usb 1-1: USB disconnect, device number 126
[ 1002.122486][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.136803][ T5917] usb 4-1: config 0 has no interface number 0
[ 1002.151592][ T5917] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1002.182374][   T10] usb 5-1: USB disconnect, device number 20
[ 1002.191633][ T5917] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1002.206593][   T10] usblp0: removed
[ 1002.256779][ T5917] usb 4-1: config 0 interface 106 has no altsetting 0
[ 1002.282838][ T5917] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1002.306520][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.330083][ T5917] usb 4-1: config 0 descriptor??
[ 1002.346524][ T5917] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1002.592680][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'.
[ 1002.715337][T18518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2943'.
[ 1002.838806][T18520] team0: Device gtp0 is of different type
[ 1003.423079][   T13] usb 4-1: Failed to submit usb control message: -110
[ 1003.441071][   T13] usb 4-1: unable to send the bmi data to the device: -110
[ 1003.460956][T18530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2945'.
[ 1003.499852][   T13] usb 4-1: unable to get target info from device
[ 1003.506794][   T13] usb 4-1: could not get target info (-110)
[ 1003.579018][   T13] usb 4-1: could not probe fw (-110)
[ 1003.689014][   T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1003.850064][   T10] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[ 1003.858708][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.900733][   T10] usb 1-1: config 0 has no interface number 0
[ 1003.957933][   T10] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1003.958619][T18535] fuse: Bad value for 'user_id'
[ 1004.041087][   T10] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1004.096299][T18535] fuse: Bad value for 'user_id'
[ 1004.117611][   T10] usb 1-1: config 0 interface 106 has no altsetting 0
[ 1004.157057][   T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1004.174427][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1004.203412][   T10] usb 1-1: config 0 descriptor??
[ 1004.246016][   T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1004.588182][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1004.598410][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1004.643462][T18548] team0: Device gtp0 is of different type
[ 1004.898854][T18551] FAULT_INJECTION: forcing a failure.
[ 1004.898854][T18551] name failslab, interval 1, probability 0, space 0, times 0
[ 1004.982717][T18551] CPU: 1 UID: 0 PID: 18551 Comm: syz.4.2949 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1004.982752][T18551] Tainted: [L]=SOFTLOCKUP
[ 1004.982759][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1004.982771][T18551] Call Trace:
[ 1004.982779][T18551]  <TASK>
[ 1004.982788][T18551]  dump_stack_lvl+0xe8/0x150
[ 1004.982821][T18551]  should_fail_ex+0x412/0x560
[ 1004.982856][T18551]  should_failslab+0xa8/0x100
[ 1004.982884][T18551]  __kmalloc_noprof+0xe8/0x760
[ 1004.982903][T18551]  ? __kernel_text_address+0xd/0x30
[ 1004.982925][T18551]  ? snd_interval_refine+0x602/0xa50
[ 1004.982950][T18551]  ? snd_pcm_hw_refine+0x9b1/0x1710
[ 1004.982981][T18551]  snd_pcm_hw_refine+0x9b1/0x1710
[ 1004.983029][T18551]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[ 1004.983045][T18551]  ? __lock_acquire+0x6b5/0x2cf0
[ 1004.983061][T18551]  ? kasan_save_track+0x3e/0x80
[ 1004.983073][T18551]  ? kasan_save_free_info+0x46/0x50
[ 1004.983097][T18551]  ? __kasan_slab_free+0x5c/0x80
[ 1004.983116][T18551]  ? kfree+0x1c1/0x630
[ 1004.983132][T18551]  ? snd_pcm_hw_param_near+0x365/0x4d0
[ 1004.983149][T18551]  ? snd_pcm_oss_change_params_locked+0x1fed/0x3e00
[ 1004.983170][T18551]  ? do_fast_syscall_32+0x33/0x70
[ 1004.983190][T18551]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1004.983204][T18551]  ? snd_pcm_hw_params+0x164/0x1d60
[ 1004.983224][T18551]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1004.983245][T18551]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1004.983271][T18551]  snd_pcm_hw_params+0x4ac/0x1d60
[ 1004.983308][T18551]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1004.983338][T18551]  ? __pfx_snd_pcm_hw_params+0x10/0x10
[ 1004.983362][T18551]  ? snd_pcm_hw_param_near+0x365/0x4d0
[ 1004.983393][T18551]  ? snd_pcm_drop+0xa5/0x5b0
[ 1004.983416][T18551]  ? snd_pcm_kernel_ioctl+0x119/0x9a0
[ 1004.983444][T18551]  snd_pcm_oss_change_params_locked+0x201f/0x3e00
[ 1004.983497][T18551]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1004.983550][T18551]  snd_pcm_oss_sync+0x570/0xfc0
[ 1004.983580][T18551]  snd_pcm_oss_ioctl+0x1f4/0xdf0
[ 1004.983606][T18551]  __ia32_compat_sys_ioctl+0x5ea/0x950
[ 1004.983635][T18551]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1004.983665][T18551]  ? __fget_files+0x3a0/0x420
[ 1004.983689][T18551]  ? fput+0xa0/0xd0
[ 1004.983717][T18551]  ? ksys_write+0x242/0x270
[ 1004.983753][T18551]  __do_fast_syscall_32+0x20d/0x640
[ 1004.983784][T18551]  ? do_fast_syscall_32+0x33/0x70
[ 1004.983807][T18551]  ? asm_int80_emulation+0x1a/0x20
[ 1004.983824][T18551]  ? do_int80_emulation+0x274/0x4d0
[ 1004.983853][T18551]  do_fast_syscall_32+0x33/0x70
[ 1004.983877][T18551]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1004.983899][T18551] RIP: 0023:0xf7f82f6c
[ 1004.983916][T18551] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1004.983933][T18551] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1004.983954][T18551] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005001
[ 1004.983968][T18551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1004.983978][T18551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1004.983988][T18551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1004.984008][T18551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1004.984038][T18551]  </TASK>
[ 1005.328513][ T6720] usb 1-1: Failed to submit usb control message: -110
[ 1005.398243][T15798] usb 4-1: USB disconnect, device number 71
[ 1005.404773][ T6720] usb 1-1: unable to send the bmi data to the device: -110
[ 1005.447677][   T10] IPVS: starting estimator thread 0...
[ 1005.506364][ T6720] usb 1-1: unable to get target info from device
[ 1005.547694][T18557] IPVS: using max 51 ests per chain, 122400 per kthread
[ 1005.586174][ T6720] usb 1-1: could not get target info (-110)
[ 1005.660659][ T6720] usb 1-1: could not probe fw (-110)
[ 1005.969327][ T5903] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[ 1006.132578][ T5903] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1006.141972][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.158454][ T5903] usb 5-1: Product: syz
[ 1006.167940][ T5903] usb 5-1: Manufacturer: syz
[ 1006.177252][ T5903] usb 5-1: SerialNumber: syz
[ 1006.200538][ T5903] usb 5-1: config 0 descriptor??
[ 1006.223078][ T5903] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1006.582691][T18577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2957'.
[ 1006.828734][ T5917] usb 1-1: USB disconnect, device number 127
[ 1007.431295][ T5903] gspca_stk1135: reg_w 0x7 err -71
[ 1007.449608][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1007.460529][ T5903] gspca_stk1135: Sensor write failed
[ 1007.466101][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1007.472576][ T5903] gspca_stk1135: Sensor write failed
[ 1007.478211][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1007.485365][ T5903] gspca_stk1135: Sensor read failed
[ 1007.570797][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1007.587751][ T5903] gspca_stk1135: Sensor read failed
[ 1007.891283][ T5903] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1007.949359][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1007.955769][ T5903] gspca_stk1135: Sensor read failed
[ 1007.977635][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1008.011107][ T5903] gspca_stk1135: Sensor read failed
[ 1008.027608][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1008.027628][   T30] audit: type=1326 audit(1775289327.997:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1008.037349][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1008.097760][ T5903] gspca_stk1135: Sensor write failed
[ 1008.106284][T18597] FAULT_INJECTION: forcing a failure.
[ 1008.106284][T18597] name failslab, interval 1, probability 0, space 0, times 0
[ 1008.119196][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[ 1008.131936][ T5903] gspca_stk1135: Sensor write failed
[ 1008.149524][ T5903] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[ 1008.161754][T18597] CPU: 0 UID: 0 PID: 18597 Comm: syz.0.2962 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1008.161801][T18597] Tainted: [L]=SOFTLOCKUP
[ 1008.161808][T18597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1008.161818][T18597] Call Trace:
[ 1008.161824][T18597]  <TASK>
[ 1008.161829][T18597]  dump_stack_lvl+0xe8/0x150
[ 1008.161850][T18597]  should_fail_ex+0x412/0x560
[ 1008.161872][T18597]  should_failslab+0xa8/0x100
[ 1008.161895][T18597]  ? audit_log_start+0x36e/0xa20
[ 1008.161929][T18597]  kmem_cache_alloc_noprof+0x87/0x650
[ 1008.161949][T18597]  ? auditd_test_task+0x22/0x280
[ 1008.161969][T18597]  ? auditd_test_task+0x22/0x280
[ 1008.161997][T18597]  audit_log_start+0x36e/0xa20
[ 1008.162025][T18597]  ? __pfx_audit_log_start+0x10/0x10
[ 1008.162045][T18597]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1008.162065][T18597]  audit_seccomp+0x63/0x190
[ 1008.162077][T18597]  ? clear_bhb_loop+0x40/0x90
[ 1008.162089][T18597]  ? clear_bhb_loop+0xe/0x90
[ 1008.162103][T18597]  __seccomp_filter+0xd48/0x1ef0
[ 1008.162124][T18597]  ? __pfx___seccomp_filter+0x10/0x10
[ 1008.162139][T18597]  ? __pfx_do_splice+0x10/0x10
[ 1008.162161][T18597]  ? fput+0xa0/0xd0
[ 1008.162178][T18597]  ? __se_sys_splice+0x46e/0x490
[ 1008.162198][T18597]  ? __secure_computing+0xe1/0x2a0
[ 1008.162213][T18597]  do_int80_emulation+0x120/0x4d0
[ 1008.162230][T18597]  ? asm_int80_emulation+0x1a/0x20
[ 1008.162241][T18597]  ? clear_bhb_loop+0x40/0x90
[ 1008.162252][T18597]  ? clear_bhb_loop+0x40/0x90
[ 1008.162265][T18597]  asm_int80_emulation+0x1a/0x20
[ 1008.162277][T18597] RIP: 0023:0xf7135cab
[ 1008.162288][T18597] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1008.162299][T18597] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1008.162313][T18597] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53f65d0
[ 1008.162321][T18597] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 1008.162328][T18597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1008.162334][T18597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1008.162342][T18597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1008.162358][T18597]  </TASK>
[ 1008.162372][T18597] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 1008.419497][ T5903] usb 5-1: USB disconnect, device number 21
[ 1008.482776][   T30] audit: type=1326 audit(1775289327.997:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1008.510936][T18597] audit: out of memory in audit_log_start
[ 1008.643749][T18601] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2965'.
[ 1008.654316][   T30] audit: type=1326 audit(1775289328.047:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1008.739041][   T30] audit: type=1326 audit(1775289328.047:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1008.817602][   T30] audit: type=1326 audit(1775289328.047:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1008.850481][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'.
[ 1009.035306][   T30] audit: type=1326 audit(1775289328.077:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1009.194738][   T30] audit: type=1326 audit(1775289328.077:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1009.269190][ T5903] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1009.367217][   T30] audit: type=1326 audit(1775289328.077:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18596 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1009.472302][ T5903] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 1009.482163][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.491378][ T5903] usb 5-1: Product: syz
[ 1009.495796][ T5903] usb 5-1: Manufacturer: syz
[ 1009.502022][ T5903] usb 5-1: SerialNumber: syz
[ 1009.523759][ T5903] usb 5-1: config 0 descriptor??
[ 1009.547084][ T5903] gspca_main: sonixb-2.14.0 probing 0c45:6005
[ 1009.693293][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1009.792825][T18601] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component
[ 1009.867910][   T10] usb 1-1: Using ep0 maxpacket: 8
[ 1009.877060][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1009.907266][T18617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2969'.
[ 1009.931697][   T10] usb 1-1: config 8 has an invalid interface number: 255 but max is 0
[ 1009.943300][   T10] usb 1-1: config 8 has no interface number 0
[ 1009.977895][   T10] usb 1-1: config 8 interface 255 has no altsetting 0
[ 1009.999524][   T10] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00
[ 1010.009031][   T10] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[ 1010.017417][   T10] usb 1-1: Product: Ђ
[ 1010.037031][   T10] usb 1-1: Manufacturer: syz
[ 1010.046303][   T10] usb 1-1: SerialNumber: syz
[ 1010.058172][ T5903] sonixb 5-1:0.0: Error reading register 00: -110
[ 1010.406107][T18615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1010.415232][T18615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1010.735828][T18625] netlink: 'syz.1.2982': attribute type 4 has an invalid length.
[ 1010.788388][T18625] netlink: 'syz.1.2982': attribute type 4 has an invalid length.
[ 1011.730592][ T5903] usb 5-1: USB disconnect, device number 22
[ 1012.359677][   T10] catc 1-1:8.255: Can't set altsetting 1.
[ 1012.385260][   T10] catc 1-1:8.255: probe with driver catc failed with error -5
[ 1012.419264][   T10] usb 1-1: USB disconnect, device number 2
[ 1013.617614][T15798] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[ 1013.636819][T18675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2981'.
[ 1013.778028][T15798] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1013.789528][T15798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.807130][T15798] usb 2-1: Product: syz
[ 1013.817341][T15798] usb 2-1: Manufacturer: syz
[ 1013.828540][T15798] usb 2-1: SerialNumber: syz
[ 1014.003952][T15798] usb 2-1: config 0 descriptor??
[ 1014.024528][T15798] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1015.357647][ T5917] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1015.413198][T15798] gspca_stk1135: reg_w 0x7 err -71
[ 1015.420103][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.426582][T15798] gspca_stk1135: Sensor write failed
[ 1015.450274][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.456681][T15798] gspca_stk1135: Sensor write failed
[ 1015.485075][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.502263][T15798] gspca_stk1135: Sensor read failed
[ 1015.507758][ T5917] usb 6-1: Using ep0 maxpacket: 16
[ 1015.509668][ T5917] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.556576][T18700] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1015.564759][T18700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1015.572236][T18700] IPv6: NLM_F_CREATE should be set when creating new route
[ 1015.579686][T18700] IPv6: NLM_F_CREATE should be set when creating new route
[ 1015.586959][T18700] IPv6: NLM_F_CREATE should be set when creating new route
[ 1015.604352][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'.
[ 1015.739688][ T5917] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.739753][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.765116][ T5917] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1015.774514][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.784809][T15798] gspca_stk1135: Sensor read failed
[ 1015.812652][T15798] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1015.840805][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.859759][T15798] gspca_stk1135: Sensor read failed
[ 1015.874406][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.884085][T15798] gspca_stk1135: Sensor read failed
[ 1015.898893][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.910137][T15798] gspca_stk1135: Sensor write failed
[ 1015.920323][T15798] gspca_stk1135: serial bus timeout: status=0x00
[ 1015.947768][T15798] gspca_stk1135: Sensor write failed
[ 1015.959857][T15798] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[ 1016.036302][T15798] usb 2-1: USB disconnect, device number 15
[ 1016.213783][T18709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2990'.
[ 1016.244158][T18691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.640353][T18691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.767690][ T5917] mcp2221 0003:04D8:00DD.0048: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[ 1016.857046][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2991'.
[ 1016.892910][T18713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2991'.
[ 1016.902182][T18713] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2991'.
[ 1017.119147][ T5917] usb 6-1: USB disconnect, device number 75
[ 1017.617001][T18720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2994'.
[ 1018.180441][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2995'.
[ 1018.559782][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1018.559796][   T30] audit: type=1326 audit(1775289338.527:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1018.674153][   T30] audit: type=1326 audit(1775289338.527:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1018.743694][   T30] audit: type=1326 audit(1775289338.617:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1018.765960][T15798] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1018.783114][   T30] audit: type=1326 audit(1775289338.617:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1018.882791][   T30] audit: type=1326 audit(1775289338.617:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1018.914456][   T30] audit: type=1326 audit(1775289338.617:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1018.937408][   T30] audit: type=1326 audit(1775289338.617:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1018.969766][T15798] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[ 1018.981887][T15798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.001282][T15798] usb 6-1: config 0 has no interface number 0
[ 1019.008009][T15798] usb 6-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1019.019350][   T30] audit: type=1326 audit(1775289338.617:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1019.042099][T15798] usb 6-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1019.122621][T15798] usb 6-1: config 0 interface 106 has no altsetting 0
[ 1019.244492][T15798] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1019.257727][T15798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.272448][T15798] usb 6-1: config 0 descriptor??
[ 1019.309720][   T30] audit: type=1326 audit(1775289338.617:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1019.970199][T15798] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1019.997668][   T30] audit: type=1326 audit(1775289338.617:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000
[ 1020.026806][T18760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1020.041220][T18760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.568736][T18760] team0: Device gtp0 is of different type
[ 1020.796085][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1020.997968][ T5917] usb 1-1: Using ep0 maxpacket: 16
[ 1021.017958][   T49] usb 6-1: Failed to submit usb control message: -110
[ 1021.017992][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1021.046759][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1021.056332][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.075150][ T5917] usb 1-1: Product: syz
[ 1021.093089][ T5917] usb 1-1: Manufacturer: syz
[ 1021.111862][ T5917] usb 1-1: SerialNumber: syz
[ 1021.129486][ T5917] usb 1-1: config 0 descriptor??
[ 1021.146925][ T5917] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1021.161042][ T5917] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1021.168100][   T49] usb 6-1: unable to send the bmi data to the device: -110
[ 1021.199392][   T49] usb 6-1: unable to get target info from device
[ 1021.216105][   T49] usb 6-1: could not get target info (-110)
[ 1021.230019][   T49] usb 6-1: could not probe fw (-110)
[ 1021.287041][T18781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3007'.
[ 1021.338247][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1021.499751][   T10] usb 2-1: Using ep0 maxpacket: 32
[ 1021.523228][   T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1021.533142][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.576776][   T10] usb 2-1: config 0 descriptor??
[ 1021.765973][ T5917] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1021.796894][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1021.829931][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1021.888333][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1021.895613][   T10] usb 2-1: media controller created
[ 1021.981027][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1022.026681][   T10] az6027: usb out operation failed. (-71)
[ 1022.048556][   T10] az6027: usb out operation failed. (-71)
[ 1022.075134][   T10] stb0899_attach: Driver disabled by Kconfig
[ 1022.090501][   T10] az6027: no front-end attached
[ 1022.090501][   T10] 
[ 1022.106034][   T10] az6027: usb out operation failed. (-71)
[ 1022.128050][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1022.165317][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input77
[ 1022.189406][ T5917] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1022.206218][ T5917] em28xx 1-1:0.0: board has no eeprom
[ 1022.225733][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[ 1022.256432][T18799] usb usb8: usbfs: process 18799 (syz.4.3009) did not claim interface 0 before use
[ 1022.286524][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1022.318908][   T10] usb 2-1: USB disconnect, device number 16
[ 1022.442060][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1022.511370][ T5910] usb 6-1: USB disconnect, device number 76
[ 1022.578376][ T5917] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1022.591233][ T5917] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1022.597038][ T5903] em28xx 1-1:0.0: Binding DVB extension
[ 1022.931123][   T24] usb 1-1: USB disconnect, device number 3
[ 1022.938930][   T24] em28xx 1-1:0.0: Disconnecting em28xx
[ 1022.960519][T18809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3012'.
[ 1023.230576][ T5903] em28xx 1-1:0.0: Registering input extension
[ 1023.237129][   T24] em28xx 1-1:0.0: Closing input extension
[ 1023.256177][   T24] em28xx 1-1:0.0: Freeing device
[ 1023.797386][T18823] FAULT_INJECTION: forcing a failure.
[ 1023.797386][T18823] name failslab, interval 1, probability 0, space 0, times 0
[ 1023.868379][T18823] CPU: 0 UID: 0 PID: 18823 Comm: syz.1.3016 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1023.868413][T18823] Tainted: [L]=SOFTLOCKUP
[ 1023.868421][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1023.868433][T18823] Call Trace:
[ 1023.868441][T18823]  <TASK>
[ 1023.868450][T18823]  dump_stack_lvl+0xe8/0x150
[ 1023.868483][T18823]  should_fail_ex+0x412/0x560
[ 1023.868520][T18823]  should_failslab+0xa8/0x100
[ 1023.868545][T18823]  ? security_inode_alloc+0x39/0x310
[ 1023.868568][T18823]  kmem_cache_alloc_noprof+0x87/0x650
[ 1023.868599][T18823]  security_inode_alloc+0x39/0x310
[ 1023.868620][T18823]  inode_init_always_gfp+0x9ed/0xdc0
[ 1023.868656][T18823]  ? __pfx_proc_alloc_inode+0x10/0x10
[ 1023.868685][T18823]  alloc_inode+0x82/0x1b0
[ 1023.868715][T18823]  new_inode+0x22/0x170
[ 1023.868746][T18823]  proc_pid_make_inode+0x21/0x130
[ 1023.868766][T18823]  proc_map_files_instantiate+0xa2/0x190
[ 1023.868784][T18823]  proc_fill_cache+0x1ff/0x440
[ 1023.868809][T18823]  ? __pfx_proc_map_files_instantiate+0x10/0x10
[ 1023.868830][T18823]  ? __pfx_proc_fill_cache+0x10/0x10
[ 1023.868851][T18823]  ? snprintf+0xe8/0x140
[ 1023.868871][T18823]  ? __up_read+0x291/0x6b0
[ 1023.868910][T18823]  proc_map_files_readdir+0x7e2/0xa40
[ 1023.868937][T18823]  ? __mutex_lock+0x319/0x1300
[ 1023.868966][T18823]  ? __pfx_proc_map_files_readdir+0x10/0x10
[ 1023.869021][T18823]  ? iterate_dir+0x292/0x570
[ 1023.869043][T18823]  ? down_read_killable+0x1bb/0x340
[ 1023.869077][T18823]  iterate_dir+0x399/0x570
[ 1023.869107][T18823]  __ia32_compat_sys_getdents+0x140/0x2b0
[ 1023.869137][T18823]  ? __pfx___ia32_compat_sys_getdents+0x10/0x10
[ 1023.869162][T18823]  ? __pfx_compat_filldir+0x10/0x10
[ 1023.869204][T18823]  __do_fast_syscall_32+0x20d/0x640
[ 1023.869233][T18823]  ? do_fast_syscall_32+0x33/0x70
[ 1023.869257][T18823]  ? asm_int80_emulation+0x1a/0x20
[ 1023.869276][T18823]  ? do_int80_emulation+0x274/0x4d0
[ 1023.869300][T18823]  ? trace_irq_disable+0x3b/0x150
[ 1023.869322][T18823]  do_fast_syscall_32+0x33/0x70
[ 1023.869349][T18823]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1023.869372][T18823] RIP: 0023:0xf708ef6c
[ 1023.869391][T18823] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1023.869407][T18823] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 000000000000008d
[ 1023.869430][T18823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000ec0
[ 1023.869444][T18823] RDX: 0000000000001012 RSI: 0000000000000000 RDI: 0000000000000000
[ 1023.869456][T18823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1023.869467][T18823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1023.869479][T18823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1023.869509][T18823]  </TASK>
[ 1024.442152][T18828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3018'.
[ 1024.656214][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3020'.
[ 1024.764685][T18845] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1024.772884][T18845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1024.780579][T18845] IPv6: NLM_F_CREATE should be set when creating new route
[ 1024.787954][T18845] IPv6: NLM_F_CREATE should be set when creating new route
[ 1024.795433][T18845] IPv6: NLM_F_CREATE should be set when creating new route
[ 1024.820406][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3023'.
[ 1024.947880][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1025.107869][   T24] usb 1-1: Using ep0 maxpacket: 16
[ 1025.124146][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1025.139059][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1025.148523][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.161543][   T24] usb 1-1: Product: syz
[ 1025.167778][ T5910] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1025.169143][   T24] usb 1-1: Manufacturer: syz
[ 1025.194515][   T24] usb 1-1: SerialNumber: syz
[ 1025.261577][   T24] usb 1-1: config 0 descriptor??
[ 1025.316800][   T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1025.328041][ T5910] usb 4-1: Using ep0 maxpacket: 32
[ 1025.330783][   T24] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1025.343182][ T5910] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1025.353424][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.374400][ T5910] usb 4-1: config 0 descriptor??
[ 1025.397084][ T5910] as10x_usb: device has been detected
[ 1025.416363][ T5910] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1025.529046][ T5910] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1025.588033][ T5917] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1025.597369][ T5910] as10x_usb: error during firmware upload part1
[ 1025.648073][ T5910] Registered device nBox DVB-T Dongle
[ 1025.891752][ T5917] usb 2-1: Using ep0 maxpacket: 32
[ 1025.906705][   T24] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1025.909613][ T5917] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1025.924113][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.995242][ T5917] usb 2-1: config 0 descriptor??
[ 1026.017458][ T5917] as10x_usb: device has been detected
[ 1026.026496][ T5917] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1026.056152][ T5917] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)...
[ 1026.096382][ T5917] as10x_usb: error during firmware upload part1
[ 1026.112608][ T5917] Registered device nBox DVB-T Dongle
[ 1026.360775][   T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1026.386486][   T24] em28xx 1-1:0.0: board has no eeprom
[ 1026.425988][ T5919] usb 4-1: USB disconnect, device number 72
[ 1026.473293][ T5919] Unregistered device nBox DVB-T Dongle
[ 1026.477348][ T5919] as10x_usb: device has been disconnected
[ 1026.520509][T18855] openvswitch: netlink: Message has 1 unknown bytes.
[ 1026.527759][T15798] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[ 1026.530069][T18855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1026.646867][T18855] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3027'.
[ 1026.687670][T15798] usb 5-1: device descriptor read/64, error -71
[ 1026.717719][   T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1026.725778][   T24] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1026.732635][ T5937] em28xx 1-1:0.0: Binding DVB extension
[ 1026.808955][ T5910] usb 2-1: USB disconnect, device number 17
[ 1026.853015][ T5910] Unregistered device nBox DVB-T Dongle
[ 1026.855142][ T5910] as10x_usb: device has been disconnected
[ 1026.947810][T15798] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[ 1026.997800][ T5919] usb 4-1: new full-speed USB device number 73 using dummy_hcd
[ 1027.063003][   T24] usb 1-1: USB disconnect, device number 4
[ 1027.070071][   T24] em28xx 1-1:0.0: Disconnecting em28xx
[ 1027.098225][T15798] usb 5-1: device descriptor read/64, error -71
[ 1027.135333][ T5937] em28xx 1-1:0.0: Registering input extension
[ 1027.141651][ T5919] usb 4-1: device descriptor read/64, error -71
[ 1027.149846][   T24] em28xx 1-1:0.0: Closing input extension
[ 1027.175984][   T24] em28xx 1-1:0.0: Freeing device
[ 1027.238029][T15798] usb usb5-port1: attempt power cycle
[ 1027.309492][ T5910] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1027.397693][ T5919] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[ 1027.413752][T18867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3031'.
[ 1027.481248][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.494902][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1027.507273][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c134, bcdDevice= 0.00
[ 1027.517336][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.527834][ T5919] usb 4-1: device descriptor read/64, error -71
[ 1027.536384][ T5910] usb 2-1: config 0 descriptor??
[ 1027.597739][T15798] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[ 1027.638217][T15798] usb 5-1: device descriptor read/8, error -71
[ 1027.648188][ T5919] usb usb4-port1: attempt power cycle
[ 1027.908092][T15798] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[ 1027.952045][T15798] usb 5-1: device descriptor read/8, error -71
[ 1027.998312][ T5919] usb 4-1: new full-speed USB device number 75 using dummy_hcd
[ 1028.030476][ T5919] usb 4-1: device descriptor read/8, error -71
[ 1028.068023][T15798] usb usb5-port1: unable to enumerate USB device
[ 1028.297660][ T5919] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[ 1028.329507][ T5919] usb 4-1: device descriptor read/8, error -71
[ 1028.439236][ T5919] usb usb4-port1: unable to enumerate USB device
[ 1028.756072][T18891] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1028.773477][T18891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1028.781002][T18891] IPv6: NLM_F_CREATE should be set when creating new route
[ 1028.788327][T18891] IPv6: NLM_F_CREATE should be set when creating new route
[ 1028.795692][T18891] IPv6: NLM_F_CREATE should be set when creating new route
[ 1028.822522][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3037'.
[ 1030.108138][T18894] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1030.279108][T15798] usb 2-1: USB disconnect, device number 18
[ 1031.802087][T18916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'.
[ 1031.944520][ T5910] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1032.037807][ T5917] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1032.109124][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.143367][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1032.174154][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1032.194808][ T5910] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[ 1032.227199][ T5917] usb 5-1: Using ep0 maxpacket: 16
[ 1032.245299][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1032.275817][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.309406][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1032.334805][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.350293][ T5910] usb 2-1: config 0 descriptor??
[ 1032.365959][ T5917] usb 5-1: Product: syz
[ 1032.378106][ T5917] usb 5-1: Manufacturer: syz
[ 1032.392759][ T5917] usb 5-1: SerialNumber: syz
[ 1032.420104][ T5917] usb 5-1: config 0 descriptor??
[ 1032.442944][ T5917] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1032.457425][ T5917] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1032.777927][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1032.807764][ T5910] wacom 0003:056A:0000.0049: unbalanced delimiter at end of report description
[ 1033.014779][   T10] usb 1-1: Using ep0 maxpacket: 32
[ 1033.048894][   T10] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1033.063562][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.077387][ T5917] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1033.085402][ T5910] wacom 0003:056A:0000.0049: parse failed
[ 1033.106588][   T10] usb 1-1: config 0 descriptor??
[ 1033.122007][ T5910] wacom 0003:056A:0000.0049: probe with driver wacom failed with error -22
[ 1033.146418][   T10] as10x_usb: device has been detected
[ 1033.182435][   T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1033.192761][ T5910] usb 2-1: USB disconnect, device number 19
[ 1033.264941][   T10] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1033.286172][   T10] as10x_usb: error during firmware upload part1
[ 1033.294446][   T10] Registered device nBox DVB-T Dongle
[ 1033.510382][ T5917] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1033.525611][ T5917] em28xx 5-1:0.0: board has no eeprom
[ 1033.817743][ T5917] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1034.033622][ T5917] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1034.039547][ T5910] em28xx 5-1:0.0: Binding DVB extension
[ 1034.133504][ T5917] usb 1-1: USB disconnect, device number 5
[ 1034.315924][ T5917] Unregistered device nBox DVB-T Dongle
[ 1034.323002][ T5903] usb 5-1: USB disconnect, device number 27
[ 1034.349795][ T5917] as10x_usb: device has been disconnected
[ 1034.350706][T18956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3058'.
[ 1034.382412][ T5903] em28xx 5-1:0.0: Disconnecting em28xx
[ 1034.418798][ T5910] em28xx 5-1:0.0: Registering input extension
[ 1034.435185][ T5903] em28xx 5-1:0.0: Closing input extension
[ 1034.509282][ T5903] em28xx 5-1:0.0: Freeing device
[ 1034.663300][T18962] syzkaller0: entered promiscuous mode
[ 1034.677965][T18962] syzkaller0: entered allmulticast mode
[ 1034.747692][ T5919] usb 6-1: new full-speed USB device number 77 using dummy_hcd
[ 1034.911574][ T5919] usb 6-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[ 1034.932650][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C
[ 1034.948707][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 8118, setting to 64
[ 1034.971793][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1035.019202][ T5919] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1035.028574][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.076134][ T5919] usb 6-1: Product: syz
[ 1035.097016][ T5919] usb 6-1: Manufacturer: syz
[ 1035.101914][ T5919] usb 6-1: SerialNumber: syz
[ 1035.107187][T18980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'.
[ 1035.124688][ T5919] usb 6-1: config 0 descriptor??
[ 1035.131202][T18960] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1035.182647][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3063'.
[ 1035.234987][ T5919] rc_core: IR keymap rc-xbox-dvd not found
[ 1035.245109][ T5919] Registered IR keymap rc-empty
[ 1035.256907][ T5919] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1035.306438][ T5919] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input81
[ 1035.476381][ T5919] usb 6-1: USB disconnect, device number 77
[ 1035.476452][    C1] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[ 1036.491452][T18990] hub 9-0:1.0: USB hub found
[ 1036.555651][T18990] hub 9-0:1.0: 1 port detected
[ 1039.037772][ T5919] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1039.209319][ T5919] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[ 1039.225712][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1039.261432][ T5919] usb 2-1: config 0 has no interface number 0
[ 1039.284862][ T5919] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1039.323352][ T5919] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1039.389658][ T5919] usb 2-1: config 0 interface 106 has no altsetting 0
[ 1039.414063][ T5919] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1039.505727][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.577265][ T5919] usb 2-1: config 0 descriptor??
[ 1039.718794][ T5919] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1039.946442][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.969632][ T5903] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1039.999309][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1040.080652][T19027] team0: Device gtp0 is of different type
[ 1040.177289][ T5903] usb 5-1: Using ep0 maxpacket: 16
[ 1040.203948][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1040.229800][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1040.241068][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.259459][ T5903] usb 5-1: Product: syz
[ 1040.263852][ T5903] usb 5-1: Manufacturer: syz
[ 1040.274290][ T5903] usb 5-1: SerialNumber: syz
[ 1040.295600][ T5903] usb 5-1: config 0 descriptor??
[ 1040.333984][ T5903] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1040.359131][ T5903] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1040.532447][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1040.532467][   T30] audit: type=1326 audit(1775289360.507:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.532863][   T30] audit: type=1326 audit(1775289360.507:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.561993][   T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1040.596877][   T30] audit: type=1326 audit(1775289360.567:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.596936][   T30] audit: type=1326 audit(1775289360.567:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.596981][   T30] audit: type=1326 audit(1775289360.567:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.599016][   T30] audit: type=1326 audit(1775289360.567:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.603111][   T30] audit: type=1326 audit(1775289360.577:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.603167][   T30] audit: type=1326 audit(1775289360.577:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.603209][   T30] audit: type=1326 audit(1775289360.577:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.603250][   T30] audit: type=1326 audit(1775289360.577:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 1040.738918][   T24] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[ 1040.738950][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1040.738969][   T24] usb 4-1: config 0 has no interface number 0
[ 1040.738987][   T24] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1040.739011][   T24] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1040.739037][   T24] usb 4-1: config 0 interface 106 has no altsetting 0
[ 1040.739071][   T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1040.739094][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.741704][   T24] usb 4-1: config 0 descriptor??
[ 1040.763905][   T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1040.779360][   T13] usb 2-1: Failed to submit usb control message: -110
[ 1040.779460][   T13] usb 2-1: unable to send the bmi data to the device: -110
[ 1040.779481][   T13] usb 2-1: unable to get target info from device
[ 1040.779498][   T13] usb 2-1: could not get target info (-110)
[ 1040.779517][   T13] usb 2-1: could not probe fw (-110)
[ 1040.936336][ T5903] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1041.162290][T19044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1041.163128][T19044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1041.184013][T19044] team0: Device gtp0 is of different type
[ 1041.381420][ T5903] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1041.381456][ T5903] em28xx 5-1:0.0: board has no eeprom
[ 1041.409790][T14178] Bluetooth: hci5: command 0x0406 tx timeout
[ 1041.668479][ T5903] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1041.668512][ T5903] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1041.672455][ T5903] em28xx 5-1:0.0: Binding DVB extension
[ 1041.818663][ T6500] usb 4-1: Failed to submit usb control message: -110
[ 1041.818732][ T6500] usb 4-1: unable to send the bmi data to the device: -110
[ 1041.818751][ T6500] usb 4-1: unable to get target info from device
[ 1041.818768][ T6500] usb 4-1: could not get target info (-110)
[ 1041.818786][ T6500] usb 4-1: could not probe fw (-110)
[ 1041.999864][   T24] usb 5-1: USB disconnect, device number 28
[ 1042.002696][   T24] em28xx 5-1:0.0: Disconnecting em28xx
[ 1042.071400][ T5903] em28xx 5-1:0.0: Registering input extension
[ 1042.278885][ T5910] usb 2-1: USB disconnect, device number 20
[ 1042.293484][   T24] em28xx 5-1:0.0: Closing input extension
[ 1042.305245][   T24] em28xx 5-1:0.0: Freeing device
[ 1043.297975][T15798] usb 4-1: USB disconnect, device number 77
[ 1043.340039][T19063] netlink: 'syz.3.3083': attribute type 33 has an invalid length.
[ 1043.407931][T19063] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3083'.
[ 1043.782718][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3084'.
[ 1043.803356][T14178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1043.818307][T14178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1043.828790][T14178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1043.839182][T14178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1043.857541][T14178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1044.067884][ T5903] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1044.167585][ T5917] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1044.240285][ T5903] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1044.282638][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1044.320337][ T5903] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1044.359762][ T5903] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1044.368089][ T5917] usb 2-1: Using ep0 maxpacket: 16
[ 1044.391812][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1044.407589][ T5903] usb 6-1: Manufacturer: syz
[ 1044.417937][ T5910] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1044.425900][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42662, setting to 1024
[ 1044.438383][ T5903] usb 6-1: config 0 descriptor??
[ 1044.475758][T19070] chnl_net:caif_netlink_parms(): no params data found
[ 1044.484371][ T5917] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[ 1044.518103][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.549227][ T5917] usb 2-1: Product: syz
[ 1044.587721][ T5917] usb 2-1: Manufacturer: syz
[ 1044.592394][ T5917] usb 2-1: SerialNumber: syz
[ 1044.598997][ T5903] rc_core: IR keymap rc-hauppauge not found
[ 1044.605872][ T5903] Registered IR keymap rc-empty
[ 1044.614919][ T5910] usb 4-1: config 0 has no interfaces?
[ 1044.629016][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'.
[ 1044.639549][ T5903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1044.659017][ T5917] usb 2-1: config 0 descriptor??
[ 1044.666442][ T5903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83
[ 1044.680105][ T5910] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1044.690020][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3084'.
[ 1044.711115][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.733797][ T5910] usb 4-1: Product: syz
[ 1044.749245][ T5917] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1044.762970][ T5910] usb 4-1: Manufacturer: syz
[ 1044.802450][ T5910] usb 4-1: SerialNumber: syz
[ 1044.860746][ T5910] usb 4-1: config 0 descriptor??
[ 1045.130588][T19070] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1045.163383][T19070] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1045.203116][T19070] bridge_slave_0: entered allmulticast mode
[ 1045.220672][T19070] bridge_slave_0: entered promiscuous mode
[ 1045.249972][T19073] veth0_macvtap: left promiscuous mode
[ 1045.367497][T19073] veth0_macvtap: entered promiscuous mode
[ 1045.397989][T19070] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1045.405356][T19070] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1045.438141][T19070] bridge_slave_1: entered allmulticast mode
[ 1045.457944][T19070] bridge_slave_1: entered promiscuous mode
[ 1045.553025][T19070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1045.584271][T19070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1045.722848][T15798] usb 2-1: USB disconnect, device number 21
[ 1045.724904][T19070] team0: Port device team_slave_0 added
[ 1045.737636][ T6720] usb 2-1: Failed to submit usb control message: -71
[ 1045.744776][ T6720] usb 2-1: unable to send the bmi data to the device: -71
[ 1045.771065][T19070] team0: Port device team_slave_1 added
[ 1045.791631][ T6720] usb 2-1: unable to get target info from device
[ 1045.833814][ T6720] usb 2-1: could not get target info (-71)
[ 1045.899327][T14178] Bluetooth: hci3: command tx timeout
[ 1045.906721][ T6720] usb 2-1: could not probe fw (-71)
[ 1045.943384][T19070] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1045.982657][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1046.199826][T19070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1046.305613][T19070] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1046.314738][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1046.360371][ T5919] usb 6-1: USB disconnect, device number 78
[ 1046.364078][T19070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1046.487653][T15798] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1046.506689][T19103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1046.541464][T19103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1046.734937][T19070] hsr_slave_0: entered promiscuous mode
[ 1046.742041][T19070] hsr_slave_1: entered promiscuous mode
[ 1046.750619][T19070] debugfs: 'hsr0' already exists in 'hsr'
[ 1046.756575][T19070] Cannot create hsr debugfs directory
[ 1046.841021][T15798] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[ 1046.859202][T15798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.877608][T15798] usb 2-1: config 0 has no interface number 0
[ 1046.883916][T15798] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1046.897657][T15798] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1046.911905][T15798] usb 2-1: config 0 interface 106 has no altsetting 0
[ 1046.928288][T15798] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1046.940492][T15798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.959595][T15798] usb 2-1: config 0 descriptor??
[ 1046.980375][T15798] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1047.129754][T19070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.244748][T19070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.306554][T19113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.329731][T19113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.378247][T19113] team0: Device gtp0 is of different type
[ 1047.448384][ T5910] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1047.666207][T19121] hub 9-0:1.0: USB hub found
[ 1047.673527][T19121] hub 9-0:1.0: 1 port detected
[ 1047.720765][ T5910] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[ 1047.748166][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1047.780235][T19070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.801171][ T5910] usb 5-1: config 0 has no interface number 0
[ 1047.813237][ T5910] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1047.827777][T15798] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1047.837762][ T5910] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1047.864963][ T5910] usb 5-1: config 0 interface 106 has no altsetting 0
[ 1047.906455][ T5910] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1047.935938][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.964571][T19070] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[ 1047.977155][ T5910] usb 5-1: config 0 descriptor??
[ 1047.982223][T14178] Bluetooth: hci3: command tx timeout
[ 1048.011820][T19070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.018709][T15798] usb 6-1: Using ep0 maxpacket: 8
[ 1048.038450][ T5910] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1048.043568][T15798] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1048.058310][  T137] usb 2-1: Failed to submit usb control message: -110
[ 1048.058397][T15798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.065536][  T137] usb 2-1: unable to send the bmi data to the device: -110
[ 1048.073869][T15798] usb 6-1: Product: syz
[ 1048.088834][T15798] usb 6-1: Manufacturer: syz
[ 1048.093578][T15798] usb 6-1: SerialNumber: syz
[ 1048.145046][T15798] usb 6-1: config 0 descriptor??
[ 1048.163879][  T137] usb 2-1: unable to get target info from device
[ 1048.164710][T15798] gspca_main: se401-2.14.0 probing 047d:5003
[ 1048.223162][  T137] usb 2-1: could not get target info (-110)
[ 1048.245489][  T137] usb 2-1: could not probe fw (-110)
[ 1048.829227][T15798] gspca_se401: ExtraFeatures: 215
[ 1048.834801][T15798] gspca_se401: Too many frame sizes
[ 1048.857668][T19070] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1048.861045][T19111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.069331][ T5917] usb 2-1: USB disconnect, device number 22
[ 1049.091993][   T13] usb 5-1: Failed to submit usb control message: -110
[ 1049.109201][   T13] usb 5-1: could not get target info (-110)
[ 1049.130085][T19070] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1049.137680][T19111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1049.196574][   T13] usb 5-1: could not probe fw (-110)
[ 1049.239307][T19111] team0: Device gtp1 is of different type
[ 1049.281291][T19070] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1049.292032][T19070] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1049.354930][ T5937] usb 6-1: USB disconnect, device number 79
[ 1049.366933][ T5917] usb 5-1: USB disconnect, device number 29
[ 1049.549344][T19070] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1049.584108][T19070] 8021q: adding VLAN 0 to HW filter on device team0
[ 1049.602509][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1049.609842][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1049.631333][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1049.638724][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1049.721958][T19137] binder: 19136:19137 ioctl c0306201 80000180 returned -14
[ 1049.752765][T19070] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1049.826296][T19070] veth0_vlan: entered promiscuous mode
[ 1049.845362][T19070] veth1_vlan: entered promiscuous mode
[ 1049.873882][T19070] veth0_macvtap: entered promiscuous mode
[ 1049.891257][T19070] veth1_macvtap: entered promiscuous mode
[ 1049.916545][T19140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3097'.
[ 1049.972546][T19070] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1050.005939][T19070] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1050.048439][T14178] Bluetooth: hci3: command tx timeout
[ 1050.056373][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.085515][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3098'.
[ 1050.095567][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.100502][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3098'.
[ 1050.115549][T19144] FAULT_INJECTION: forcing a failure.
[ 1050.115549][T19144] name failslab, interval 1, probability 0, space 0, times 0
[ 1050.141364][T19144] CPU: 0 UID: 0 PID: 19144 Comm: syz.5.3098 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1050.141397][T19144] Tainted: [L]=SOFTLOCKUP
[ 1050.141405][T19144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1050.141416][T19144] Call Trace:
[ 1050.141425][T19144]  <TASK>
[ 1050.141434][T19144]  dump_stack_lvl+0xe8/0x150
[ 1050.141468][T19144]  should_fail_ex+0x412/0x560
[ 1050.141505][T19144]  should_failslab+0xa8/0x100
[ 1050.141533][T19144]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1050.141556][T19144]  ? __alloc_skb+0x186/0x7d0
[ 1050.141578][T19144]  ? __alloc_skb+0x1d0/0x7d0
[ 1050.141597][T19144]  ? __local_bh_enable_ip+0xd0/0x130
[ 1050.141628][T19144]  __alloc_skb+0x1d0/0x7d0
[ 1050.141651][T19144]  ? netlink_ack_tlv_len+0x6c/0x210
[ 1050.141684][T19144]  netlink_ack+0x146/0xa50
[ 1050.141703][T19144]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1050.141729][T19144]  ? __lock_acquire+0x6b5/0x2cf0
[ 1050.141778][T19144]  netlink_rcv_skb+0x2b6/0x4b0
[ 1050.141802][T19144]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1050.141826][T19144]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1050.141859][T19144]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1050.141888][T19144]  netlink_unicast+0x80f/0x9b0
[ 1050.141927][T19144]  ? __pfx_netlink_unicast+0x10/0x10
[ 1050.141958][T19144]  ? netlink_sendmsg+0x650/0xb40
[ 1050.141978][T19144]  ? skb_put+0x11b/0x210
[ 1050.142004][T19144]  netlink_sendmsg+0x813/0xb40
[ 1050.142035][T19144]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1050.142061][T19144]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1050.142094][T19144]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1050.142121][T19144]  ____sys_sendmsg+0x972/0x9f0
[ 1050.142156][T19144]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1050.142186][T19144]  ? kstrtoull+0x12f/0x1d0
[ 1050.142230][T19144]  ___sys_sendmsg+0x2a5/0x360
[ 1050.142262][T19144]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1050.142289][T19144]  ? get_pid_task+0x20/0x1f0
[ 1050.142309][T19144]  ? get_pid_task+0x20/0x1f0
[ 1050.142326][T19144]  ? get_pid_task+0x20/0x1f0
[ 1050.142372][T19144]  ? __fget_files+0x2a/0x420
[ 1050.142390][T19144]  ? __fget_files+0x3a0/0x420
[ 1050.142419][T19144]  __sys_sendmsg+0x183/0x260
[ 1050.142447][T19144]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1050.142495][T19144]  __do_fast_syscall_32+0x20d/0x640
[ 1050.142526][T19144]  ? do_fast_syscall_32+0x33/0x70
[ 1050.142551][T19144]  ? asm_int80_emulation+0x1a/0x20
[ 1050.142571][T19144]  ? do_int80_emulation+0x274/0x4d0
[ 1050.142597][T19144]  ? trace_irq_disable+0x3b/0x150
[ 1050.142620][T19144]  do_fast_syscall_32+0x33/0x70
[ 1050.142647][T19144]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1050.142679][T19144] RIP: 0023:0xf6fcef6c
[ 1050.142699][T19144] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1050.142716][T19144] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1050.142739][T19144] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200
[ 1050.142754][T19144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1050.142766][T19144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1050.142778][T19144] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1050.142790][T19144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1050.142820][T19144]  </TASK>
[ 1050.157301][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.502721][T14178] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1050.573177][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.763677][ T6720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1050.791834][ T6720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1050.828987][T19158] openvswitch: netlink: Key 23 has unexpected len 4 expected 2
[ 1050.897912][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1050.927753][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.023465][T19151] batadv0: entered promiscuous mode
[ 1051.041076][T19151] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1051.052951][T19151] batadv0: left promiscuous mode
[ 1051.088505][T19164] support for the xor transformation has been removed.
[ 1051.163909][ T5910] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1051.188780][T19166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1051.340168][ T5910] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[ 1051.350815][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.886493][ T5910] usb 6-1: config 0 has no interface number 0
[ 1051.917139][ T5910] usb 6-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1051.987050][ T5910] usb 6-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1052.025499][ T5910] usb 6-1: config 0 interface 106 has no altsetting 0
[ 1052.033853][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1052.044856][ T5910] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1052.046556][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1052.063852][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.064140][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1052.077658][T19175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3110'.
[ 1052.097975][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1052.106047][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1052.128527][ T5838] Bluetooth: hci3: command tx timeout
[ 1052.226337][ T5910] usb 6-1: config 0 descriptor??
[ 1052.287109][ T5910] ath10k_warn: 2 callbacks suppressed
[ 1052.295393][ T5910] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1052.305384][T19180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1052.623847][T19188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1052.633902][T19188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1052.894042][T19188] team0: Device gtp0 is of different type
[ 1053.341621][   T58] usb 6-1: Failed to submit usb control message: -110
[ 1053.357387][   T58] usb 6-1: unable to send the bmi data to the device: -110
[ 1053.382557][   T58] usb 6-1: unable to get target info from device
[ 1053.398425][   T58] usb 6-1: could not get target info (-110)
[ 1053.414874][   T58] usb 6-1: could not probe fw (-110)
[ 1053.624245][T19178] chnl_net:caif_netlink_parms(): no params data found
[ 1053.840863][T19178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.856179][T19178] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.872597][T19178] bridge_slave_0: entered allmulticast mode
[ 1053.888912][T19178] bridge_slave_0: entered promiscuous mode
[ 1053.914983][T19178] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.931143][T19178] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.947618][T19178] bridge_slave_1: entered allmulticast mode
[ 1053.960807][T19178] bridge_slave_1: entered promiscuous mode
[ 1054.161270][T19178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1054.179323][T19178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1054.209213][T14178] Bluetooth: hci0: command tx timeout
[ 1054.265601][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3116'.
[ 1054.385075][T19178] team0: Port device team_slave_0 added
[ 1054.417646][ T5919] usb 6-1: USB disconnect, device number 80
[ 1054.426981][T19178] team0: Port device team_slave_1 added
[ 1054.567367][T19178] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1054.589405][T19207] binder: 19206:19207 ioctl c0306201 80001a80 returned -14
[ 1054.589881][T19178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1054.696443][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.702946][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.724875][T19178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1054.804979][T19178] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1054.812563][T19178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1054.867882][T19178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1055.022146][T19178] hsr_slave_0: entered promiscuous mode
[ 1055.047003][T19178] hsr_slave_1: entered promiscuous mode
[ 1055.076639][T19178] debugfs: 'hsr0' already exists in 'hsr'
[ 1055.083093][T19178] Cannot create hsr debugfs directory
[ 1056.421794][T14178] Bluetooth: hci0: command tx timeout
[ 1056.471468][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3123'.
[ 1056.650861][T19249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.702734][T19178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.734584][T19249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1056.811874][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'.
[ 1057.050088][T19178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.339177][T19178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.490231][T19178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.000688][T19178] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1058.034334][T19178] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1058.053176][T19178] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1058.088326][T19178] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1058.449025][T14178] Bluetooth: hci0: command tx timeout
[ 1058.466998][T19178] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1058.577681][ T5937] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1058.590296][T19178] 8021q: adding VLAN 0 to HW filter on device team0
[ 1058.624827][T19284] netlink: 'syz.5.3128': attribute type 4 has an invalid length.
[ 1058.640048][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.647354][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1058.670732][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.678215][ T6498] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1058.751811][ T5937] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[ 1058.760358][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1058.782489][ T5937] usb 2-1: config 0 has no interface number 0
[ 1058.836165][ T5937] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1058.865680][ T5937] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1058.884113][T19178] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1059.073569][ T5937] usb 2-1: config 0 interface 106 has no altsetting 0
[ 1059.092047][ T5937] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1059.119858][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.150766][T19178] veth0_vlan: entered promiscuous mode
[ 1059.159442][ T5937] usb 2-1: config 0 descriptor??
[ 1059.198829][T19178] veth1_vlan: entered promiscuous mode
[ 1059.216900][ T5937] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1059.291473][T19178] veth0_macvtap: entered promiscuous mode
[ 1059.313310][T19178] veth1_macvtap: entered promiscuous mode
[ 1059.366883][T19178] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1059.448817][T19178] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1059.494473][  T137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.554396][  T137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.571340][T19291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.581705][T19291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1059.657870][  T137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.678835][  T137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.889914][T19291] team0: Device gtp0 is of different type
[ 1060.165793][T19305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.186652][T19305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.299745][ T6720] usb 2-1: Failed to submit usb control message: -110
[ 1060.321756][ T6720] usb 2-1: unable to send the bmi data to the device: -110
[ 1060.339382][ T6720] usb 2-1: unable to get target info from device
[ 1060.372128][ T6720] usb 2-1: could not get target info (-110)
[ 1060.391379][ T6720] usb 2-1: could not probe fw (-110)
[ 1060.543256][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1060.544449][T14178] Bluetooth: hci0: command tx timeout
[ 1060.552017][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1060.620896][ T6720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1060.661292][ T6720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1060.797778][ T5937] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1061.013084][ T5937] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[ 1061.024598][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1061.026678][T19314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1061.044106][ T5937] usb 1-1: config 0 has no interface number 0
[ 1061.061860][T19314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1061.066434][ T5937] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1061.133600][ T5937] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1061.162869][ T5937] usb 1-1: config 0 interface 106 has no altsetting 0
[ 1061.188257][ T5937] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1061.206457][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.799697][ T5937] usb 1-1: config 0 descriptor??
[ 1061.834426][ T5937] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1061.909550][ T5903] usb 2-1: USB disconnect, device number 23
[ 1062.135943][T19326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1062.145618][T19326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1062.519512][T19326] team0: Device gtp0 is of different type
[ 1062.571014][ T5937] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1062.728652][ T5937] usb 2-1: device descriptor read/64, error -71
[ 1062.864891][   T12] usb 1-1: Failed to submit usb control message: -110
[ 1062.898886][   T12] usb 1-1: unable to send the bmi data to the device: -110
[ 1062.933790][   T12] usb 1-1: unable to get target info from device
[ 1062.975142][   T12] usb 1-1: could not get target info (-110)
[ 1062.987727][ T5937] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1063.006037][   T12] usb 1-1: could not probe fw (-110)
[ 1063.145325][T19333] warning: `syz.3.3138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1063.157760][ T5937] usb 2-1: device descriptor read/64, error -71
[ 1063.287808][ T5937] usb usb2-port1: attempt power cycle
[ 1063.604095][T19343] vivid-008: disconnect
[ 1063.684747][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3139'.
[ 1063.949267][ T5937] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1063.990342][ T5937] usb 2-1: device descriptor read/8, error -71
[ 1064.339784][T19343] vivid-008: reconnect
[ 1064.368784][ T5937] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1064.407370][ T5937] usb 2-1: device descriptor read/8, error -71
[ 1064.524452][ T5937] usb usb2-port1: unable to enumerate USB device
[ 1064.703569][ T5903] usb 1-1: USB disconnect, device number 6
[ 1065.237645][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1065.485596][ T5937] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[ 1065.497538][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.522815][ T5937] usb 1-1: config 0 has no interface number 0
[ 1065.538555][ T5937] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1065.577678][ T5903] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1065.592246][ T5937] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1065.610086][ T5937] usb 1-1: config 0 interface 106 has no altsetting 0
[ 1065.617989][ T5937] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1065.627988][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.651025][ T5937] usb 1-1: config 0 descriptor??
[ 1065.666657][ T5937] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1065.712157][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3152'.
[ 1065.777930][ T5903] usb 5-1: Using ep0 maxpacket: 16
[ 1065.785103][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1065.806907][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1065.817604][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.844097][ T5903] usb 5-1: Product: syz
[ 1065.852291][ T5903] usb 5-1: Manufacturer: syz
[ 1065.868612][ T5903] usb 5-1: SerialNumber: syz
[ 1065.907849][ T5903] usb 5-1: config 0 descriptor??
[ 1065.975118][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1065.984725][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1066.025164][T19383] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000'
[ 1066.221943][ T5903] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1066.231624][ T5903] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1066.657396][T19390] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.664897][T19390] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.692514][   T49] usb 1-1: Failed to submit usb control message: -110
[ 1066.710882][   T49] usb 1-1: unable to send the bmi data to the device: -110
[ 1066.745335][   T49] usb 1-1: unable to get target info from device
[ 1066.962512][ T5903] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1067.001910][   T49] usb 1-1: could not get target info (-110)
[ 1067.109977][   T49] usb 1-1: could not probe fw (-110)
[ 1067.283720][T19390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1067.341780][T19390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1067.746275][ T5903] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1067.784890][ T5903] em28xx 5-1:0.0: board has no eeprom
[ 1067.951822][ T6500] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.961554][ T6500] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.032340][ T6500] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.067781][ T6500] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.081781][T19405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.114877][T19405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.150308][ T5903] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1068.162133][ T5903] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1068.170563][   T10] em28xx 5-1:0.0: Binding DVB extension
[ 1068.703158][ T5887] usb 1-1: USB disconnect, device number 7
[ 1069.035804][T19415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3161'.
[ 1069.330642][T19369] em28xx 5-1:0.0: reading from i2c device at 0x482c failed (error=-5)
[ 1069.418529][ T5887] usb 5-1: USB disconnect, device number 30
[ 1069.426329][ T5887] em28xx 5-1:0.0: Disconnecting em28xx
[ 1069.478390][   T10] em28xx 5-1:0.0: Registering input extension
[ 1069.486603][ T5887] em28xx 5-1:0.0: Closing input extension
[ 1069.547800][ T5887] em28xx 5-1:0.0: Freeing device
[ 1069.744482][T19428] program syz.1.3163 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1070.091790][T19433] FAULT_INJECTION: forcing a failure.
[ 1070.091790][T19433] name failslab, interval 1, probability 0, space 0, times 0
[ 1070.114532][T19433] CPU: 0 UID: 0 PID: 19433 Comm: syz.0.3168 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1070.114568][T19433] Tainted: [L]=SOFTLOCKUP
[ 1070.114576][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1070.114588][T19433] Call Trace:
[ 1070.114597][T19433]  <TASK>
[ 1070.114606][T19433]  dump_stack_lvl+0xe8/0x150
[ 1070.114639][T19433]  should_fail_ex+0x412/0x560
[ 1070.114675][T19433]  should_failslab+0xa8/0x100
[ 1070.114704][T19433]  __kmalloc_noprof+0xe8/0x760
[ 1070.114726][T19433]  ? skcipher_next_slow+0xee/0x230
[ 1070.114746][T19433]  ? skcipher_walk_next+0x7b3/0xbe0
[ 1070.114778][T19433]  skcipher_next_slow+0xee/0x230
[ 1070.114803][T19433]  lrw_xor_tweak+0x6ae/0x880
[ 1070.114845][T19433]  ? __pfx_lrw_xor_tweak+0x10/0x10
[ 1070.114882][T19433]  ? sock_kfree_s+0x39/0x60
[ 1070.114909][T19433]  ? lrw_init_crypt+0x1e1/0x290
[ 1070.114935][T19433]  ? __asan_memcpy+0x40/0x70
[ 1070.114957][T19433]  ? lrw_init_crypt+0x1e1/0x290
[ 1070.114979][T19433]  ? gf128mul_64k_bbe+0x24/0x980
[ 1070.115007][T19433]  lrw_decrypt+0x20/0x80
[ 1070.115031][T19433]  skcipher_recvmsg+0xacb/0x1140
[ 1070.115074][T19433]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1070.115096][T19433]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1070.115127][T19433]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1070.115148][T19433]  ? security_socket_recvmsg+0x7e/0x2c0
[ 1070.115171][T19433]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1070.115193][T19433]  sock_recvmsg+0x172/0x1b0
[ 1070.115216][T19433]  ____sys_recvmsg+0x1e6/0x4a0
[ 1070.115251][T19433]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1070.115275][T19433]  ? get_compat_msghdr+0x34b/0x4c0
[ 1070.115321][T19433]  ___sys_recvmsg+0x215/0x590
[ 1070.115346][T19433]  ? get_pid_task+0x20/0x1f0
[ 1070.115370][T19433]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1070.115431][T19433]  ? __fget_files+0x3a0/0x420
[ 1070.115461][T19433]  __sys_recvmsg+0x180/0x250
[ 1070.115489][T19433]  ? __pfx___sys_recvmsg+0x10/0x10
[ 1070.115538][T19433]  __do_fast_syscall_32+0x20d/0x640
[ 1070.115573][T19433]  ? do_fast_syscall_32+0x33/0x70
[ 1070.115598][T19433]  ? asm_int80_emulation+0x1a/0x20
[ 1070.115616][T19433]  ? do_int80_emulation+0x274/0x4d0
[ 1070.115640][T19433]  ? trace_irq_disable+0x3b/0x150
[ 1070.115662][T19433]  do_fast_syscall_32+0x33/0x70
[ 1070.115688][T19433]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1070.115711][T19433] RIP: 0023:0xf70aef6c
[ 1070.115729][T19433] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1070.115745][T19433] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000174
[ 1070.115767][T19433] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[ 1070.115781][T19433] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1070.115793][T19433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1070.115805][T19433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1070.115817][T19433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1070.115847][T19433]  </TASK>
[ 1070.874303][T19444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1071.008092][T19444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1072.114208][T19455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1072.127344][T19455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1072.237568][   T10] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1072.390009][   T10] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[ 1072.411930][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.420812][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'.
[ 1072.452524][   T10] usb 6-1: config 0 has no interface number 0
[ 1072.483021][   T10] usb 6-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1072.542596][   T10] usb 6-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1072.596069][   T10] usb 6-1: config 0 interface 106 has no altsetting 0
[ 1072.606265][   T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1072.626610][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.652275][   T10] usb 6-1: config 0 descriptor??
[ 1072.743265][   T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1072.972241][T19479] ucma_write: process 28 (syz.4.3181) changed security contexts after opening file descriptor, this is not allowed.
[ 1073.063266][T19483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.072867][T19483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.944785][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1073.957856][ T6500] usb 6-1: Failed to submit usb control message: -110
[ 1073.965315][ T6500] usb 6-1: unable to send the bmi data to the device: -110
[ 1073.973133][ T6500] usb 6-1: unable to get target info from device
[ 1073.988252][ T6500] usb 6-1: could not get target info (-110)
[ 1073.994483][ T6500] usb 6-1: could not probe fw (-110)
[ 1074.182020][   T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1074.215931][   T10] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1074.295538][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1074.376552][   T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1074.409329][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1074.438225][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1075.037212][   T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1075.046618][   T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1075.093493][   T10] usb 2-1: Product: syz
[ 1075.100743][   T10] usb 2-1: Manufacturer: syz
[ 1075.119752][T19496] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1075.204236][   T10] cdc_wdm 2-1:1.0: skipping garbage
[ 1075.224807][   T10] cdc_wdm 2-1:1.0: skipping garbage
[ 1075.307723][ T5887] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1075.326116][   T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1075.356803][   T10] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1075.429880][ T5919] usb 6-1: USB disconnect, device number 81
[ 1075.457549][ T5887] usb 1-1: Using ep0 maxpacket: 16
[ 1075.468071][    C0] wdm_int_callback: 4 callbacks suppressed
[ 1075.468093][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.480539][    C0] wdm_int_callback: 4 callbacks suppressed
[ 1075.480558][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.492938][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.499586][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.506013][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.512651][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.525520][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.532276][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.538815][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.545455][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.557689][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.564366][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.575177][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.581847][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.588889][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.595668][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.601927][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.608552][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.614861][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1075.621555][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1075.629417][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1075.629425][ T5937] usb 2-1: USB disconnect, device number 28
[ 1075.629449][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1075.640566][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1075.703626][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1075.742442][ T5887] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1075.810100][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.845107][ T5887] usb 1-1: config 0 descriptor??
[ 1076.280415][ T5887] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 1076.295413][ T5887] microsoft 0003:045E:07DA.004A: item fetching failed at offset 13/34
[ 1076.331173][ T5887] microsoft 0003:045E:07DA.004A: parse failed
[ 1076.372622][ T5887] microsoft 0003:045E:07DA.004A: probe with driver microsoft failed with error -22
[ 1076.495090][T19513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1076.528050][T19513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.574122][T19513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1076.611924][T19513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.654765][ T5887] usb 1-1: USB disconnect, device number 8
[ 1077.414415][T19552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1077.484305][T19555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1077.505712][T19555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1077.574326][ T5937] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1077.667173][T19560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1077.679873][T19560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1077.841903][ T5937] usb 1-1: Using ep0 maxpacket: 32
[ 1077.851875][T19563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3206'.
[ 1077.855521][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1077.879762][ T5937] usb 1-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40
[ 1077.904070][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.917098][ T5937] usb 1-1: Product: syz
[ 1077.924913][ T5937] usb 1-1: Manufacturer: syz
[ 1077.932334][ T5937] usb 1-1: SerialNumber: syz
[ 1078.089387][T19566] vivid-002: disconnect
[ 1078.107068][T19566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3205'.
[ 1078.586552][ T5937] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1078.696946][ T5937] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1079.052076][T19562] vivid-002: reconnect
[ 1079.162352][ T5937] usb 1-1: USB disconnect, device number 9
[ 1079.613667][ T6833] udevd[6833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1079.748534][ T5919] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1079.839112][T19576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3209'.
[ 1079.907793][ T5919] usb 6-1: device descriptor read/64, error -71
[ 1080.192568][ T5919] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1080.291847][T19584] input: syz0 as /devices/virtual/input/input85
[ 1080.404974][ T5919] usb 6-1: device descriptor read/64, error -71
[ 1080.550165][T19587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.557980][ T5919] usb usb6-port1: attempt power cycle
[ 1080.559154][T19587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1081.034194][ T5919] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1081.069357][ T5919] usb 6-1: device descriptor read/8, error -71
[ 1081.247347][T19597] program syz.0.3215 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1081.510015][ T5919] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1081.541507][ T5919] usb 6-1: device descriptor read/8, error -71
[ 1081.724282][ T5919] usb usb6-port1: unable to enumerate USB device
[ 1081.787715][   T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1081.835964][T19602] FAULT_INJECTION: forcing a failure.
[ 1081.835964][T19602] name failslab, interval 1, probability 0, space 0, times 0
[ 1081.869600][T19602] CPU: 1 UID: 0 PID: 19602 Comm: syz.4.3217 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1081.869636][T19602] Tainted: [L]=SOFTLOCKUP
[ 1081.869643][T19602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1081.869655][T19602] Call Trace:
[ 1081.869664][T19602]  <TASK>
[ 1081.869673][T19602]  dump_stack_lvl+0xe8/0x150
[ 1081.869707][T19602]  should_fail_ex+0x412/0x560
[ 1081.869743][T19602]  should_failslab+0xa8/0x100
[ 1081.869775][T19602]  ? skb_clone+0x212/0x3a0
[ 1081.869799][T19602]  kmem_cache_alloc_noprof+0x87/0x650
[ 1081.869830][T19602]  skb_clone+0x212/0x3a0
[ 1081.869859][T19602]  __netlink_deliver_tap+0x404/0x850
[ 1081.869895][T19602]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1081.869917][T19602]  netlink_deliver_tap+0x19c/0x1b0
[ 1081.869941][T19602]  netlink_sendskb+0x68/0x140
[ 1081.869972][T19602]  netlink_unicast+0x3a3/0x9b0
[ 1081.870011][T19602]  ? __pfx_netlink_unicast+0x10/0x10
[ 1081.870060][T19602]  netlink_rcv_skb+0x2b6/0x4b0
[ 1081.870082][T19602]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1081.870109][T19602]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1081.870149][T19602]  ? down_read+0x272/0x2e0
[ 1081.870175][T19602]  ? genl_rcv+0xd/0x40
[ 1081.870201][T19602]  genl_rcv+0x28/0x40
[ 1081.870225][T19602]  netlink_unicast+0x80f/0x9b0
[ 1081.870263][T19602]  ? __pfx_netlink_unicast+0x10/0x10
[ 1081.870293][T19602]  ? netlink_sendmsg+0x650/0xb40
[ 1081.870312][T19602]  ? skb_put+0x11b/0x210
[ 1081.870339][T19602]  netlink_sendmsg+0x813/0xb40
[ 1081.870380][T19602]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1081.870406][T19602]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1081.870437][T19602]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1081.870465][T19602]  ____sys_sendmsg+0x972/0x9f0
[ 1081.870501][T19602]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1081.870531][T19602]  ? kstrtoull+0x12f/0x1d0
[ 1081.870569][T19602]  ___sys_sendmsg+0x2a5/0x360
[ 1081.870600][T19602]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1081.870629][T19602]  ? get_pid_task+0x20/0x1f0
[ 1081.870648][T19602]  ? get_pid_task+0x20/0x1f0
[ 1081.870674][T19602]  ? get_pid_task+0x20/0x1f0
[ 1081.870723][T19602]  ? __fget_files+0x2a/0x420
[ 1081.870741][T19602]  ? __fget_files+0x3a0/0x420
[ 1081.870772][T19602]  __sys_sendmsg+0x183/0x260
[ 1081.870800][T19602]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1081.870849][T19602]  __do_fast_syscall_32+0x20d/0x640
[ 1081.870879][T19602]  ? do_fast_syscall_32+0x33/0x70
[ 1081.870904][T19602]  ? asm_int80_emulation+0x1a/0x20
[ 1081.870922][T19602]  ? do_int80_emulation+0x274/0x4d0
[ 1081.870946][T19602]  ? trace_irq_disable+0x3b/0x150
[ 1081.870969][T19602]  do_fast_syscall_32+0x33/0x70
[ 1081.870996][T19602]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1081.871019][T19602] RIP: 0023:0xf7fb6f6c
[ 1081.871047][T19602] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1081.871064][T19602] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1081.871087][T19602] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 1081.871101][T19602] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1081.871113][T19602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1081.871125][T19602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1081.871137][T19602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1081.871167][T19602]  </TASK>
[ 1082.097328][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1082.578533][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1082.629737][   T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1082.639329][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.647852][   T10] usb 2-1: Product: syz
[ 1082.652170][   T10] usb 2-1: Manufacturer: syz
[ 1082.657634][   T10] usb 2-1: SerialNumber: syz
[ 1082.682939][   T10] usb 2-1: config 0 descriptor??
[ 1082.743797][   T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1082.817789][ T5919] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1082.860292][T19611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'.
[ 1082.906495][   T13] usb 2-1: Failed to submit usb control message: -71
[ 1082.914012][   T10] usb 2-1: USB disconnect, device number 29
[ 1082.924393][   T13] usb 2-1: unable to send the bmi data to the device: -71
[ 1082.940835][   T13] usb 2-1: unable to get target info from device
[ 1082.960344][   T13] usb 2-1: could not get target info (-71)
[ 1082.976866][   T13] usb 2-1: could not probe fw (-71)
[ 1082.988194][ T5919] usb 5-1: Using ep0 maxpacket: 16
[ 1083.033932][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1083.052539][ T5919] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1083.073381][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.226603][ T5919] usb 5-1: Product: syz
[ 1083.235060][ T5919] usb 5-1: Manufacturer: syz
[ 1083.240336][ T5919] usb 5-1: SerialNumber: syz
[ 1083.246168][T19615] binder: 19614:19615 ioctl c0306201 80000180 returned -14
[ 1083.257022][ T5919] usb 5-1: config 0 descriptor??
[ 1083.315122][ T5919] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1083.488406][   T31] INFO: task kworker/u8:12:6718 blocked for more than 143 seconds.
[ 1083.496610][   T31]       Tainted: G             L      syzkaller #0
[ 1083.511155][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1083.527933][   T31] task:kworker/u8:12   state:D stack:18816 pid:6718  tgid:6718  ppid:2      task_flags:0x4208160 flags:0x00080000
[ 1083.540937][   T31] Workqueue: netns cleanup_net
[ 1083.546028][   T31] Call Trace:
[ 1083.577347][   T31]  <TASK>
[ 1083.580514][   T31]  __schedule+0x15dd/0x52d0
[ 1083.585112][   T31]  ? __pfx___schedule+0x10/0x10
[ 1083.593212][   T31]  ? schedule+0x90/0x360
[ 1083.600154][   T31]  schedule+0x164/0x360
[ 1083.605728][   T31]  afs_cell_purge+0x40d/0x580
[ 1083.629277][   T31]  ? __pfx_afs_cell_purge+0x10/0x10
[ 1083.670567][   T31]  ? __pfx_var_wake_function+0x10/0x10
[ 1083.676199][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1083.685753][   T31]  ? __timer_delete_sync+0x4a4/0x520
[ 1083.694904][   T31]  afs_net_exit+0x50/0x100
[ 1083.705259][   T31]  ops_undo_list+0x49f/0x940
[ 1083.717646][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 1083.728021][   T31]  ? idr_destroy+0x218/0x290
[ 1083.732857][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[ 1083.742486][   T31]  cleanup_net+0x56b/0x800
[ 1083.752221][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1083.790274][   T31]  ? process_scheduled_works+0xa8d/0x18c0
[ 1083.800483][   T31]  ? process_scheduled_works+0xa8d/0x18c0
[ 1083.811886][   T31]  process_scheduled_works+0xb6e/0x18c0
[ 1083.822266][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1083.833880][   T31]  ? assign_work+0x3d5/0x5e0
[ 1083.849489][   T31]  worker_thread+0xa53/0xfc0
[ 1083.859568][   T31]  kthread+0x388/0x470
[ 1083.873529][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1083.885961][   T31]  ? __pfx_kthread+0x10/0x10
[ 1083.900582][   T31]  ret_from_fork+0x51e/0xb90
[ 1083.908242][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1083.921430][   T31]  ? __switch_to+0xc7d/0x1450
[ 1083.930433][   T31]  ? __pfx_kthread+0x10/0x10
[ 1083.937638][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1083.946198][   T31]  </TASK>
[ 1083.953422][   T31] 
[ 1083.953422][   T31] Showing all locks held in the system:
[ 1083.974503][   T31] 1 lock held by khungtaskd/31:
[ 1083.987832][   T31]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1084.056709][   T31] 2 locks held by kworker/u8:4/58:
[ 1084.072371][   T31]  #0: ffff888029a39148 ((wq_completion)ath10k_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1084.094947][   T31]  #1: ffffc900015f7c40 ((work_completion)(&ar->register_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1084.124489][   T31] 2 locks held by getty/5586:
[ 1084.142255][   T31]  #0: ffff8880328ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1084.161459][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1084.179664][   T31] 3 locks held by kworker/u8:12/6718:
[ 1084.190439][   T31]  #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1084.211954][   T31]  #1: ffffc90005417c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1084.235739][   T31]  #2: ffffffff8fbc1dd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1084.257772][   T31] 1 lock held by syz-executor/12290:
[ 1084.265587][   T31]  #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150
[ 1084.304588][   T31] 2 locks held by syz.4.3219/19625:
[ 1084.317672][   T31] 
[ 1084.325314][   T31] =============================================
[ 1084.325314][   T31] 
[ 1084.342964][   T31] NMI backtrace for cpu 0
[ 1084.342989][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1084.343045][   T31] Tainted: [L]=SOFTLOCKUP
[ 1084.343050][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1084.343057][   T31] Call Trace:
[ 1084.343063][   T31]  <TASK>
[ 1084.343069][   T31]  dump_stack_lvl+0xe8/0x150
[ 1084.343091][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1084.343104][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1084.343121][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1084.343134][   T31]  sys_info+0x135/0x170
[ 1084.343150][   T31]  watchdog+0xfd9/0x1030
[ 1084.343164][   T31]  ? watchdog+0x21a/0x1030
[ 1084.343178][   T31]  kthread+0x388/0x470
[ 1084.343190][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1084.343199][   T31]  ? __pfx_kthread+0x10/0x10
[ 1084.343211][   T31]  ret_from_fork+0x51e/0xb90
[ 1084.343228][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1084.343242][   T31]  ? __switch_to+0xc7d/0x1450
[ 1084.343260][   T31]  ? __pfx_kthread+0x10/0x10
[ 1084.343271][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1084.343295][   T31]  </TASK>
[ 1084.343319][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1084.462212][    C1] NMI backtrace for cpu 1
[ 1084.462236][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1084.462285][    C1] Tainted: [L]=SOFTLOCKUP
[ 1084.462292][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1084.462302][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1084.462330][    C1] Code: ae 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d2 19 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1084.462344][    C1] RSP: 0000:ffffc90000197e20 EFLAGS: 00000242
[ 1084.462360][    C1] RAX: 0000000001369949 RBX: ffffffff819a91fa RCX: 0000000080000001
[ 1084.462373][    C1] RDX: 0000000000000001 RSI: ffffffff8defb34b RDI: ffffffff8c27d500
[ 1084.462384][    C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733
[ 1084.462396][    C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001
[ 1084.462407][    C1] R13: 1ffff11003bd9000 R14: 0000000000000001 R15: 1ffff11003bd9000
[ 1084.462418][    C1] FS:  0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000
[ 1084.462431][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1084.462442][    C1] CR2: 00000000f73a82a8 CR3: 0000000065de6000 CR4: 00000000003526f0
[ 1084.462461][    C1] Call Trace:
[ 1084.462468][    C1]  <TASK>
[ 1084.462474][    C1]  default_idle+0x9/0x20
[ 1084.462495][    C1]  default_idle_call+0x72/0xb0
[ 1084.462517][    C1]  do_idle+0x36a/0x5f0
[ 1084.462538][    C1]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1084.462558][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1084.462581][    C1]  cpu_startup_entry+0x43/0x60
[ 1084.462603][    C1]  start_secondary+0x101/0x110
[ 1084.462622][    C1]  common_startup_64+0x13e/0x147
[ 1084.462644][    C1]  </TASK>
[ 1084.478645][   T58] usb 5-1: Failed to submit usb control message: -110
[ 1084.708197][   T58] usb 5-1: unable to send the bmi data to the device: -110
[ 1084.715800][   T58] usb 5-1: unable to get target info from device
[ 1084.723046][   T58] usb 5-1: could not get target info (-110)
[ 1084.731395][   T58] usb 5-1: could not probe fw (-110)
[ 1084.736009][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1084.736032][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1084.736057][   T31] Tainted: [L]=SOFTLOCKUP
[ 1084.736065][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1084.736076][   T31] Call Trace:
[ 1084.736085][   T31]  <TASK>
[ 1084.736094][   T31]  vpanic+0x56c/0xa60
[ 1084.736123][   T31]  ? __pfx___schedule+0x10/0x10
[ 1084.736145][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1084.736169][   T31]  ? __pfx_console_unlock+0x10/0x10
[ 1084.736201][   T31]  panic+0xc5/0xd0
[ 1084.736224][   T31]  ? __pfx_panic+0x10/0x10
[ 1084.736248][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1084.736273][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1084.736296][   T31]  watchdog+0x1023/0x1030
[ 1084.736319][   T31]  ? watchdog+0x21a/0x1030
[ 1084.736342][   T31]  kthread+0x388/0x470
[ 1084.736361][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1084.736376][   T31]  ? __pfx_kthread+0x10/0x10
[ 1084.736396][   T31]  ret_from_fork+0x51e/0xb90
[ 1084.736421][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1084.736443][   T31]  ? __switch_to+0xc7d/0x1450
[ 1084.736467][   T31]  ? __pfx_kthread+0x10/0x10
[ 1084.736485][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1084.736524][   T31]  </TASK>
[ 1084.737356][   T31] Kernel Offset: disabled