last executing test programs:

2m40.813786852s ago: executing program 3 (id=185):
r0 = socket$vsock_stream(0x28, 0x5, 0x28)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480280001"], 0xc8}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={0x0, 0x4004, 0xffff37a4})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={0x0, 0x0, r0, 0x7, 0x80000})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)

2m40.227205244s ago: executing program 3 (id=188):
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x3, &(0x7f0000000540)=[{0x6, 0x42, 0x2, 0x7ffffffb}, {0xfff1, 0x0, 0x87, 0x8001}, {0x3, 0x3, 0x4, 0x1}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x1, 0x1, 0x3, {{0x19, 0x4, 0x1, 0x4, 0x64, 0x67, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x3, [0x1]}, @generic={0x7, 0xa, "d87e08d9d0b91361"}, @generic={0x88, 0x6, "72851b28"}, @noop, @cipso={0x86, 0x6, 0x1}, @generic={0x88, 0x7, "ada7655058"}, @timestamp={0x44, 0x1c, 0x39, 0x0, 0x8, [0x6, 0x0, 0x8, 0x2096, 0x6, 0x3]}, @generic={0x94, 0xa, "efd0980845d5b4e8"}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000000a0000000000c80600e1fe00000800000000000000000000000000c31d61289a75798b42e843a5140e189ad6", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x804)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xb)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000340)=0x8, 0x4)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000480))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000778000/0x1000)=nil, 0x1000}, 0x6})
pwritev2(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x7fffffff, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e)
syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @mcast1, [@routing={0x4, 0x0, 0x2, 0xa3}], "42a475f32cd1fdc8"}}}}}}}, 0x0)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

2m39.010197052s ago: executing program 3 (id=192):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x1}, {0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x2000, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, [0x0, 0x8001]})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b0000"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
write$dsp(r6, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f", 0x7d)
read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x22020400)

2m37.062524587s ago: executing program 3 (id=198):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000010000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b80"], 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_clone(0x4898d311, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1000, &(0x7f000000d000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m35.668961856s ago: executing program 3 (id=204):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket(0x1d, 0x2, 0x6)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
socket$inet(0x2, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x7, 0xfffffffd, 0x100000}})
syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001480)={0x2020}, 0x2020)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

2m34.365739676s ago: executing program 1 (id=209):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$vim2m(0x0, 0x10000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x0, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r5, 0x29, 0x2, 0xed, 0xd0, 0x4e, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0x2, 0xffffffff}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', <r6=>0x0, 0x1, 0x40, 0x1, 0x9, {{0x2c, 0x4, 0x1, 0x2, 0xb0, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x54, 0x48, 0x1, 0x7, [{@rand_addr=0x64010101, 0x9}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0xa9, 0x0}}, {@multicast2, 0x10}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}, {@multicast2, 0x2}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}]}, @end, @generic={0x88, 0xc, "6a3900c6cf2e462eaabe"}, @lsrr={0x83, 0x2b, 0x23, [@remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x5, [0x10001, 0xfffffffc, 0x1]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x85010480}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="180328bd7000fddbdf250b00000060000180140002006d616376746170300000000000000000080003000200000014000200697036746e6c3000000000000000000014000200766c616e310000000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400018008000100", @ANYRES32, @ANYBLOB="0100000000000000e775e332385a02637ccaefc7c170969cd7c66dbd9476359b2bff77283ff6134c13359cb20f068bd66eba0c0f677d591a1f042a3b83c837738a12945f713891c1c3af783f2b26536db4e25a1a0b40eee050fb8884e4b06d671ed096c39950d668f6db2df311991d61eb3564e95134af28d5ae262b5b1d1beae0a43874e0297b35bfcdfae85efce8838a41ee8336df"], 0x88}, 0x1, 0x0, 0x0, 0x4048001}, 0x0)
r7 = dup(r4)
r8 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r8, 0x7741, 0x0, 0x52, 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000fc0)={0x2020}, 0x2020)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x1401, 0x7fc32be5eb343aa7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4044000)

2m34.049651132s ago: executing program 3 (id=210):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000000000000000000102030119240000014ee5b1f709040500000000000000210900000122a303090581030800059f0709b602030800080608"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x8, 0x5, 0x1, 0xff, 0x6}, 0x126, &(0x7f0000000080)={0x5, 0xf, 0x126, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x41, "ad6b8b098f96c56294a52c51b932f6c6"}, @generic={0xfe, 0x10, 0x1, "66000d776477826cc89650360749d85fd2e54528b600eaf43b3f5e6eee7cc5091219427fe8b38eab962c95fc6ea3e4850290f4353887ccc1fea468dc8b9ea2af9d7aa0d7f1c8a3f73f11962a1bca23de465c72ce073d9127bfa78e9bdf1df5946afc07eb23da1a0790953bce15a5516aa86bf377a785bfb3acf24cbe3b7e480c2bf59455170f7004164a3f9364b019ed4d406453bdff498ff72dbd705e7e55dba0ed004f9921b56620e72375562e16af87270fce6a78380ae612c4f22c3f864a37a3a41f8c728377badb31147dae6db660e63c42e35326fea7c8ae534a2943e3031f86227f55924c51202447e67c669d9e851ad38506364af40e4a"}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xffff, 0xf00f, 0x4}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1004}}]})
syz_open_dev$video4linux(&(0x7f0000000300), 0x7, 0x8000)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x4002}, 0x90)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {0xd, 0xfff2}, {0x5, 0x10}}, [{0x8, 0xb, 0xb9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x5, 0x4, 0x2000, 0x0, 0x10, 0x0})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

2m33.290417079s ago: executing program 1 (id=213):
syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000334}, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231", 0xc5}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

2m33.09514482s ago: executing program 1 (id=215):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = userfaultfd(0x80001)
set_mempolicy(0x4005, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x4000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})

2m31.455534054s ago: executing program 1 (id=221):
r0 = epoll_create(0x80)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0xb6)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
socket$kcm(0x2, 0x5, 0x84)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$lock(r6, 0x25, &(0x7f00000002c0))
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCADDDLCI(r7, 0x5452, &(0x7f0000000100)={'veth1\x00'})
r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
preadv(r8, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0)
sendfile(r3, r6, &(0x7f00000000c0)=0x7, 0xc)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x3f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

2m30.274397369s ago: executing program 1 (id=225):
syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000334}, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231", 0xc5}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

2m30.093118112s ago: executing program 1 (id=227):
socket$unix(0x1, 0x5, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x163f42)
r2 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x5, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)=':.+{\x00', &(0x7f0000000080)='^\x00', 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x20, 0x3, 0x11, 0x1, 0x0, 0x2, 0x0})
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r3 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000040))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
fcntl$addseals(r3, 0x409, 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40094)

2m18.907496161s ago: executing program 32 (id=210):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000000000000000000102030119240000014ee5b1f709040500000000000000210900000122a303090581030800059f0709b602030800080608"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x8, 0x5, 0x1, 0xff, 0x6}, 0x126, &(0x7f0000000080)={0x5, 0xf, 0x126, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x41, "ad6b8b098f96c56294a52c51b932f6c6"}, @generic={0xfe, 0x10, 0x1, "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"}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xffff, 0xf00f, 0x4}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1004}}]})
syz_open_dev$video4linux(&(0x7f0000000300), 0x7, 0x8000)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x4002}, 0x90)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {0xd, 0xfff2}, {0x5, 0x10}}, [{0x8, 0xb, 0xb9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x5, 0x4, 0x2000, 0x0, 0x10, 0x0})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

2m14.887636523s ago: executing program 33 (id=227):
socket$unix(0x1, 0x5, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x163f42)
r2 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x5, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)=':.+{\x00', &(0x7f0000000080)='^\x00', 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x20, 0x3, 0x11, 0x1, 0x0, 0x2, 0x0})
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r3 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000040))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
fcntl$addseals(r3, 0x409, 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40094)

10.764212498s ago: executing program 6 (id=701):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x2973, 0x604, 0x1, 0x4000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

10.763015105s ago: executing program 4 (id=702):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (fail_nth: 4)

10.694171298s ago: executing program 2 (id=703):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)

10.249025365s ago: executing program 4 (id=704):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d03, &(0x7f0000000000))

10.125481839s ago: executing program 4 (id=705):
socket(0x40000000015, 0x805, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180000007a000106000000000100000007ffffffa6000000828f40bbaa0189ec95d8e9357e624fa5cfcd97e630b574e8f711727dfe70d8bf611581d0924b86b4109f894ee8bff61ce898fbd045c568bec15f687eddb715bcc94362396ca5d4c55f75c35c3ebb00495ee0b39cb7c5f9bf1afcedf10654181ccbb2e3c99b9397b9199a27af4d24277adcab28c2b66c0e48abbfda23a0af88f52d1d513a207786ca6ef580816850553d68e8eecfb0d928777afa06f10952c66f0e2cf4c657d976"], 0x18}], 0x1}, 0x0)

10.075567944s ago: executing program 2 (id=706):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = memfd_secret(0x0)
fchownat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xd80}}, {{{0x9, 0x5, 0x81, 0x3, 0x2f7717a91a6545f2, 0x7, 0xf7, 0xb}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xd, 0x7, 0x0, 0x10, 0x2}, 0x72, &(0x7f0000000200)={0x5, 0xf, 0x72, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x23, 0x0, 0xfffd, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x7ff8001, 0x7800, 0x40, [0x3f, 0xffc0, 0x21, 0xe2aa8eb817ae7666, 0x15b4a88f1f5e418e, 0xff]}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x4000000, 0xff00, 0x1, [0x0, 0x3f0f, 0x0, 0xc0, 0xff3f0f, 0xd5536fc64bab1bdd]}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x9, 0xff00, 0x6, [0x3f30]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x9, 0x1}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x459}}]})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCFLSH(r2, 0x540b, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)={0x7, {0x3, 0x401, 0x200, 0x6}})
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@setlink={0x30, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8060, 0x710}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x30}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000f0000000bf4c231f941"], 0x0}, 0x0)
r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x17, 0x5}}, 0x20)

9.842315128s ago: executing program 6 (id=707):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x3, 0xdb, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x8, 0x90, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xf}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0xffff, 0x3}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0xf, "a297981df4"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x4, 0x1, 0x80}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x9, "ce"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x2, 0x5, '\fW'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x6, 0x3, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x22, 0x1, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x88, 0x1, 0xb2, {0x7, 0x25, 0x1, 0x6bcfbb6864958465, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "716340ad"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x4, "4e7de3"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x0, "", "b4f4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x81, 0x7, {0x7, 0x25, 0x1, 0x3, 0x4, 0xfffa}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x48, 0x5, 0x3f, 0xff, 0x4}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x7, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3a, 0x4, 0x3ff}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "62e037bb7badf9828bc65587c890271c"}]}, 0x7, [{0x61, &(0x7f0000000240)=@string={0x61, 0x3, "7dc3ff1a2497b2bdd7188cf5e504d88aaeae23f6a6e9ae1b62e1f2ba37eba062f35a6d5d24de06f86e127a14ce68d9efb46a297a53dec97cbb058b1b5da86d095c364c735726bbf21c35736cc54b4ea776805ca941ef5beba152145d88f848"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44a}}, {0xbc, &(0x7f0000000300)=@string={0xbc, 0x3, "d2652ebbdae634d7b1183fc8cab07511e9f1a3d6da7937d14311b423faafb1041f8e205e4e80c387fea9cbe4e1343053e051b65dd541c79fb973c8e180b0268789c52acb30ebc887083d39513b52cb437a3c97cc046b10a83295435ff25abc4f796fec0d3680bdbe2e33d7c8f013e171d6a27cd5328a133df4f0c43d0d784b6da22c8b6ee9821c033d7e67df475395a882a6decd00520385273c7743c25a0fb1eac0f0d35c7651d922f0b1dee2b34df49439e9b5ee9186d02e73"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0a}}, {0x66, &(0x7f0000000480)=@string={0x66, 0x3, "a76aea5a62a5b87bd8d3bfdb3992172dc4e924807b9d67cdf3f62df29ea93a4b7a2f924e7b2963a65b2f604a889feafbdec55bbfd7eb03e4a7ceec39f6b5dae78859f25fff414a10fcb9911e0e743dbf81f6de2c45ddbf3f20b92ff4535b067c1690d47a"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1407}}]})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000000b0f0667"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, &(0x7f0000000840)={0xc, &(0x7f0000000640)={0x20, 0x10, 0x88, {0x88, 0x7, "a6a2bf6bd2c50d978596d50a9e31d8de2a39dde0465e4cccdd29ad06c6ec7d2f37ea7374fc53afa05aed154948bea76f01c68f18e78b3f9c42db5a3e32a0ada8dd10a93079d858513bae2d16d5a039c2cbfd3c66e49ac8470d3b3ea7b7735908e41481f650bb7c91dc3f052c4c1c9e4c52b64914bfb7849c17677cc2693f13dd7b457c4536df"}}, &(0x7f0000000700)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000980)={0x40, 0xe, 0xc2, "c84854628f93ae1dd3282abe7e316e7e5c355b6363866b34c4daf8e9fb5a050e061009652554ac056185ccf97a4ed02310b837c4ea6d8b87ae6297e55f1e0cdb88a9afd185ab0faf91c9c0182ee7ec53373135d90f8f9207ada8fe0ca1cd919c0a5a54394e035066160cebaf3e36fdc3f7c1b096a73ea21ebf49e42108686b4e86b2e3b94872f949ef178b2c48852afa799161867cd02c23930d93573eb6d954f780fe60d7b73c366aaf987271ac70f2d1d4367e012de40daa8c7888f8dda3a17171"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xc2}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a80)={0x20, 0x0, 0x97, {0x95, "bd3466bad18f0a06eeb2b512045dc15bd8de3e58ed4653ee6689c9986c228865e7d96179a5e4a518771b49b670460dadb908c3dbcb8476db7f548f060af65f2a02c855791b108f0e5947787cba9bdd12d7bc8e4f4946d049a478ece14d0c3c5681c3a1febcaa998bb0ffebe78a8c7ba003fe4b07cc2aa8cec5e7dfbf19a4d56a718d819831f04a40d80b2f00e9815062e08e3d9f14"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0x7f}})
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)={0x0, 0x31, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

8.605100536s ago: executing program 4 (id=713):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async)
clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) (async)
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109029400030109d0050904000000010100000a240105000902010211240605040502000200030006000200030824070602000fd90c240701050006fee6bc1be9090401000001020000090402010101020000090501ef0f0008260507250104000700090402"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

8.426292653s ago: executing program 2 (id=714):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$vim2m(0x0, 0x10000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x0, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', <r6=>0x0, 0x1, 0x40, 0x1, 0x9, {{0x2c, 0x4, 0x1, 0x2, 0xb0, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x54, 0x48, 0x1, 0x7, [{@rand_addr=0x64010101, 0x9}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0xa9, 0x0}}, {@multicast2, 0x10}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}, {@multicast2, 0x2}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}]}, @end, @generic={0x88, 0xc, "6a3900c6cf2e462eaabe"}, @lsrr={0x83, 0x2b, 0x23, [@remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x5, [0x10001, 0xfffffffc, 0x1]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x85010480}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="180328bd7000fddbdf250b00000060000180140002006d616376746170300000000000000000080003000200000014000200697036746e6c3000000000000000000014000200766c616e310000000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400018008000100", @ANYRES32, @ANYBLOB="0100000000000000e775e332385a02637ccaefc7c170969cd7c66dbd9476359b2bff77283ff6134c13359cb20f068bd66eba0c0f677d591a1f042a3b83c837738a12945f713891c1c3af783f2b26536db4e25a1a0b40eee050fb8884e4b06d671ed096c39950d668f6db2df311991d61eb3564e95134af28d5ae262b5b1d1beae0a43874e0297b35bfcdfae85efce8838a41ee8336df"], 0x88}, 0x1, 0x0, 0x0, 0x4048001}, 0x0)
r7 = dup(r4)
r8 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r8, 0x7741, 0x0, 0x52, 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000fc0)={0x2020}, 0x2020)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x1401, 0x7fc32be5eb343aa7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4044000)

7.54888196s ago: executing program 5 (id=715):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x200, 0x70bd25}, 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x4008840)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r5 = inotify_init()
fgetxattr(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
preadv(r4, &(0x7f0000010540)=[{&(0x7f0000010680)=""/222, 0xde}], 0x1, 0x0, 0x0)
r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0xff7fffff, 0x2}, 0x3)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r10 = getpid()
sched_setscheduler(r10, 0x2, 0x0)
r11 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)

7.546135253s ago: executing program 0 (id=725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x1a, 0x100, 0x0, 0x25dfdbfe, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000400)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00 '])
read$FUSE(r3, &(0x7f0000006280)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x400, 0x103)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x1000005, 0xfffe, 0x2, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x8000000001, {0x1, 0x200000000000, 0x100000000, 0x8, 0xc7, 0x8, {0x5, 0x6, 0x2, 0x6, 0x3917, 0xb95, 0x2, 0x3fffa, 0x4, 0x8000, 0x8001, r5, 0x0, 0x2, 0x3ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r7, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'syz_tun\x00'}, {0x20, '/dev/adsp1\x00'}, {0x20, 'ethtool\x00'}, {}], 0xa, "53cd7b750b347a0c6d76b02f7405857d056811c46c05910a2dbaca699af8dee69f9deb54ea048baaa1d4ade739bb742961838817700ded0dfb896710a4ab87b6f22851bf92f3727831b9a92c4619d991fe68500047a3e5756585dff8bfa04bb5b99f84361ac842786069fc9bc20d18ab753859"}, 0x9d)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, r8, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x4048086)
r9 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r9)
sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="230200000000000000000300000008000200050000001400010000ed"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xa800)
sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r10, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x0, 0x6]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000))
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f00000001c0)={@hyper, 0x4})

7.424802974s ago: executing program 6 (id=716):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x1}, {0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x2000, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, [0x0, 0x8001]})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b0000"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
write$dsp(r7, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f", 0x7d)
read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x22020400)

7.118000533s ago: executing program 2 (id=717):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x8000000000000002, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0xc, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x2000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0xf507, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac1a, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x8000000000000000, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0xdbe]})
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESHEX], 0x0)
syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESDEC], 0x1c}}, 0x0)
r6 = openat$urandom(0xffffff9c, &(0x7f0000000000), 0x180, 0x0)
ioctl$RNDADDTOENTCNT(r6, 0x40045201, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d03, &(0x7f0000000000))

6.863397991s ago: executing program 0 (id=718):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[])
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00')
writev(r5, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xc2)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="011101e1000000002c010069f97302ac7370616e0000001800028008001500fca70e0004001200050016000100000026b1a0aed58f80832d501146721631f2b6cd735f66b157db3cde7ac7db612dc501ce8692a4fabd0da0a780f4f00c4b895dadf5d7b48afe586f6b21076063c03181f3ab1aba55ccbfb6dd884c21c2ad3479d71278a41ce3e1c5f93818a0adecdb23c4eb686fe14f39d0bbe0dca287e895f0b2683d0af8e5a61c7187832277c5ec09f79b53f6b1ffdba0bbe9916da26f45a20d89416d"], 0x4c}}, 0x0)

5.249010225s ago: executing program 5 (id=719):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00')
writev(r6, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1)
r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r6)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xc2)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="011101e1000000002c010069f97302ac7370616e0000001800028008001500fca70e0004001200050016000100000026b1a0aed58f80832d501146721631f2b6cd735f66b157db3cde7ac7db612dc501ce8692a4fabd0da0a780f4f00c4b895dadf5d7b48afe586f6b21076063c03181f3ab1aba55ccbfb6dd884c21c2ad3479d71278a41ce3e1c5f93818a0adecdb23c4eb686fe14f39d0bbe0dca287e895f0b2683d0af8e5a61c7187832277c5ec09f79b53f6b1ffdba0bbe9916da26f45a20d89416d"], 0x4c}}, 0x0)

5.02396201s ago: executing program 4 (id=720):
r0 = socket(0x200000000000011, 0x80000, 0x80000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_connect(0x0, 0x48, &(0x7f0000000400)=ANY=[@ANYBLOB="120100003d36d840890457e0d65600000001090236000300000000090400ff0145f7270009050900000000000009040000000c15e7000904"], 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008604"])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r7, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8932, &(0x7f0000000380)={'bridge_slave_0\x00'})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x11c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xfe, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xbc, 0x1, @device_b, 0x0, @value=@device_b, 0x9, 0x8, @broadcast, 0x7}}, @random_vendor={0xdd, 0xb4, "1b99b3f035c1574d26b81ae4c54bbd0aab9317a3c4ea1a5deaa680da872ee1651b4348732bec5502a9bb9e50c2487a5bd5ca4b562591712e518c87ddc0a65e409ee2e3792517b6d52470d1b1d92bb02483cac74244d4c4cb2c8919a9345b41cf26fda09c421ef190708d10d4c3c5c3ada7054be01635e4c67b825e5d88cb7465994359cc3dcc659b2f4b9bd927fd5b05e16d84970cfa1486634b207c80261887b53b5bf9a949cc46f076a2901d0266e97fea8c38"}, @peer_mgmt={0x75, 0x6, {0x1, 0x9, @val=0x3, @void, @void}}, @channel_switch={0x25, 0x3, {0x0, 0xb8, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x44060}, 0x20040)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000540001002abd7000ffffffff07000000", @ANYRES64, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', r4, 0x10, 0x60, 0x80, 0xc79d, {{0x1f, 0x4, 0x1, 0x3c, 0x7c, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @multicast1, {[@noop, @generic={0x82, 0x5, "7ef7b2"}, @cipso={0x86, 0x5b, 0xffffffffffffffff, [{0x0, 0x9, "19eb321246dbb0"}, {0x7, 0x5, "c68315"}, {0x5, 0xe, "a6bc77d8caee16f369543fdf"}, {0x5, 0x8, "6aebeae40185"}, {0x6, 0x4, "e495"}, {0x5, 0xe, "9a3a020b36449b198035d2be"}, {0x1, 0xd, "21b92c5c05251f38ca04c0"}, {0x5, 0x5, "8c4b3f"}, {0x0, 0x3, 'h'}, {0x6, 0xa, "a9ab0c39d819e208"}]}, @ra={0x94, 0x4, 0x1}]}}}}})

4.687080071s ago: executing program 6 (id=721):
socket$inet6_icmp_raw(0xa, 0x3, 0x87)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18f4ff0000000000ffff00", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000000000010b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2025)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket(0x1, 0x803, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a0000", @ANYRES32=r6], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

4.326913158s ago: executing program 0 (id=722):
syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000334}, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

4.16040194s ago: executing program 0 (id=723):
unlink(&(0x7f0000000140)='./cgroup\x00')
openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x800, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$fuse(0xffffff8c, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50)
r4 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x40000, 0x1, 0x17}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
statx(r4, &(0x7f0000000000)='./file0\x00', 0x2000, 0x40, &(0x7f00000004c0))
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000007100)={0x78, 0x0, 0x0, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0xf2, 0x0)

3.120038895s ago: executing program 2 (id=724):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0)
getdents(r2, &(0x7f0000000000)=""/22, 0x32)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getdents(r2, &(0x7f0000000300)=""/233, 0xe9)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x16, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0\x00', 0x2e, 0x309080, 0x12345})
r6 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0)
close(0x3)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0)
io_uring_enter(r3, 0x7368, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r8, 0x84, 0x19, &(0x7f0000000000)="020000000980ffff", 0x8)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0xe, &(0x7f0000ffc000/0x3000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="90cdc2e5b365e22f617203322a4957b2c3094ae9e4d0fb8420273964f73a8603aecb7ccf8ecc1e4a073d18daa79972590cdd42bbdc6d29794c2064bc52eaefbe77035ce14be26e17fdcc9c4ccc90d5c9dfb55b1f65b73904dcc05acdf7e5825ee130e4d837217a814d", 0x69}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000001000000010000006cdbdb983c44c278d442000000000000000c737c08ca69bb4a853f"], 0x10}, 0x20040001)

3.070887796s ago: executing program 5 (id=726):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg$unix(r3, &(0x7f0000001040)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000002c0)=""/177, 0xb1}, {0x0}, {0x0}], 0x4}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/218, 0xda}, {0x0}], 0x7, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/51, 0x33}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/43, 0x2b}], 0x4, &(0x7f0000000d00)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x11c}}, {{0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x50}}], 0x4, 0x2163, &(0x7f00000010c0)={0x0, 0x3938700})
r4 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140))
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3f36, &(0x7f0000001100)={0x0, 0xdcde, 0x8, 0x1, 0x35, 0x0, r4}, &(0x7f0000003200), &(0x7f0000003240))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendfile(r7, r6, 0x0, 0x17)
fsmount(r1, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20401, 0x30)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x9, 0x0, 0x4, 0x722}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)

2.385715603s ago: executing program 6 (id=727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1485997a45579c9626ef532d000000000a05000000000000000000010000002c000000030af2020000000000000000010000000900010073797a30000000000900030073797a30000000001c000000060a010400000000000000000100000008000b4000000000140000001100010000000000000000000000000a673597461fd22b99e941c2c0c0bd06b0417e1e9e75007e1fd64e4c2b8bb8bc99dcd2e60b394b21a7efa3ae5a59a58da04a075f19110ecec10f5ea5a50d8eaa"], 0x84}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x40}, 0x40008d0)
sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001080)=@newchain={0x12a4, 0x64, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0x6, 0x2}, {0xfff1, 0xd}}, [@f_rsvp6={{0xa}, {0x224, 0x2, [@TCA_RSVP_ACT={0x220, 0x6, [@m_ct={0x124, 0x12, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0xf1, 0x6, "c653b7c4dce43a7664adc605271875a329aa4e6221bda702afb5678a2eb9b9c738b571214123557b568f11ee57d1b80efd9b8055f026705c6dc108b1a75d70d0fd0108b829687bc56cee17efae87e1a2481e50e76b33d41cd40f5950b4cd0a55dbf94c02c44cead5601ebe1d0100af3c7b07c5f567c3fe921fdfd2361d94f295377391f399b0777ec9268183c8ac1ff0105f8ee876bab651d809cba93a329695bfafb10336ac236dd3f29b782c411b0d670c9acd41a43fd08ef44bf6320a6a635af3a2aa1ebf8a171c233b8913c89cb8db4c7c31ec2b817091fee60c6985080a48c8e242a79fbe0b411e0d7ee8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x74, 0x10, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x6, 0x7, 0x4, 0x1000}, 0x7}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x401, 0xcff, 0x7, 0x2, 0x4800000}, 0x4}}]}, {0xd, 0x6, "4e6874dedc6e251856"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x84, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x57, 0x6, "5fda818c2aa7134864694c4b711eb3d580d6577121adc3db16b2b71ab35104c3e5d48773d054a5a9a7a04805000000d939db9f94a0465dca721b434879270570ee5cf858032d7ce5e6d30b0b785ab872726ef3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @f_tcindex={{0xc}, {0x1044, 0x2, [@TCA_TCINDEX_POLICE={0x1038, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x4, 0x0, 0x3, 0x7ff, 0x100, 0xff, 0xc, 0x80000000, 0x9, 0xc282, 0x2, 0x93f, 0x67e6, 0x8, 0x8, 0x465, 0x8, 0x3, 0x80000001, 0x80, 0x7, 0x0, 0x0, 0x91fd, 0x8000, 0xfffffff8, 0xc011, 0xe7e, 0x0, 0x9c, 0xfffffffa, 0x1, 0x6, 0x4, 0x2, 0x3, 0x9, 0x80000000, 0xfffeffff, 0x7, 0x1, 0x7, 0x9, 0x1, 0x5, 0x9, 0xe9, 0x8, 0x5, 0x1, 0x3ff, 0xc, 0x3, 0xdaf2, 0x9, 0x0, 0x4e84, 0x8, 0x0, 0xb32d, 0x2, 0x6, 0xb, 0x1ff, 0x9c18, 0x8e7, 0x8, 0x4, 0x81, 0x5, 0xfffffffb, 0x9, 0x9, 0x1, 0x1, 0x80, 0x3, 0x9, 0x6, 0x2, 0x3, 0x2c, 0x8, 0x1c19, 0xa0c2, 0x7, 0xb, 0x401, 0xbb, 0x80000001, 0xfffffffd, 0x8, 0x786, 0x9, 0x4, 0x1, 0x10000, 0x7fff, 0xc0c, 0x1, 0xfff, 0x225087de, 0x100, 0x7f, 0x3, 0x9000000, 0x8, 0x0, 0x8, 0x6, 0x3ff, 0x6, 0x8664, 0x6, 0x756, 0xff, 0x5, 0xfc, 0x9, 0x226a, 0x8, 0x35, 0x645, 0xfffff361, 0x2, 0x2, 0x3, 0x6, 0x8a, 0x5, 0x9, 0x5, 0x1, 0x5077, 0xff, 0x8, 0x7, 0x100, 0x7f, 0x5, 0x8, 0x4, 0x7df, 0x1, 0xffffffff, 0x3c52, 0x4, 0x0, 0x3, 0x401, 0x200, 0x6, 0x7, 0x2, 0x0, 0xd, 0x4, 0x8000, 0xffffff01, 0x2f9f, 0xf48, 0x9, 0x40000, 0xd5, 0x3, 0x4, 0x0, 0xffffa1ba, 0x8, 0x7, 0xa, 0x1, 0x80000000, 0x6, 0x1ff, 0x9, 0x3, 0xc66, 0x4, 0x6, 0x6, 0xe86, 0x200, 0x2, 0x8, 0x2, 0x8, 0x5, 0x1974, 0x4, 0x200, 0x1000, 0x41cf, 0x3, 0x5, 0x3, 0x0, 0x8, 0x8, 0x9f9f, 0x6, 0x3, 0x4, 0x2, 0xeb5a, 0xfffffff7, 0x5, 0xfe000000, 0x2, 0xd, 0xb2, 0x9, 0x0, 0x9, 0xc707, 0x7, 0x9, 0xa1, 0x2, 0x25954f29, 0xffffffff, 0x50000, 0x80000000, 0x7b8b, 0xa74, 0x6, 0x112, 0xfffffffc, 0x86c, 0x3, 0x2, 0x3, 0x5, 0x9, 0x6, 0x9, 0x8, 0x3dbd, 0x6, 0x4, 0x5, 0x6c, 0x52ea, 0x0, 0x94, 0x9, 0x8000, 0x2, 0xffff, 0x2, 0x1000, 0xa80, 0x1, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x31c, 0x0, 0x8, 0xe, 0x1400, 0xfff, 0x8001, 0xffffffff, 0x18, 0x517b, 0x0, 0xfffffff9, 0xfffffffc, 0x9, 0x1b44ba05, 0x2, 0x1, 0x7, 0x3, 0x2, 0x9886, 0x6d8, 0x1, 0x6, 0x1, 0x7, 0x3, 0xa815, 0x1, 0x227e, 0x4, 0x0, 0x74172993, 0x0, 0x5, 0x1887d1ce, 0x9, 0x9, 0x4, 0x6, 0x65cf, 0x2, 0x200, 0x5, 0x5, 0x800, 0x7, 0x8, 0xfffffffd, 0x7ff, 0x6, 0x8, 0x9, 0xffffffff, 0x6, 0x4, 0xa, 0xfda4, 0x4, 0x1, 0x8a, 0x4ee7, 0xb, 0x7fff, 0xfffffffa, 0x7, 0x6, 0x0, 0x8, 0x0, 0x41, 0xfffffff8, 0x5, 0x1, 0x9, 0x6, 0xfffffffd, 0x9115, 0xc95f, 0xfffffff2, 0x7, 0xfffffff3, 0x9, 0x3, 0x2, 0x5, 0x9, 0x7, 0xe03b, 0x3, 0xe5, 0x390, 0x9, 0x2, 0x3, 0x9, 0x5, 0xf1b9, 0x9, 0x9, 0x100, 0x0, 0x5, 0x7, 0xb2, 0x5, 0x80000001, 0x677be825, 0x28000000, 0xb7, 0x4, 0x3, 0x4, 0xa75, 0xff, 0xfffffffc, 0x4, 0x0, 0x3, 0x7, 0x8, 0x8, 0x699, 0x9, 0x6, 0xc5, 0x7, 0x6, 0xa, 0xa12, 0x1ff, 0x4, 0x4, 0x5, 0x3, 0xe, 0x1, 0x2, 0x3, 0x4, 0x61, 0x2bf6, 0xdb, 0x9, 0x8, 0x4a0, 0x8, 0x5, 0xfffffffd, 0xffff0001, 0x1a, 0x4787, 0x9, 0xa3d, 0x9, 0x8, 0x8001, 0x1, 0x0, 0x3, 0x3, 0x910a, 0x0, 0xd, 0x8, 0xe, 0x57, 0x3, 0x4, 0x0, 0x200, 0x7fff, 0x10000, 0xcff, 0x6, 0x53, 0x5, 0x9, 0x6, 0x9, 0x2, 0x3ff, 0x2, 0xfa5, 0x4d, 0x200, 0x1, 0x7, 0x5, 0x6, 0x1, 0x4, 0x1, 0x9, 0x6, 0xea3, 0x8, 0xfffffff4, 0x9, 0xcf66, 0x374, 0x101, 0x207, 0x2, 0x47, 0x9, 0xb, 0x9, 0xa, 0x0, 0x100, 0x9, 0x6, 0x3, 0x5, 0x8, 0x6591, 0x40, 0x82a, 0x1ff, 0x2, 0x9, 0x400, 0x0, 0x8001, 0x7, 0xa9e7, 0x1, 0x9, 0x7, 0x3d7f, 0x1b98, 0x0, 0x525e, 0x6, 0x8001, 0x9, 0x3, 0x2, 0xfffffff8, 0x9, 0xf, 0xa, 0x2, 0xf, 0x0, 0xf, 0x4, 0x7, 0x4, 0xfffffbe9, 0x9, 0x1, 0x10, 0xe]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80, 0xfff, 0x6, 0x2c8, 0x800, 0xfffffffc, 0x1, 0x1ff, 0x9, 0x9, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x7, 0x6, 0x80000001, 0x3, 0xffffff80, 0x100, 0x2, 0x3ff, 0x4, 0x8, 0x3ff, 0xe, 0x40, 0xc6d3, 0x7fffffff, 0x7d, 0xb, 0x9, 0x5, 0x2, 0x2, 0x3, 0xa269, 0x7fff, 0x7, 0x4, 0x4, 0x5, 0x7, 0x80, 0x9, 0x3, 0x10001, 0xfffffffd, 0x7, 0x9, 0x1, 0x5, 0x7fff, 0xfffffffa, 0x1dff746f, 0xac46, 0x1, 0x380, 0x4, 0x81, 0x5, 0x5, 0x8, 0x1ff, 0xa, 0x41d, 0x4, 0x9, 0x6, 0x6, 0x2, 0x3, 0x81, 0x100, 0xfffff001, 0x7ff, 0x7, 0x0, 0xffff, 0x7, 0x400, 0x3, 0x6, 0x80, 0xe, 0x705a, 0x401, 0x1, 0x0, 0x7ff, 0xfffffffa, 0x9, 0xfffffffc, 0x8, 0x9, 0x8, 0xfff, 0x49a7, 0x9, 0xffffffff, 0x1ff, 0xafda, 0x8, 0x1, 0x7, 0x0, 0x1, 0x9, 0x8bd, 0xb03, 0x81, 0xffffbffc, 0x7, 0x172, 0x2000, 0x5df, 0x4, 0xa, 0x80000001, 0x0, 0x7, 0x8, 0x91, 0xb8, 0x1, 0x8, 0x4, 0x7, 0x8221, 0x8, 0xc58, 0x0, 0x932c, 0x5, 0x2, 0x2, 0xe6, 0xffff, 0x7, 0x6, 0x1, 0x2, 0x8, 0x2, 0x90e, 0x6, 0x2, 0x80000001, 0x7, 0x8, 0x7fff, 0x5, 0xffffffff, 0x1, 0xfffffff5, 0x2, 0x3, 0x8d, 0x0, 0xabb, 0xe, 0x8, 0x9, 0x9f62, 0x8, 0xc7bf, 0x3, 0x9, 0x10000, 0xfffff999, 0x1, 0x9, 0x9, 0x8, 0x3ff, 0xf60d, 0x8, 0x3, 0x6, 0xfffffffa, 0x80000000, 0xe5df, 0x4, 0x7, 0x5, 0x6, 0x10, 0x6, 0x8001, 0xfff, 0x16e5963b, 0x4, 0x3, 0x0, 0x504, 0x7fff, 0x6, 0x6, 0x659, 0x8, 0x7, 0x0, 0xfff, 0x1, 0xf4, 0x5, 0x1, 0xdd61, 0xd958, 0x6, 0x9, 0x2, 0xff, 0x8001, 0x9, 0x6, 0x5, 0x34d3, 0x5eea2977, 0x0, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x9, 0x1, 0x6, 0x8, 0xb, 0xffff0001, 0x35afd91, 0x7, 0x400, 0xb, 0x0, 0x9, 0x6, 0x5ca, 0xd, 0xff, 0x4, 0x81, 0x1, 0x2, 0x2, 0x8, 0x251, 0xb32, 0xfffffffd, 0x0, 0x9, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x6, 0x9, 0xd9b, 0x8099, 0xa, 0xfffffffc, 0x6, 0x200, 0xca000000, 0x80000001, 0x0, 0x6, 0x9, 0x24d5, 0x7f, 0x7, 0x4, 0x1000, 0x4576, 0x74, 0x7, 0x3, 0x5, 0xe, 0xfffffffa, 0x1, 0x5, 0x2, 0x8, 0x7, 0x7, 0x100, 0x7, 0x9, 0x6, 0x1, 0x8, 0x39, 0x4, 0xf70, 0x3, 0x6868, 0x3, 0x404, 0x54, 0x4, 0x9, 0x2, 0x0, 0xb87, 0x4, 0x4, 0x1, 0x7, 0x880, 0x7fffffff, 0xe3400000, 0xffff, 0x9, 0x73ae, 0x8, 0x4, 0x81, 0xffffff5b, 0x5, 0xdb, 0x8, 0x1, 0x315d6d59, 0xad1, 0x3, 0x8, 0x8, 0x5, 0x4, 0x5, 0x9, 0x8, 0x9, 0x400, 0x6, 0x7f, 0x7, 0x8, 0x3, 0x8, 0xd, 0x2, 0x9, 0x2, 0x9, 0x6, 0xc, 0xfffffffd, 0x101, 0x3ff, 0x80000000, 0x6, 0x9, 0x4, 0x4, 0x335, 0x2, 0x1, 0x200, 0x101, 0x9, 0x5, 0x0, 0x2000000, 0x0, 0x2, 0x2, 0x80000000, 0x6, 0x8, 0x5, 0x4, 0x7, 0xffffffff, 0x2, 0x1, 0xfa2, 0x0, 0x3, 0x6, 0x4, 0xa, 0x2, 0x80000001, 0x101, 0x1, 0x8, 0x4, 0x4, 0x1, 0x1, 0x4340, 0xffffffff, 0x100, 0x8, 0x5, 0x2, 0x8, 0x188, 0x7, 0x2c2d, 0x3, 0x6, 0x0, 0x19, 0x4, 0xe50, 0x101, 0x8, 0xd, 0x7ff, 0x5, 0x6, 0x1, 0x0, 0x1000, 0x7, 0x1, 0x9, 0x2, 0x3, 0x29113f9d, 0x20, 0xff, 0x1, 0x5, 0x5, 0x2, 0x9, 0x1, 0x8, 0xe79, 0x1c, 0x4, 0x2, 0x8, 0x7, 0x8, 0x9, 0x8, 0xfffffeff, 0xff000000, 0x8, 0x5, 0x7fff, 0x8000, 0x8, 0x4, 0x4, 0x200, 0xc, 0x9, 0x34b, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x80000000, 0x2, 0xe, 0x9, 0x200, 0x0, 0x7, 0x3, 0xfc, 0x6, 0x5, 0x10, 0x0, 0x7, 0x2, 0x81, 0x3, 0x6, 0x7, 0xbe58, 0x38, 0x4, 0x5, 0x1, 0x7f, 0x3aad, 0x7, 0x2, 0x8, 0x6, 0xc9, 0x6, 0x5f, 0x9, 0x10001, 0x6, 0x0, 0x7, 0x101, 0x5, 0x8, 0x7, 0xffff, 0x9, 0x2, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x5}]}}]}, 0x12a4}}, 0x0)
recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000340)=""/110, 0x6e}], 0x3, 0x0, 0x6e00}}], 0x1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140f0000000000007000fddbdf25010000000000"], 0x14}}, 0x0)
r7 = syz_io_uring_setup(0x2232, &(0x7f0000000280)={0x0, 0x2, 0x10b20, 0x0, 0x293}, 0x0, 0x0)
pwritev(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)="263fb1aabb6a7bfbd98c9ad3abfd6990cf48725b5b1d645242d862919c301a68c6bef46ac14e759c7e46ee1671b27ef8c9505f1561b4ec94670ae7f7f633d68a005caaa556b9a0507b223a2343f700a7eb26444c91654059342f130a1f2b619638794509c393630f64b54222477ce67181ad03564a212505c627894d", 0x7c}], 0x1, 0x7, 0x4)
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fffeffff0000000009000000950000eb8597ec399668feaaa4d8e15ada614a000000000060496802eff62d0923567c69a8935c2c803018bb66043d69cb3368149dee9a31cb1083e15512597ce04c9d92dfcc74c28736f9486aa42b555cf2f8d6efd3636b3afecde018231921ffb067bc85db93978ad4565a646db06d4495c9c7"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket(0x1, 0x803, 0x0)

1.5088838s ago: executing program 0 (id=728):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$vim2m(0x0, 0x10000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x0, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', <r6=>0x0, 0x1, 0x40, 0x1, 0x9, {{0x2c, 0x4, 0x1, 0x2, 0xb0, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x54, 0x48, 0x1, 0x7, [{@rand_addr=0x64010101, 0x9}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0xa9, 0x0}}, {@multicast2, 0x10}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}, {@multicast2, 0x2}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}]}, @end, @generic={0x88, 0xc, "6a3900c6cf2e462eaabe"}, @lsrr={0x83, 0x2b, 0x23, [@remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x5, [0x10001, 0xfffffffc, 0x1]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x85010480}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="180328bd7000fddbdf250b00000060000180140002006d616376746170300000000000000000080003000200000014000200697036746e6c3000000000000000000014000200766c616e310000000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400018008000100", @ANYRES32, @ANYBLOB="0100000000000000e775e332385a02637ccaefc7c170969cd7c66dbd9476359b2bff77283ff6134c13359cb20f068bd66eba0c0f677d591a1f042a3b83c837738a12945f713891c1c3af783f2b26536db4e25a1a0b40eee050fb8884e4b06d671ed096c39950d668f6db2df311991d61eb3564e95134af28d5ae262b5b1d1beae0a43874e0297b35bfcdfae85efce8838a41ee8336df"], 0x88}, 0x1, 0x0, 0x0, 0x4048001}, 0x0)
r7 = dup(r4)
r8 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r8, 0x7741, 0x0, 0x52, 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000fc0)={0x2020}, 0x2020)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x1401, 0x7fc32be5eb343aa7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4044000)

810.287675ms ago: executing program 5 (id=729):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3b, 0x2, 0x3, "1101b3288888d16d379d0000000000800400000000000f00", 0x56555959})

514.312732ms ago: executing program 2 (id=730):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = fsopen(&(0x7f0000000780)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\\\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x8, @mcast1, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000002c0)="7ebcf7cb646087460d3425a4f9a03dd9b331e178dd6ccd6356256d252c8cadce7463b42b8824739edc539702c269651fd9513dc10d546e0983bbdc4eb5dd849a64855ce69ea6946ab2dd0e5e475d13c5eaf42a4612d07204502d6868359794ff05570ce025aed2d8c6106304c4955c6087f84ceb0dd2ccb4d36723451f4a3b95d90676bbc1fbb676129b2a1ca976933662a87903706bd7c5d6a2af2db65dd16df2ff13a098e1", 0xa6}, {&(0x7f0000000400)="5a748bda7da3be0dee59c94debde3e547359b3d74375b7b9589f9145b8bc6167e2a54953108ff742b1b69bd09d41e923a9f7dd39adc190d8022bead940ddd37d82ad5e3fd48528dc8a74e06ff85fccb9015d914300d0b5e83662643285c05c7453a1707a061abc0a6f9e8c5211d08c78945b56bdb1d9828a743e99b6e347d97bd1d87d0cc18552825213810a32c0f9c28acade8e0f015009a2070f65ac83291ba7fbecd03835f1dcd4d9db7485537cecfb638535fe9156eecc74206011967e1303fde2d25141dc9803bba21995d700e9aa6953ceb879680c13", 0xd9}, {&(0x7f00000005c0)="110ed974fd203f992359ea5bc252c598a3f65c8af27f3f4c814d38964bb9658dc53b573775e77657ccd4a584ceb7915e59e0c7e8433bc7d47ec901b84c7b74d2e7b796e7a46824162c23987c", 0x4c}], 0x3, &(0x7f0000000640)=[@hopopts={{0x64, 0x29, 0x36, {0x0, 0x9, '\x00', [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x7, 0x8, [0xa72, 0x2, 0x30000000000]}}, @jumbo={0xc2, 0x4, 0x101}]}}}, @rthdr={{0x64, 0x29, 0x39, {0x84, 0xa, 0x943f01648a69e102, 0xe, 0x0, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}}}], 0xc8}, 0x40800)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14')
mlock2(&(0x7f0000a32000/0xe000)=nil, 0xe000, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000000000000080000800000000000000000050000000000000000000000000000000000000000000000000000004ce52632050000000e00000000000000dd0c00000200000000008100000000000000000000000000000000c00000000004000000000000000000000001000000000000000000000000000000000000000d00000008000000060000000c000000000000000a000000fe0700000000dc000000000000000000"])
syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x4b, 0xc6, 0xe5, 0x40, 0xaf0, 0x7501, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf8, 0x0, 0x0, 0xa9, 0x3b, 0xae}}]}}]}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)
landlock_create_ruleset(&(0x7f0000000080)={0x308, 0x0, 0x3}, 0x18, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[])

416.310168ms ago: executing program 5 (id=731):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000100)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5}, {0x76b48f433226e54c, 0x5, 0xe, 0x0, 0xcdd, 0x2, 0x10000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1, 0x8000000}, {0xd, 0x3, 0x6, 0xc, 0x0, 0xa, 0x7fe}]})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000054}, 0x40000)

151.284342ms ago: executing program 4 (id=732):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket(0x1d, 0x2, 0x6)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
socket$inet(0x2, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x7, 0xfffffffd, 0x100000}})
syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001480)={0x2020}, 0x2020)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

109.695629ms ago: executing program 0 (id=733):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x1}, {0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x2000, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, [0x0, 0x8001]})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b0000"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
write$dsp(r7, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f", 0x7d)
read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x22020400)

1.189537ms ago: executing program 5 (id=734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[])
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00')
writev(r5, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xc2)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="011101e1000000002c010069f97302ac7370616e0000001800028008001500fca70e0004001200050016000100000026b1a0aed58f80832d501146721631f2b6cd735f66b157db3cde7ac7db612dc501ce8692a4fabd0da0a780f4f00c4b895dadf5d7b48afe586f6b21076063c03181f3ab1aba55ccbfb6dd884c21c2ad3479d71278a41ce3e1c5f93818a0adecdb23c4eb686fe14f39d0bbe0dca287e895f0b2683d0af8e5a61c7187832277c5ec09f79b53f6b1ffdba0bbe9916da26f45a20d89416d"], 0x4c}}, 0x0)

0s ago: executing program 6 (id=744):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$vim2m(0x0, 0x10000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x0, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r5, 0x29, 0x2, 0xed, 0xd0, 0x4e, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0x2, 0xffffffff}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x85010480}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="180328bd7000fddbdf250b00000060000180140002006d616376746170300000000000000000080003000200000014000200697036746e6c3000000000000000000014000200766c616e310000000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400018008000100", @ANYRES32, @ANYBLOB="0100000000000000e775e332385a02637ccaefc7c170969cd7c66dbd9476359b2bff77283ff6134c13359cb20f068bd66eba0c0f677d591a1f042a3b83c837738a12945f713891c1c3af783f2b26536db4e25a1a0b40eee050fb8884e4b06d671ed096c39950d668f6db2df311991d61eb3564e95134af28d5ae262b5b1d1beae0a43874e0297b35bfcdfae85efce8838a41ee8336df"], 0x88}, 0x1, 0x0, 0x0, 0x4048001}, 0x0)
r6 = dup(r4)
r7 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r7, 0x7741, 0x0, 0x52, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000000fc0)={0x2020}, 0x2020)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x1401, 0x7fc32be5eb343aa7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4044000)

kernel console output (not intermixed with test programs):

e found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  145.295054][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.308772][ T5930] usb 3-1: config 0 descriptor??
[  145.316670][ T5930] cp210x 3-1:0.0: cp210x converter detected
[  145.586859][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'.
[  145.648657][ T5930] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  145.666092][ T5930] cp210x 3-1:0.0: querying part number failed
[  145.735194][ T5930] usb 3-1: cp210x converter now attached to ttyUSB0
[  145.875285][ T5930] usb 3-1: USB disconnect, device number 10
[  145.884618][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  145.892990][ T5930] cp210x 3-1:0.0: device disconnected
[  146.161820][ T6971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.248'.
[  146.923267][   T30] audit: type=1326 audit(1758388509.062:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.071639][   T30] audit: type=1326 audit(1758388509.062:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.116675][   T30] audit: type=1326 audit(1758388509.062:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.159675][   T30] audit: type=1326 audit(1758388509.062:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.200077][   T30] audit: type=1326 audit(1758388509.062:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.222218][   T30] audit: type=1326 audit(1758388509.062:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.246724][   T30] audit: type=1326 audit(1758388509.062:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.550742][   T30] audit: type=1326 audit(1758388509.062:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.614622][   T30] audit: type=1326 audit(1758388509.062:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.649864][   T30] audit: type=1326 audit(1758388509.062:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  147.702937][ T5235] Dev loop6: unable to read RDB block 1
[  147.719475][ T5235]  loop6: unable to read partition table
[  147.729543][ T5235] loop6: partition table beyond EOD, truncated
[  147.765171][ T6994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.261'.
[  147.979028][ T7002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.255'.
[  148.054766][ T7002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.255'.
[  148.212810][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.257'.
[  149.435261][   T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  149.587304][   T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  149.596574][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.607549][   T24] usb 3-1: config 0 descriptor??
[  149.616183][   T24] cp210x 3-1:0.0: cp210x converter detected
[  149.822969][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[  149.835870][   T24] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  149.843972][   T24] cp210x 3-1:0.0: querying part number failed
[  149.854290][   T24] usb 3-1: cp210x converter now attached to ttyUSB0
[  149.882720][   T24] usb 3-1: USB disconnect, device number 11
[  149.899644][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  149.924676][   T24] cp210x 3-1:0.0: device disconnected
[  150.078339][ T5235] Dev loop6: unable to read RDB block 1
[  150.084217][ T5235]  loop6: unable to read partition table
[  150.091482][ T5235] loop6: partition table beyond EOD, truncated
[  150.160546][ T7029] FAULT_INJECTION: forcing a failure.
[  150.160546][ T7029] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.175489][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.0.265 Not tainted syzkaller #0 PREEMPT(full) 
[  150.175511][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  150.175522][ T7029] Call Trace:
[  150.175529][ T7029]  <TASK>
[  150.175537][ T7029]  dump_stack_lvl+0x189/0x250
[  150.175561][ T7029]  ? __pfx____ratelimit+0x10/0x10
[  150.175579][ T7029]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.175598][ T7029]  ? __pfx__printk+0x10/0x10
[  150.175632][ T7029]  should_fail_ex+0x414/0x560
[  150.175661][ T7029]  _copy_to_user+0x31/0xb0
[  150.175683][ T7029]  simple_read_from_buffer+0xe1/0x170
[  150.175712][ T7029]  proc_fail_nth_read+0x1b3/0x220
[  150.175734][ T7029]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  150.175756][ T7029]  ? rw_verify_area+0x2a6/0x4d0
[  150.175782][ T7029]  ? __lock_acquire+0xab9/0xd20
[  150.175801][ T7029]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  150.175821][ T7029]  vfs_read+0x200/0xa30
[  150.175840][ T7029]  ? fdget_pos+0x247/0x320
[  150.175859][ T7029]  ? __pfx___mutex_lock+0x10/0x10
[  150.175878][ T7029]  ? __pfx_vfs_read+0x10/0x10
[  150.175900][ T7029]  ? __fget_files+0x2a/0x420
[  150.175920][ T7029]  ? __fget_files+0x3a0/0x420
[  150.175934][ T7029]  ? __fget_files+0x2a/0x420
[  150.175958][ T7029]  ksys_read+0x145/0x250
[  150.175981][ T7029]  ? __pfx_ksys_read+0x10/0x10
[  150.176005][ T7029]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.176026][ T7029]  __do_fast_syscall_32+0xb6/0x2b0
[  150.176045][ T7029]  ? asm_int80_emulation+0x1a/0x20
[  150.176061][ T7029]  ? do_int80_emulation+0x1f3/0x390
[  150.176083][ T7029]  do_fast_syscall_32+0x34/0x80
[  150.176102][ T7029]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  150.176120][ T7029] RIP: 0023:0xf706e539
[  150.176136][ T7029] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  150.176149][ T7029] RSP: 002b:00000000f545e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  150.176167][ T7029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f545e620
[  150.176179][ T7029] RDX: 000000000000000f RSI: 00000000f73f4ff4 RDI: 0000000000000000
[  150.176189][ T7029] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  150.176198][ T7029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  150.176208][ T7029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  150.176235][ T7029]  </TASK>
[  151.595312][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'.
[  151.707081][ T7043] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.718892][ T7047] vlan2: entered allmulticast mode
[  151.743316][ T7047] bond2: entered allmulticast mode
[  151.855849][ T7049] netlink: 44 bytes leftover after parsing attributes in process `syz.2.267'.
[  151.956588][ T7052] netlink: 72 bytes leftover after parsing attributes in process `syz.4.271'.
[  152.468188][ T5185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  152.477288][ T5185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  152.488260][ T5185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  152.499874][ T5185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  152.510757][ T5185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.630941][ T7058] chnl_net:caif_netlink_parms(): no params data found
[  153.699185][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.273'.
[  153.808456][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.811390][ T5235] Dev loop6: unable to read RDB block 1
[  153.819055][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.821440][ T5235]  loop6: unable to read partition table
[  153.829216][ T7058] bridge_slave_0: entered allmulticast mode
[  153.836061][ T5235] loop6: partition table beyond EOD, 
[  153.842620][ T7058] bridge_slave_0: entered promiscuous mode
[  153.843503][ T5235] truncated
[  153.851900][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.884977][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.912623][ T7058] bridge_slave_1: entered allmulticast mode
[  153.934613][ T7058] bridge_slave_1: entered promiscuous mode
[  154.015379][ T7058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.038391][ T7058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.163765][ T7058] team0: Port device team_slave_0 added
[  154.172640][ T7058] team0: Port device team_slave_1 added
[  154.203134][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.210156][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.237159][ T7058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.250281][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.255554][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  154.258548][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.290556][    C1] vkms_vblank_simulate: vblank timer overrun
[  154.297364][ T7058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.340424][ T7058] hsr_slave_0: entered promiscuous mode
[  154.348405][ T7058] hsr_slave_1: entered promiscuous mode
[  154.354421][ T7058] debugfs: 'hsr0' already exists in 'hsr'
[  154.360261][ T7058] Cannot create hsr debugfs directory
[  154.385148][ T5981] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  154.410608][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.422532][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  154.437385][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.453381][   T10] usb 5-1: config 0 descriptor??
[  154.552066][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.555799][ T5872] Bluetooth: hci5: command tx timeout
[  154.563518][ T5981] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  154.578716][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.588126][ T7058] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  154.595599][ T5981] usb 3-1: config 0 descriptor??
[  154.606347][ T7058] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.618674][ T7058] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.629770][ T7058] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  154.726501][ T7091] FAULT_INJECTION: forcing a failure.
[  154.726501][ T7091] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.749449][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.770845][ T7058] 8021q: adding VLAN 0 to HW filter on device team0
[  154.777820][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.4.278 Not tainted syzkaller #0 PREEMPT(full) 
[  154.777842][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  154.777852][ T7091] Call Trace:
[  154.777859][ T7091]  <TASK>
[  154.777866][ T7091]  dump_stack_lvl+0x189/0x250
[  154.777890][ T7091]  ? __pfx____ratelimit+0x10/0x10
[  154.777908][ T7091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.777927][ T7091]  ? __pfx__printk+0x10/0x10
[  154.777949][ T7091]  ? __might_fault+0xb0/0x130
[  154.777981][ T7091]  should_fail_ex+0x414/0x560
[  154.778009][ T7091]  _copy_from_user+0x2d/0xb0
[  154.778031][ T7091]  __sys_bpf+0x1ed/0x870
[  154.778053][ T7091]  ? __pfx___sys_bpf+0x10/0x10
[  154.778086][ T7091]  ? ksys_write+0x22a/0x250
[  154.778118][ T7091]  __ia32_sys_bpf+0x7c/0x90
[  154.778138][ T7091]  __do_fast_syscall_32+0xb6/0x2b0
[  154.778157][ T7091]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.778179][ T7091]  do_fast_syscall_32+0x34/0x80
[  154.778198][ T7091]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  154.778217][ T7091] RIP: 0023:0xf709e539
[  154.778232][ T7091] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  154.778245][ T7091] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  154.778263][ T7091] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000280
[  154.778274][ T7091] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  154.778284][ T7091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.778293][ T7091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  154.778303][ T7091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.778328][ T7091]  </TASK>
[  154.793589][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.965335][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.062721][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.069940][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.275382][ T7058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.405091][ T7058] veth0_vlan: entered promiscuous mode
[  155.452177][ T7058] veth1_vlan: entered promiscuous mode
[  155.540337][ T7058] veth0_macvtap: entered promiscuous mode
[  155.565316][ T7058] veth1_macvtap: entered promiscuous mode
[  155.709203][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.743895][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.787166][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.808401][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.850126][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.866888][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.011936][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.053052][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.107749][ T5185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  156.117378][ T5185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  156.125891][ T5185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  156.135363][ T5185] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  156.143657][ T5185] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  156.266562][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.286243][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.317228][ T5981] usbhid 3-1:0.0: can't add hid device: -71
[  156.344429][ T5981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  156.380938][ T5981] usb 3-1: USB disconnect, device number 12
[  156.490673][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  156.501319][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  156.523779][   T10] usb 5-1: USB disconnect, device number 7
[  156.639019][ T5185] Bluetooth: hci5: command tx timeout
[  156.706170][ T7101] syz_tun: tun_net_xmit 86
[  156.755887][ T7095] chnl_net:caif_netlink_parms(): no params data found
[  157.605688][ T7115] netlink: 44 bytes leftover after parsing attributes in process `syz.0.282'.
[  157.755072][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.755102][    C1] syz_tun: tun_net_xmit 86
[  157.822636][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.845362][ T7095] bridge_slave_0: entered allmulticast mode
[  157.853194][ T7095] bridge_slave_0: entered promiscuous mode
[  157.929549][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.948413][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.975138][ T7095] bridge_slave_1: entered allmulticast mode
[  158.010883][ T7095] bridge_slave_1: entered promiscuous mode
[  158.069526][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  158.069543][   T30] audit: type=1326 audit(1758388520.212:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.121428][   T30] audit: type=1326 audit(1758388520.212:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.152612][   T30] audit: type=1326 audit(1758388520.212:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.180864][   T30] audit: type=1326 audit(1758388520.212:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.230488][   T30] audit: type=1326 audit(1758388520.212:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.235153][ T5185] Bluetooth: hci6: command tx timeout
[  158.288739][   T30] audit: type=1326 audit(1758388520.212:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.316324][ T7095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.329000][   T30] audit: type=1326 audit(1758388520.212:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.357926][   T30] audit: type=1326 audit(1758388520.212:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.396331][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  158.420692][   T30] audit: type=1326 audit(1758388520.212:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.450099][   T30] audit: type=1326 audit(1758388520.212:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  158.450154][ T7095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.471923][    C1] vkms_vblank_simulate: vblank timer overrun
[  158.556474][ T5930] usb 6-1: Using ep0 maxpacket: 16
[  158.567775][ T5930] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  158.587947][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.754915][ T5185] Bluetooth: hci5: command tx timeout
[  158.755140][ T5930] usb 6-1: Product: syz
[  158.765637][ T5930] usb 6-1: Manufacturer: syz
[  158.775747][ T5930] usb 6-1: SerialNumber: syz
[  158.785225][ T5930] usb 6-1: config 0 descriptor??
[  158.794981][    C1] syz_tun: tun_net_xmit 86
[  158.802805][ T5930] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  158.825789][ T7095] team0: Port device team_slave_0 added
[  158.859938][ T7095] team0: Port device team_slave_1 added
[  159.232890][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.244609][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.276389][ T7095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.297586][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.304665][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.338622][ T7095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.625205][   T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  159.635964][ T7095] hsr_slave_0: entered promiscuous mode
[  159.647281][ T7095] hsr_slave_1: entered promiscuous mode
[  159.655462][ T7095] debugfs: 'hsr0' already exists in 'hsr'
[  159.661274][ T7095] Cannot create hsr debugfs directory
[  159.684086][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'.
[  159.701627][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'.
[  159.788637][   T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  159.799244][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.814461][   T24] usb 5-1: config 0 descriptor??
[  159.831727][ T5930] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71
[  159.857054][ T5930] usb 6-1: USB disconnect, device number 2
[  159.868304][   T24] cp210x 5-1:0.0: cp210x converter detected
[  159.985510][ T7137] netlink: 44 bytes leftover after parsing attributes in process `syz.0.289'.
[  160.072509][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'.
[  160.096597][ T7152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.294'.
[  160.112802][ T7152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.294'.
[  160.144031][   T24] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  160.166543][   T24] cp210x 5-1:0.0: querying part number failed
[  160.211880][   T24] usb 5-1: cp210x converter now attached to ttyUSB0
[  160.233182][   T24] usb 5-1: USB disconnect, device number 8
[  160.279331][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  160.301652][   T24] cp210x 5-1:0.0: device disconnected
[  160.315310][ T5185] Bluetooth: hci6: command tx timeout
[  160.411948][ T7095] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  160.467831][ T7095] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  160.531060][ T7095] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  160.605699][ T7095] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  160.640947][ T5235] Dev loop6: unable to read RDB block 1
[  160.665274][ T5235]  loop6: unable to read partition table
[  160.695260][ T5235] loop6: partition table beyond EOD, truncated
[  160.794854][ T5185] Bluetooth: hci5: command tx timeout
[  161.329450][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.412049][ T7095] 8021q: adding VLAN 0 to HW filter on device team0
[  161.443764][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.450934][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.467119][ T7176] netlink: 44 bytes leftover after parsing attributes in process `syz.2.296'.
[  161.536314][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.543496][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.839994][ T7095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.978290][ T7095] veth0_vlan: entered promiscuous mode
[  162.001087][ T7095] veth1_vlan: entered promiscuous mode
[  162.085982][ T7095] veth0_macvtap: entered promiscuous mode
[  162.128937][ T7095] veth1_macvtap: entered promiscuous mode
[  162.195919][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.213364][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.265116][ T4307] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.370194][ T4307] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.404827][ T5185] Bluetooth: hci6: command tx timeout
[  162.422131][ T4307] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.475963][ T4307] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.561765][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.309'.
[  162.951760][ T7206] 8021q: VLANs not supported on vxcan0
[  162.998107][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.006132][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.151367][ T7211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.316'.
[  163.241867][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.273584][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.574852][ T5937] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  163.884549][ T5937] usb 6-1: Using ep0 maxpacket: 16
[  163.903034][ T5937] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  163.924419][ T5937] usb 6-1: config 0 has no interface number 0
[  163.976740][ T5937] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  164.024921][ T5937] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  164.072623][ T5937] usb 6-1: config 0 interface 41 has no altsetting 0
[  164.551328][ T5185] Bluetooth: hci6: command tx timeout
[  164.613532][ T5937] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  164.744898][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.759351][ T7231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.312'.
[  165.147642][ T7232] fuse: Bad value for 'fd'
[  165.162368][ T5937] usb 6-1: Product: syz
[  165.172489][ T5937] usb 6-1: Manufacturer: syz
[  165.187394][ T5937] usb 6-1: SerialNumber: syz
[  165.198878][ T7215] netlink: 44 bytes leftover after parsing attributes in process `syz.4.307'.
[  165.240037][ T5937] usb 6-1: config 0 descriptor??
[  165.249391][ T7214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  165.270436][ T7214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  165.649702][ T7214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  165.710935][ T7214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  165.749567][ T5937] dm9601 6-1:0.41: probe with driver dm9601 failed with error -71
[  165.835665][ T5937] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71
[  165.901216][ T5937] usb 6-1: USB disconnect, device number 3
[  166.258265][ T7249] FAULT_INJECTION: forcing a failure.
[  166.258265][ T7249] name failslab, interval 1, probability 0, space 0, times 0
[  166.276287][ T7249] CPU: 1 UID: 0 PID: 7249 Comm: syz.2.320 Not tainted syzkaller #0 PREEMPT(full) 
[  166.276313][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  166.276323][ T7249] Call Trace:
[  166.276330][ T7249]  <TASK>
[  166.276338][ T7249]  dump_stack_lvl+0x189/0x250
[  166.276362][ T7249]  ? __pfx____ratelimit+0x10/0x10
[  166.276381][ T7249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.276399][ T7249]  ? __pfx__printk+0x10/0x10
[  166.276435][ T7249]  should_fail_ex+0x414/0x560
[  166.276463][ T7249]  should_failslab+0xa8/0x100
[  166.276487][ T7249]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  166.276509][ T7249]  ? __alloc_skb+0x112/0x2d0
[  166.276531][ T7249]  __alloc_skb+0x112/0x2d0
[  166.276553][ T7249]  skb_copy+0x188/0x800
[  166.276577][ T7249]  ? __copy_skb_header+0xa7/0x550
[  166.276603][ T7249]  tipc_buf_append+0x6f9/0x920
[  166.276628][ T7249]  ? __pfx_tipc_buf_append+0x10/0x10
[  166.276650][ T7249]  ? skb_clone+0x246/0x3a0
[  166.276673][ T7249]  tipc_msg_reassemble+0x230/0x3b0
[  166.276698][ T7249]  tipc_mcast_xmit+0x1f0/0x1850
[  166.276734][ T7249]  ? __pfx_tipc_mcast_xmit+0x10/0x10
[  166.276757][ T7249]  ? _copy_from_iter+0x24f/0x1790
[  166.276781][ T7249]  ? rcu_is_watching+0x15/0xb0
[  166.276804][ T7249]  ? trace_kmalloc+0x1f/0xd0
[  166.276821][ T7249]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  166.276847][ T7249]  ? __pfx__copy_from_iter+0x10/0x10
[  166.276865][ T7249]  ? __build_skb_around+0x257/0x3e0
[  166.276888][ T7249]  ? skb_put+0x11b/0x210
[  166.276905][ T7249]  ? tipc_msg_build+0x8c6/0xcf0
[  166.276948][ T7249]  ? net_generic+0x1e/0x240
[  166.276967][ T7249]  ? net_generic+0x1e/0x240
[  166.276990][ T7249]  ? tipc_group_bc_cong+0x15f/0x210
[  166.277014][ T7249]  tipc_send_group_bcast+0x79e/0xa70
[  166.277051][ T7249]  ? __pfx_tipc_send_group_bcast+0x10/0x10
[  166.277081][ T7249]  ? __pfx_woken_wake_function+0x10/0x10
[  166.277109][ T7249]  ? tipc_dest_list_purge+0x167/0x190
[  166.277134][ T7249]  __tipc_sendmsg+0x1c3d/0x2960
[  166.277171][ T7249]  ? __pfx___tipc_sendmsg+0x10/0x10
[  166.277190][ T7249]  ? __lock_acquire+0xab9/0xd20
[  166.277259][ T7249]  ? __page_table_check_zero+0xba/0x530
[  166.277288][ T7249]  ? aa_label_sk_perm+0x4cd/0x630
[  166.277317][ T7249]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  166.277344][ T7249]  __tipc_sendstream+0x1041/0x1290
[  166.277390][ T7249]  ? __pfx___tipc_sendstream+0x10/0x10
[  166.277407][ T7249]  ? __local_bh_enable_ip+0x12d/0x1c0
[  166.277422][ T7249]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  166.277447][ T7249]  tipc_send_packet+0x7c/0xa0
[  166.277461][ T7249]  ? __pfx_tipc_send_packet+0x10/0x10
[  166.277477][ T7249]  __sock_sendmsg+0x21c/0x270
[  166.277501][ T7249]  ____sys_sendmsg+0x505/0x830
[  166.277525][ T7249]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.277559][ T7249]  ___sys_sendmsg+0x21f/0x2a0
[  166.277581][ T7249]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.277632][ T7249]  ? __fget_files+0x2a/0x420
[  166.277646][ T7249]  ? __fget_files+0x3a0/0x420
[  166.277670][ T7249]  __sys_sendmsg+0x164/0x220
[  166.277691][ T7249]  ? __pfx___sys_sendmsg+0x10/0x10
[  166.277727][ T7249]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.277747][ T7249]  __do_fast_syscall_32+0xb6/0x2b0
[  166.277766][ T7249]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.277787][ T7249]  do_fast_syscall_32+0x34/0x80
[  166.277812][ T7249]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  166.277831][ T7249] RIP: 0023:0xf7f86539
[  166.277846][ T7249] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  166.277859][ T7249] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  166.277877][ T7249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0
[  166.277889][ T7249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  166.277898][ T7249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.277907][ T7249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  166.277917][ T7249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  166.277940][ T7249]  </TASK>
[  166.277949][ T7249] tipc: Failed do clone local mcast rcv buffer
[  166.344966][ T5981] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  166.839043][ T5981] usb 7-1: Using ep0 maxpacket: 8
[  166.852981][ T5981] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  166.862904][ T5981] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  166.879243][ T5981] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  166.891915][ T5981] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  166.905388][ T5981] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  166.987564][ T5981] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.021839][ T5981] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  167.039812][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.355380][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  167.355399][   T30] audit: type=1326 audit(1758388529.482:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.2.322" exe="/root/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf7f86539 code=0x0
[  167.401840][ T5981] usb 7-1: GET_CAPABILITIES returned 0
[  167.407541][ T5981] usbtmc 7-1:16.0: can't read capabilities
[  168.128250][ T7271] netlink: 44 bytes leftover after parsing attributes in process `syz.5.324'.
[  168.384957][ T1778] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  168.547949][ T1778] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  168.561863][ T1778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.583281][ T1778] usb 3-1: config 0 descriptor??
[  168.591975][ T1778] cp210x 3-1:0.0: cp210x converter detected
[  168.864189][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'.
[  168.894169][ T1778] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  168.911453][ T1778] cp210x 3-1:0.0: querying part number failed
[  168.954526][ T1778] usb 3-1: cp210x converter now attached to ttyUSB0
[  169.028975][ T1778] usb 3-1: USB disconnect, device number 14
[  169.072690][ T1778] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  169.096843][ T1778] cp210x 3-1:0.0: device disconnected
[  169.168291][ T5937] usb 7-1: USB disconnect, device number 2
[  170.080040][ T7296] FAULT_INJECTION: forcing a failure.
[  170.080040][ T7296] name failslab, interval 1, probability 0, space 0, times 0
[  170.093903][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.5.333 Not tainted syzkaller #0 PREEMPT(full) 
[  170.093918][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  170.093924][ T7296] Call Trace:
[  170.093930][ T7296]  <TASK>
[  170.093934][ T7296]  dump_stack_lvl+0x189/0x250
[  170.093951][ T7296]  ? __pfx____ratelimit+0x10/0x10
[  170.093962][ T7296]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.093974][ T7296]  ? __pfx__printk+0x10/0x10
[  170.093990][ T7296]  ? __pfx___might_resched+0x10/0x10
[  170.093999][ T7296]  ? fs_reclaim_acquire+0x7d/0x100
[  170.094010][ T7296]  should_fail_ex+0x414/0x560
[  170.094028][ T7296]  should_failslab+0xa8/0x100
[  170.094044][ T7296]  __kmalloc_noprof+0xcb/0x4f0
[  170.094056][ T7296]  ? snd_pcm_hw_refine+0x967/0x1640
[  170.094071][ T7296]  snd_pcm_hw_refine+0x967/0x1640
[  170.094091][ T7296]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  170.094119][ T7296]  ? __kasan_kmalloc+0x93/0xb0
[  170.094137][ T7296]  snd_pcm_oss_change_params_locked+0xd22/0x3e40
[  170.094163][ T7296]  ? __mutex_lock+0x335/0x1350
[  170.094180][ T7296]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  170.094209][ T7296]  snd_pcm_oss_read+0x26a/0x8d0
[  170.094229][ T7296]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  170.094244][ T7296]  vfs_read+0x200/0xa30
[  170.094261][ T7296]  ? __pfx_vfs_read+0x10/0x10
[  170.094274][ T7296]  ? __fget_files+0x2a/0x420
[  170.094284][ T7296]  ? __fget_files+0x2a/0x420
[  170.094292][ T7296]  ? __fget_files+0x3a0/0x420
[  170.094299][ T7296]  ? __fget_files+0x2a/0x420
[  170.094312][ T7296]  ksys_read+0x145/0x250
[  170.094331][ T7296]  ? __pfx_ksys_read+0x10/0x10
[  170.094346][ T7296]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.094358][ T7296]  __do_fast_syscall_32+0xb6/0x2b0
[  170.094370][ T7296]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.094381][ T7296]  do_fast_syscall_32+0x34/0x80
[  170.094392][ T7296]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  170.094405][ T7296] RIP: 0023:0xf7f76539
[  170.094414][ T7296] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  170.094421][ T7296] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  170.094432][ T7296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800011c0
[  170.094438][ T7296] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000
[  170.094444][ T7296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  170.094449][ T7296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  170.094454][ T7296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  170.094468][ T7296]  </TASK>
[  170.947965][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  171.244880][   T10] usb 7-1: Using ep0 maxpacket: 32
[  171.274829][   T10] usb 7-1: config 0 has an invalid interface number: 146 but max is 0
[  171.284769][   T10] usb 7-1: config 0 has no interface number 0
[  171.303541][   T10] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  171.347018][   T10] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  171.683043][   T10] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  171.706780][   T10] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  171.719717][   T10] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  171.736766][   T10] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  171.764701][   T10] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  171.822526][   T10] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  171.900883][   T10] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  171.997411][ T7320] netlink: 44 bytes leftover after parsing attributes in process `syz.5.336'.
[  172.033727][   T10] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  172.044391][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.052667][   T10] usb 7-1: Product: syz
[  172.090272][ T7325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.334'.
[  172.104971][   T10] usb 7-1: Manufacturer: syz
[  172.154837][   T10] usb 7-1: SerialNumber: syz
[  172.183931][   T10] usb 7-1: config 0 descriptor??
[  172.207063][ T7308] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  172.225910][   T10] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[  172.406071][   T10] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out.
[  173.004973][ T7345] netlink: 168 bytes leftover after parsing attributes in process `syz.0.341'.
[  173.233291][ T7350] netlink: 36 bytes leftover after parsing attributes in process `syz.2.343'.
[  173.600767][ T5938] usb 7-1: USB disconnect, device number 3
[  174.044809][ T5981] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  174.207278][ T5981] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  174.220194][ T5981] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[  174.270880][ T5938] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  174.597533][ T5938] usb 7-1: Using ep0 maxpacket: 16
[  174.615079][ T5981] usb 3-1: config 220 interface 0 has no altsetting 0
[  174.674853][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  174.682569][ T5981] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  174.692003][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.702278][ T5938] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.714106][ T5938] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  174.738408][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.5.349'.
[  174.749899][ T5938] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  174.764185][ T5938] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  174.775011][ T5981] usb 3-1: Product: syz
[  174.779239][ T5981] usb 3-1: Manufacturer: syz
[  174.783849][ T5981] usb 3-1: SerialNumber: syz
[  174.800721][ T5938] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  174.832813][ T5938] usb 7-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  174.852493][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  174.863021][ T5938] usb 7-1: SerialNumber: syz
[  174.890119][ T7372] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  174.909994][ T5938] cdc_acm 7-1:1.0: Control and data interfaces are not separated!
[  174.931236][ T5938] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12
[  174.989979][   T10] usb 5-1: Using ep0 maxpacket: 32
[  175.020375][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[  175.065207][ T5981] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22
[  175.084330][   T10] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  175.096491][ T5981] usb 3-1: USB disconnect, device number 15
[  175.117765][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.166837][   T10] usb 5-1: Product: syz
[  175.181535][   T10] usb 5-1: Manufacturer: syz
[  175.201406][   T10] usb 5-1: SerialNumber: syz
[  175.256036][   T10] usb 5-1: config 0 descriptor??
[  175.266123][ T7374] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  175.295391][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  175.584578][   T10] usb 5-1: USB disconnect, device number 9
[  175.824495][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.321035][ T7401] FAULT_INJECTION: forcing a failure.
[  176.321035][ T7401] name failslab, interval 1, probability 0, space 0, times 0
[  176.348729][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.4.357 Not tainted syzkaller #0 PREEMPT(full) 
[  176.348761][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  176.348771][ T7401] Call Trace:
[  176.348779][ T7401]  <TASK>
[  176.348787][ T7401]  dump_stack_lvl+0x189/0x250
[  176.348812][ T7401]  ? __pfx____ratelimit+0x10/0x10
[  176.348830][ T7401]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.348848][ T7401]  ? __pfx__printk+0x10/0x10
[  176.348876][ T7401]  ? __pfx___might_resched+0x10/0x10
[  176.348898][ T7401]  should_fail_ex+0x414/0x560
[  176.348926][ T7401]  should_failslab+0xa8/0x100
[  176.348950][ T7401]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  176.348973][ T7401]  ? alloc_fair_sched_group+0x473/0xb20
[  176.348995][ T7401]  alloc_fair_sched_group+0x473/0xb20
[  176.349030][ T7401]  sched_create_group+0x37/0x80
[  176.349048][ T7401]  cpu_cgroup_css_alloc+0xe/0x40
[  176.349062][ T7401]  cgroup_apply_control_enable+0x3d1/0xa80
[  176.349084][ T7401]  ? css_next_descendant_pre+0x194/0x260
[  176.349105][ T7401]  ? cgroup_propagate_control+0x646/0x6c0
[  176.349133][ T7401]  cgroup_apply_control+0x92/0x6e0
[  176.349159][ T7401]  ? __pfx_cgroup_apply_control+0x10/0x10
[  176.349187][ T7401]  ? css_next_child+0xbd/0x220
[  176.349211][ T7401]  ? css_next_descendant_pre+0x194/0x260
[  176.349233][ T7401]  ? cgroup_save_control+0x2db/0x350
[  176.349259][ T7401]  cgroup_subtree_control_write+0xaa1/0x1090
[  176.349297][ T7401]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  176.349320][ T7401]  ? kernfs_root+0x1c/0x230
[  176.349334][ T7401]  ? kernfs_root+0x1c/0x230
[  176.349355][ T7401]  ? kernfs_root+0x1ea/0x230
[  176.349371][ T7401]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  176.349394][ T7401]  cgroup_file_write+0x39e/0x740
[  176.349419][ T7401]  ? __pfx_cgroup_file_write+0x10/0x10
[  176.349450][ T7401]  ? __pfx_cgroup_file_write+0x10/0x10
[  176.349466][ T7401]  kernfs_fop_write_iter+0x3ac/0x540
[  176.349494][ T7401]  vfs_write+0x5c9/0xb30
[  176.349524][ T7401]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  176.349545][ T7401]  ? __pfx_vfs_write+0x10/0x10
[  176.349575][ T7401]  ? __fget_files+0x2a/0x420
[  176.349599][ T7401]  ksys_write+0x145/0x250
[  176.349621][ T7401]  ? __pfx_ksys_write+0x10/0x10
[  176.349643][ T7401]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.349663][ T7401]  __do_fast_syscall_32+0xb6/0x2b0
[  176.349681][ T7401]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.349703][ T7401]  do_fast_syscall_32+0x34/0x80
[  176.349721][ T7401]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  176.349765][ T7401] RIP: 0023:0xf709e539
[  176.349781][ T7401] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  176.349794][ T7401] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  176.349810][ T7401] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600
[  176.349821][ T7401] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000
[  176.349829][ T7401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  176.349838][ T7401] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  176.349846][ T7401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  176.349871][ T7401]  </TASK>
[  176.668404][   T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  176.838783][   T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  176.863104][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.086048][   T10] usb 6-1: config 0 descriptor??
[  177.129265][   T10] cp210x 6-1:0.0: cp210x converter detected
[  177.331377][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.356'.
[  177.433341][ T5972] usb 7-1: USB disconnect, device number 4
[  178.112542][ T7419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.360'.
[  178.207755][ T7399] hsr_slave_1 (unregistering): left promiscuous mode
[  178.453694][   T10] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  178.485997][   T10] cp210x 6-1:0.0: querying part number failed
[  178.522897][   T10] usb 6-1: cp210x converter now attached to ttyUSB0
[  178.558318][   T10] usb 6-1: USB disconnect, device number 4
[  178.603929][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  178.642654][   T10] cp210x 6-1:0.0: device disconnected
[  178.679545][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'.
[  178.712222][ T7427] vlan2: entered promiscuous mode
[  178.726334][ T7427] gretap0: entered promiscuous mode
[  179.076471][ T7429] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  179.083008][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  179.106495][ T7429] vhci_hcd vhci_hcd.0: Device attached
[  179.141104][ T7430] vhci_hcd: connection closed
[  179.142540][ T1137] vhci_hcd: stop threads
[  179.154993][ T1137] vhci_hcd: release socket
[  179.159437][ T1137] vhci_hcd: disconnect device
[  179.444904][ T5930] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  179.618727][ T5930] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  179.657214][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.739826][ T5930] usb 3-1: Product: syz
[  179.770290][ T5930] usb 3-1: Manufacturer: syz
[  179.866759][ T5930] usb 3-1: SerialNumber: syz
[  179.912257][ T5930] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  180.155684][   T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  180.620583][   T10] usb 3-1: USB disconnect, device number 16
[  180.751601][ T5937] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  181.084590][ T5937] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  181.145187][ T5937] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  181.187463][ T5937] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.249491][ T5937] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  181.274928][   T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  181.352042][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.361804][   T24] ath9k_htc: Failed to initialize the device
[  181.395117][   T10] usb 3-1: ath9k_htc: USB layer deinitialized
[  181.488056][ T5937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  181.741480][ T5937] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  181.918430][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.962313][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.154855][ T5981] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  182.173630][ T7476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.220224][ T7462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.374'.
[  182.307148][ T5981] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  182.319169][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.343377][ T5981] usb 6-1: config 0 descriptor??
[  182.358379][ T5981] cp210x 6-1:0.0: cp210x converter detected
[  182.567601][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.377'.
[  182.594323][ T5981] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  182.611296][ T5981] cp210x 6-1:0.0: querying part number failed
[  182.643708][ T5981] usb 6-1: cp210x converter now attached to ttyUSB0
[  182.672504][ T5981] usb 6-1: USB disconnect, device number 5
[  182.694793][ T5981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  182.706178][ T5981] cp210x 6-1:0.0: device disconnected
[  183.086028][   T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  183.235460][   T24] usb 3-1: device descriptor read/64, error -71
[  183.379754][ T7501] binder: 7497:7501 ioctl c0306201 80001040 returned -14
[  183.504884][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  183.630917][ T5937] usb 5-1: USB disconnect, device number 10
[  183.637096][   T24] usb 3-1: device descriptor read/64, error -71
[  183.747660][   T24] usb usb3-port1: attempt power cycle
[  184.096033][   T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  184.168123][   T24] usb 3-1: device descriptor read/8, error -71
[  184.205073][ T5981] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  184.404992][   T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  184.416229][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.455874][   T24] usb 3-1: device descriptor read/8, error -71
[  184.468154][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  184.492746][ T5981] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  184.506977][   T30] audit: type=1326 audit(1758388546.662:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  184.527191][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.549181][ T5981] usb 5-1: config 0 descriptor??
[  184.602295][ T5981] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  184.655046][   T24] usb usb3-port1: unable to enumerate USB device
[  184.666643][ T7520] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (10), value rounded to 0 ms
[  184.683837][   T30] audit: type=1326 audit(1758388546.662:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  184.774694][ T7520] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (10), value rounded to 0 ms
[  184.794991][ T5981] usb 5-1: USB disconnect, device number 11
[  184.824490][   T30] audit: type=1326 audit(1758388546.702:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf702e539 code=0x7ffc0000
[  184.851008][ T7520] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  184.976440][   T30] audit: type=1326 audit(1758388546.702:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  185.085824][   T30] audit: type=1326 audit(1758388546.702:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  185.122335][   T30] audit: type=1326 audit(1758388546.702:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf702e539 code=0x7ffc0000
[  185.150068][   T30] audit: type=1326 audit(1758388546.712:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  185.186033][   T30] audit: type=1326 audit(1758388546.712:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  185.212723][   T30] audit: type=1326 audit(1758388546.722:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf702e539 code=0x7ffc0000
[  185.239158][   T30] audit: type=1326 audit(1758388546.722:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.6.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  185.290725][ T7530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.390'.
[  185.608984][ T7537] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  185.684916][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  185.836807][   T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  185.847748][   T24] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  185.861444][   T24] usb 5-1: config 220 interface 0 has no altsetting 0
[  185.895164][   T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  185.908754][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.947680][   T24] usb 5-1: Product: syz
[  185.962224][   T24] usb 5-1: Manufacturer: syz
[  185.972330][   T24] usb 5-1: SerialNumber: syz
[  186.467476][ T5972] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  186.626386][ T5972] usb 6-1: Using ep0 maxpacket: 16
[  186.658428][ T5972] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.681533][ T5972] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  186.692848][ T5972] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  186.707156][ T5972] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  186.733707][ T5972] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  186.776212][ T5972] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  186.785545][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  186.805185][ T5972] usb 6-1: SerialNumber: syz
[  186.826760][ T7556] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  186.836121][ T5972] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  186.849698][ T5972] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  188.144845][ T5972] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  188.304924][ T5972] usb 7-1: Using ep0 maxpacket: 8
[  188.316625][ T5972] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  188.326528][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.352122][ T5972] usb 7-1: config 0 descriptor??
[  188.447169][   T24] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22
[  188.466294][   T24] usb 5-1: USB disconnect, device number 12
[  189.221434][ T7569] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.407'.
[  189.233074][ T5972] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  189.243898][ T5972] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  189.305461][ T5972] asix 7-1:0.0: probe with driver asix failed with error -71
[  189.350315][ T5972] usb 7-1: USB disconnect, device number 5
[  189.465132][ T5981] usb 6-1: USB disconnect, device number 6
[  189.551215][ T7584] netlink: 44 bytes leftover after parsing attributes in process `syz.4.410'.
[  190.151798][ T7596] netlink: 3 bytes leftover after parsing attributes in process `syz.6.414'.
[  191.273660][ T7615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'.
[  191.315046][ T7615] netlink: 152 bytes leftover after parsing attributes in process `syz.4.420'.
[  192.436800][ T7633] warning: `syz.6.426' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  192.465633][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  192.465649][   T30] audit: type=1326 audit(1758388554.612:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  192.591896][ T5938] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  192.665272][   T30] audit: type=1326 audit(1758388554.622:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf702e539 code=0x7ffc0000
[  192.687809][   T30] audit: type=1326 audit(1758388554.622:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  192.726235][   T30] audit: type=1326 audit(1758388554.652:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e539 code=0x7ffc0000
[  192.749279][   T30] audit: type=1326 audit(1758388554.652:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  192.824961][ T5938] usb 3-1: Using ep0 maxpacket: 16
[  192.946203][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.965953][   T30] audit: type=1326 audit(1758388554.652:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf702e539 code=0x7ffc0000
[  193.018254][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  193.087436][ T5938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  193.134310][   T30] audit: type=1326 audit(1758388554.652:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  193.164386][ T5938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  193.190426][ T5938] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  193.241916][   T30] audit: type=1326 audit(1758388554.652:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf702e539 code=0x7ffc0000
[  193.388917][ T5938] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  193.405042][   T30] audit: type=1326 audit(1758388554.652:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[  193.431529][   T30] audit: type=1326 audit(1758388554.652:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.6.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf702e539 code=0x7ffc0000
[  193.634941][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  193.653139][ T5938] usb 3-1: SerialNumber: syz
[  193.701222][ T7630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  193.710119][ T5938] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  193.719286][ T5938] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  194.285476][    T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  194.285697][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.311043][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.378600][    T9] dvb_usb_az6027 1-1:4.241: probe with driver dvb_usb_az6027 failed with error -110
[  194.443863][    T9] dvb-usb: found a 'Technisat SkyStar USB 2 HD CI' in cold state, will try to load a firmware
[  194.632031][    T9] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  194.798152][    T9] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  195.462398][ T5981] usb 3-1: USB disconnect, device number 21
[  195.553689][ T7675] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  195.775041][    C0] syz_tun: tun_net_xmit 54
[  195.885657][ T7686] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.445'.
[  196.165012][    C0] syz_tun: tun_net_xmit 54
[  197.866922][ T7727] FAULT_INJECTION: forcing a failure.
[  197.866922][ T7727] name failslab, interval 1, probability 0, space 0, times 0
[  197.934864][ T7727] CPU: 0 UID: 0 PID: 7727 Comm: syz.4.459 Not tainted syzkaller #0 PREEMPT(full) 
[  197.934888][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  197.934898][ T7727] Call Trace:
[  197.934906][ T7727]  <TASK>
[  197.934914][ T7727]  dump_stack_lvl+0x189/0x250
[  197.934940][ T7727]  ? __pfx____ratelimit+0x10/0x10
[  197.934957][ T7727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.934974][ T7727]  ? __pfx__printk+0x10/0x10
[  197.935007][ T7727]  should_fail_ex+0x414/0x560
[  197.935033][ T7727]  should_failslab+0xa8/0x100
[  197.935059][ T7727]  __kmalloc_cache_noprof+0x70/0x3d0
[  197.935081][ T7727]  ? sctp_add_bind_addr+0x8c/0x370
[  197.935103][ T7727]  sctp_add_bind_addr+0x8c/0x370
[  197.935122][ T7727]  sctp_copy_local_addr_list+0x30b/0x4e0
[  197.935157][ T7727]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  197.935178][ T7727]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  197.935203][ T7727]  ? sctp_v6_is_any+0x64/0x80
[  197.935221][ T7727]  ? sctp_copy_one_addr+0x93/0x360
[  197.935241][ T7727]  sctp_bind_addr_copy+0xb3/0x3c0
[  197.935258][ T7727]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  197.935282][ T7727]  sctp_connect_new_asoc+0x2e0/0x690
[  197.935304][ T7727]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  197.935327][ T7727]  ? sctp_get_af_specific+0x29/0x80
[  197.935341][ T7727]  ? sctp_inet6_send_verify+0x80/0x300
[  197.935357][ T7727]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  197.935379][ T7727]  __sctp_connect+0x5ba/0xd50
[  197.935406][ T7727]  ? __pfx___sctp_connect+0x10/0x10
[  197.935424][ T7727]  ? security_sctp_bind_connect+0x7e/0x2e0
[  197.935448][ T7727]  ? sctp_setsockopt_connectx_old+0xc1/0x160
[  197.935471][ T7727]  sctp_setsockopt+0x459/0x1200
[  197.935489][ T7727]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  197.935506][ T7727]  do_sock_setsockopt+0x179/0x1b0
[  197.935530][ T7727]  __ia32_sys_setsockopt+0x13f/0x1b0
[  197.935554][ T7727]  __do_fast_syscall_32+0xb6/0x2b0
[  197.935574][ T7727]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.935596][ T7727]  do_fast_syscall_32+0x34/0x80
[  197.935614][ T7727]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  197.935633][ T7727] RIP: 0023:0xf709e539
[  197.935649][ T7727] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  197.935662][ T7727] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  197.935680][ T7727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084
[  197.935692][ T7727] RDX: 000000000000006b RSI: 0000000080000080 RDI: 0000000000000010
[  197.935703][ T7727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  197.935713][ T7727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  197.935722][ T7727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  197.935749][ T7727]  </TASK>
[  198.354992][ T1778] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  198.514832][ T1778] usb 7-1: Using ep0 maxpacket: 16
[  198.531109][ T1778] usb 7-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  198.540352][ T1778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.548927][ T1778] usb 7-1: Product: syz
[  198.556638][ T1778] usb 7-1: Manufacturer: syz
[  198.561273][ T1778] usb 7-1: SerialNumber: syz
[  198.746819][ T1778] usb 7-1: config 0 descriptor??
[  198.754825][   T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  198.986184][ T1778] usb_8dev 7-1:0.0 can0: sending command message failed
[  199.013577][ T1778] usb_8dev 7-1:0.0 can0: can't get firmware version
[  199.048459][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  199.058471][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.087344][   T24] usb 5-1: Product: syz
[  199.093551][   T24] usb 5-1: Manufacturer: syz
[  199.104105][   T24] usb 5-1: SerialNumber: syz
[  199.127372][   T24] usb 5-1: config 0 descriptor??
[  199.145571][ T1778] usb_8dev 7-1:0.0: probe with driver usb_8dev failed with error -22
[  199.491195][   T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  199.506826][ T1778] usb 7-1: USB disconnect, device number 6
[  199.601167][ T7739] netlink: 44 bytes leftover after parsing attributes in process `syz.5.462'.
[  200.387911][ T7761] netlink: 'syz.6.470': attribute type 8 has an invalid length.
[  200.966341][ T1778] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  201.219050][ T1778] usb 6-1: Using ep0 maxpacket: 8
[  201.289036][ T1778] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  201.313693][ T1778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.352150][ T1778] usb 6-1: Product: syz
[  201.362314][ T1778] usb 6-1: Manufacturer: syz
[  201.374574][ T1778] usb 6-1: SerialNumber: syz
[  201.398057][ T1778] usb 6-1: config 0 descriptor??
[  201.756237][   T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  201.852940][ T1778] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  201.860784][ T1778] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  202.044366][   T24] usb 5-1: USB disconnect, device number 13
[  202.056494][ T1778] usb 6-1: USB disconnect, device number 7
[  202.386401][ T7793] FAULT_INJECTION: forcing a failure.
[  202.386401][ T7793] name failslab, interval 1, probability 0, space 0, times 0
[  202.636190][ T7793] CPU: 1 UID: 0 PID: 7793 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) 
[  202.636216][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  202.636227][ T7793] Call Trace:
[  202.636234][ T7793]  <TASK>
[  202.636241][ T7793]  dump_stack_lvl+0x189/0x250
[  202.636264][ T7793]  ? __pfx____ratelimit+0x10/0x10
[  202.636282][ T7793]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.636300][ T7793]  ? __pfx__printk+0x10/0x10
[  202.636324][ T7793]  ? __pfx___might_resched+0x10/0x10
[  202.636339][ T7793]  ? fs_reclaim_acquire+0x7d/0x100
[  202.636360][ T7793]  should_fail_ex+0x414/0x560
[  202.636388][ T7793]  should_failslab+0xa8/0x100
[  202.636410][ T7793]  __kmalloc_noprof+0xcb/0x4f0
[  202.636428][ T7793]  ? kfree+0x4d/0x440
[  202.636443][ T7793]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  202.636465][ T7793]  tomoyo_realpath_from_path+0xe3/0x5d0
[  202.636485][ T7793]  ? tomoyo_domain+0xd9/0x130
[  202.636508][ T7793]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  202.636529][ T7793]  tomoyo_path_number_perm+0x1e8/0x5a0
[  202.636553][ T7793]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  202.636593][ T7793]  ? __lock_acquire+0xab9/0xd20
[  202.636637][ T7793]  ? __fget_files+0x2a/0x420
[  202.636657][ T7793]  ? __fget_files+0x3a0/0x420
[  202.636669][ T7793]  ? __fget_files+0x2a/0x420
[  202.636687][ T7793]  security_file_ioctl_compat+0xcb/0x2d0
[  202.636711][ T7793]  __ia32_compat_sys_ioctl+0x128/0x840
[  202.636735][ T7793]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  202.636754][ T7793]  ? __fget_files+0x3a0/0x420
[  202.636775][ T7793]  ? fput+0xa0/0xd0
[  202.636792][ T7793]  ? ksys_write+0x22a/0x250
[  202.636823][ T7793]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.636845][ T7793]  __do_fast_syscall_32+0xb6/0x2b0
[  202.636864][ T7793]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.636885][ T7793]  do_fast_syscall_32+0x34/0x80
[  202.636904][ T7793]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  202.636923][ T7793] RIP: 0023:0xf7f86539
[  202.636939][ T7793] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  202.636961][ T7793] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  202.636979][ T7793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f
[  202.636991][ T7793] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  202.637002][ T7793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  202.637011][ T7793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  202.637021][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  202.637047][ T7793]  </TASK>
[  202.637054][ T7793] ERROR: Out of memory at tomoyo_realpath_from_path.
[  204.295098][ T5972] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  204.546870][ T5972] usb 3-1: unable to get BOS descriptor or descriptor too short
[  204.555817][ T5972] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  204.642347][ T5972] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2
[  204.703688][ T5972] usb 3-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0
[  204.744152][ T5972] usb 3-1: config 66 interface 0 has no altsetting 0
[  204.772741][ T5972] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  204.783869][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.967286][ T5972] usb 3-1: Product: syz
[  204.971504][ T5972] usb 3-1: Manufacturer: syz
[  204.981379][ T5972] usb 3-1: SerialNumber: syz
[  206.247020][ T7852] FAULT_INJECTION: forcing a failure.
[  206.247020][ T7852] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.294888][ T7852] CPU: 1 UID: 0 PID: 7852 Comm: syz.5.493 Not tainted syzkaller #0 PREEMPT(full) 
[  206.294915][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  206.294925][ T7852] Call Trace:
[  206.294933][ T7852]  <TASK>
[  206.294940][ T7852]  dump_stack_lvl+0x189/0x250
[  206.294966][ T7852]  ? __pfx____ratelimit+0x10/0x10
[  206.294986][ T7852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.295005][ T7852]  ? __pfx__printk+0x10/0x10
[  206.295027][ T7852]  ? __might_fault+0xb0/0x130
[  206.295060][ T7852]  should_fail_ex+0x414/0x560
[  206.295089][ T7852]  _copy_from_user+0x2d/0xb0
[  206.295110][ T7852]  video_usercopy+0x354/0x14f0
[  206.295141][ T7852]  ? __pfx___video_do_ioctl+0x10/0x10
[  206.295159][ T7852]  ? __pfx_video_usercopy+0x10/0x10
[  206.295193][ T7852]  ? __fget_files+0x2a/0x420
[  206.295213][ T7852]  v4l2_ioctl+0x18d/0x1e0
[  206.295239][ T7852]  v4l2_compat_ioctl32+0x1d4/0x260
[  206.295266][ T7852]  __ia32_compat_sys_ioctl+0x540/0x840
[  206.295290][ T7852]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  206.295311][ T7852]  ? __fget_files+0x3a0/0x420
[  206.295334][ T7852]  ? fput+0xa0/0xd0
[  206.295352][ T7852]  ? ksys_write+0x22a/0x250
[  206.295382][ T7852]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.295403][ T7852]  __do_fast_syscall_32+0xb6/0x2b0
[  206.295431][ T7852]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.295453][ T7852]  do_fast_syscall_32+0x34/0x80
[  206.295471][ T7852]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  206.295491][ T7852] RIP: 0023:0xf7f76539
[  206.295507][ T7852] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  206.295522][ T7852] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  206.295542][ T7852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f
[  206.295554][ T7852] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  206.295565][ T7852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  206.295575][ T7852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  206.295585][ T7852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  206.295612][ T7852]  </TASK>
[  206.385371][ T1778] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  206.482772][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'.
[  206.494806][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  206.494822][   T30] audit: type=1326 audit(1758388568.622:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  206.611671][   T30] audit: type=1326 audit(1758388568.632:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  206.657241][ T5972] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1
[  206.685074][   T30] audit: type=1326 audit(1758388568.632:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  206.708668][ T5972] usb 3-1: USB disconnect, device number 22
[  206.752490][   T30] audit: type=1326 audit(1758388568.632:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  206.817829][   T30] audit: type=1326 audit(1758388568.632:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  206.901975][ T1778] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.914039][ T1778] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.935438][   T30] audit: type=1326 audit(1758388568.632:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  206.984313][ T1778] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.994325][   T30] audit: type=1326 audit(1758388568.632:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  207.032963][   T30] audit: type=1326 audit(1758388568.632:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  207.078710][ T1778] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  207.081779][ T7854] team0: Port device team_slave_0 removed
[  207.108161][ T1778] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.217068][   T30] audit: type=1326 audit(1758388569.372:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  207.316686][ T1778] usb 7-1: config 0 descriptor??
[  207.338848][   T30] audit: type=1326 audit(1758388569.372:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.5.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  210.132007][ T7897] netlink: 56 bytes leftover after parsing attributes in process `syz.5.504'.
[  210.143881][ T7897] netlink: 56 bytes leftover after parsing attributes in process `syz.5.504'.
[  210.404129][ T7898] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[7898]
[  210.579255][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  210.741744][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  211.061953][ T1778] usbhid 7-1:0.0: can't add hid device: -71
[  211.075254][ T1778] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  211.103398][ T1778] usb 7-1: USB disconnect, device number 7
[  213.189459][ T7931] fuse: Bad value for 'fd'
[  213.398562][ T7930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.512'.
[  214.396595][ T7939] netlink: 'syz.4.514': attribute type 4 has an invalid length.
[  214.812871][ T7949] ptrace attach of "./syz-executor exec"[7058] was attempted by "./syz-executor exec"[7949]
[  215.215186][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'.
[  215.369149][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'.
[  217.305366][ T7978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.518'.
[  218.133066][ T7986] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[7986]
[  218.724815][ T5981] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  219.022817][ T5981] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  219.054782][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.095287][ T5981] usb 6-1: config 0 descriptor??
[  219.123495][ T5981] cp210x 6-1:0.0: cp210x converter detected
[  220.050892][ T7995] fuse: Bad value for 'fd'
[  220.103394][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.523'.
[  220.140850][ T8003] netlink: 44 bytes leftover after parsing attributes in process `syz.6.525'.
[  220.188335][ T5981] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  220.265789][ T5981] cp210x 6-1:0.0: querying part number failed
[  220.289273][ T8006] netlink: 44 bytes leftover after parsing attributes in process `syz.4.526'.
[  220.303856][ T5981] usb 6-1: cp210x converter now attached to ttyUSB0
[  220.428410][ T5981] usb 6-1: USB disconnect, device number 8
[  220.450416][ T5981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  220.465013][ T5981] cp210x 6-1:0.0: device disconnected
[  224.109265][ T8044] netlink: 44 bytes leftover after parsing attributes in process `syz.6.541'.
[  225.234816][ T5972] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  225.303482][ T8067] ptrace attach of "./syz-executor exec"[7058] was attempted by "./syz-executor exec"[8067]
[  225.657151][ T5972] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  225.670511][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.695091][ T8073] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[8073]
[  225.699508][ T5972] usb 5-1: config 0 descriptor??
[  225.739673][ T5972] cp210x 5-1:0.0: cp210x converter detected
[  225.976981][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'.
[  225.995376][ T5972] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  226.015433][ T5972] cp210x 5-1:0.0: querying part number failed
[  226.091894][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'.
[  226.147338][ T5972] usb 5-1: cp210x converter now attached to ttyUSB0
[  226.338349][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'.
[  226.361968][ T5972] usb 5-1: USB disconnect, device number 14
[  226.375610][ T5972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  226.390460][ T5972] cp210x 5-1:0.0: device disconnected
[  226.611213][ T8084] netlink: zone id is out of range
[  226.630816][ T8084] netlink: zone id is out of range
[  226.661225][ T8084] netlink: zone id is out of range
[  226.694944][ T8084] netlink: zone id is out of range
[  226.965118][ T8084] netlink: zone id is out of range
[  226.982582][ T8084] netlink: zone id is out of range
[  227.098893][ T8084] netlink: zone id is out of range
[  227.110133][ T8084] netlink: zone id is out of range
[  227.126335][ T8084] netlink: zone id is out of range
[  227.134828][ T8084] netlink: zone id is out of range
[  227.885017][   T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  227.896258][ T8102] ptrace attach of "./syz-executor exec"[7095] was attempted by "./syz-executor exec"[8102]
[  228.349305][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  228.411103][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.544'.
[  228.420846][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.544'.
[  228.424931][ T5930] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  228.466979][ T8111] netlink: 44 bytes leftover after parsing attributes in process `syz.4.551'.
[  228.485094][   T10] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  228.649048][ T5930] usb 3-1: config 1 interface 0 has no altsetting 0
[  228.725015][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  228.734061][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.773060][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  228.775012][ T5930] usb 3-1: Product: syz
[  228.833981][ T5930] usb 3-1: Manufacturer: syz
[  228.840195][ T5930] usb 3-1: SerialNumber: syz
[  228.845326][   T10] usb usb6-port1: attempt power cycle
[  229.194886][   T10] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  229.215866][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  229.267023][ T5930] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  229.344915][   T10] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  229.366317][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  229.371907][   T10] usb usb6-port1: unable to enumerate USB device
[  229.681995][ T5930] usb 3-1: USB disconnect, device number 23
[  229.719477][ T5930] usblp0: removed
[  231.329294][ T5930] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  231.352493][ T8134] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[8134]
[  231.446685][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'.
[  231.471101][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'.
[  231.547591][ T5930] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  231.565016][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.753837][ T5930] usb 6-1: config 0 descriptor??
[  231.841596][ T5930] cp210x 6-1:0.0: cp210x converter detected
[  232.001682][ T8129] mmap: syz.0.556 (8129) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  232.064865][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'.
[  232.122803][   T30] audit: type=1400 audit(1758388594.272:189): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  232.329914][ T5930] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  232.507883][ T5930] cp210x 6-1:0.0: querying part number failed
[  232.692708][ T5930] usb 6-1: cp210x converter now attached to ttyUSB0
[  232.742658][ T5930] usb 6-1: USB disconnect, device number 13
[  232.894312][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  232.915575][ T5930] cp210x 6-1:0.0: device disconnected
[  232.965612][ T8154] ptrace attach of "./syz-executor exec"[7095] was attempted by "./syz-executor exec"[8154]
[  233.584966][   T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  233.748605][   T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  233.761624][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.863387][   T10] usb 6-1: config 0 descriptor??
[  233.893591][   T10] cp210x 6-1:0.0: cp210x converter detected
[  234.075810][ T8169] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[8169]
[  234.136444][ T8159] netlink: 48 bytes leftover after parsing attributes in process `syz.5.574'.
[  234.221712][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.574'.
[  234.415183][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  234.424003][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  234.453164][   T10] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  234.487748][   T10] cp210x 6-1:0.0: querying part number failed
[  234.509754][   T10] usb 6-1: cp210x converter now attached to ttyUSB0
[  234.540831][   T10] usb 6-1: USB disconnect, device number 14
[  234.615380][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  234.650162][   T10] cp210x 6-1:0.0: device disconnected
[  236.117907][   T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  236.319703][   T10] usb 7-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config
[  236.337334][   T10] usb 7-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  236.482124][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  236.509165][   T10] usb 7-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  236.546104][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.617555][   T10] usb 7-1: config 0 descriptor??
[  236.642045][   T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  237.074325][ T8200] fuse: Bad value for 'user_id'
[  237.111857][ T8200] fuse: Bad value for 'user_id'
[  237.612093][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.623155][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.746001][ T8226] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[8226]
[  238.819448][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  238.828332][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  240.218194][ T5972] usb 7-1: USB disconnect, device number 8
[  240.646718][ T8247] syzkaller0: entered promiscuous mode
[  240.699856][ T8247] syzkaller0: entered allmulticast mode
[  240.844856][ T5937] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  241.007143][ T5937] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  241.044283][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.070019][ T5930] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  241.085140][ T5937] usb 7-1: config 0 descriptor??
[  241.136786][ T5937] cp210x 7-1:0.0: cp210x converter detected
[  241.295701][ T5930] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  241.335166][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.382968][ T8264] netlink: 48 bytes leftover after parsing attributes in process `syz.6.581'.
[  241.442242][ T5930] usb 5-1: Product: syz
[  241.449820][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'.
[  241.462811][ T5930] usb 5-1: Manufacturer: syz
[  241.462832][ T5930] usb 5-1: SerialNumber: syz
[  241.513658][ T5930] usb 5-1: config 0 descriptor??
[  241.771890][ T5930] hso 5-1:0.0: Failed to find BULK IN ep
[  241.789993][ T8266] hsr_slave_1 (unregistering): left promiscuous mode
[  241.843988][ T5930] usb-storage 5-1:0.0: USB Mass Storage device detected
[  241.869597][ T5937] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71
[  242.268443][ T5937] cp210x 7-1:0.0: querying part number failed
[  242.279104][ T5937] usb 7-1: cp210x converter now attached to ttyUSB0
[  242.295626][ T5937] usb 7-1: USB disconnect, device number 9
[  242.305941][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  242.306466][ T5937] cp210x 7-1:0.0: device disconnected
[  243.716026][ T8293] netlink: 44 bytes leftover after parsing attributes in process `syz.5.591'.
[  243.929097][ T1778] usb 5-1: USB disconnect, device number 15
[  245.811229][ T8316] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[8316]
[  245.845671][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'.
[  245.854771][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'.
[  246.642540][ T8332] pim6reg: entered allmulticast mode
[  246.747717][ T5972] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  247.504991][ T5930] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  247.525131][ T5972] usb 3-1: Using ep0 maxpacket: 8
[  247.539508][ T5972] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  247.573556][ T5972] usb 3-1: config 1 interface 0 has no altsetting 0
[  247.626011][ T5972] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.40
[  247.674827][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.677454][ T5930] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  247.703285][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.729762][ T5930] usb 5-1: config 0 descriptor??
[  247.745391][ T5972] usb 3-1: Product: ࠄ
[  247.749593][ T5972] usb 3-1: Manufacturer: ┉喉塩沭磥ⱇࢸ鰏䨧俨꙽盿즽ണ쪛㨏馮ᦺ쇐ⱟꖉ髗ᩜ쵧㯠밝㸙뉂矆ꚓ绳鰏湵暩
[  247.766685][ T5930] cp210x 5-1:0.0: cp210x converter detected
[  247.889641][ T5972] usb 3-1: SerialNumber: syz
[  247.973462][ T8335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.601'.
[  248.211125][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'.
[  248.401256][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'.
[  248.531295][ T5972] usbhid 3-1:1.0: can't add hid device: -71
[  248.548120][ T5972] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  248.567067][ T5930] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  248.571931][ T5972] usb 3-1: USB disconnect, device number 24
[  248.613194][ T5930] cp210x 5-1:0.0: querying part number failed
[  248.638554][ T5930] usb 5-1: cp210x converter now attached to ttyUSB0
[  248.707101][ T5930] usb 5-1: USB disconnect, device number 16
[  248.745160][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  248.770940][ T5930] cp210x 5-1:0.0: device disconnected
[  249.525135][ T8354] fuse: root generation should be zero
[  249.555828][ T8354] netlink: 'syz.2.608': attribute type 1 has an invalid length.
[  250.364153][ T8373] ptrace attach of "./syz-executor exec"[7095] was attempted by "./syz-executor exec"[8373]
[  250.841220][ T8380] FAULT_INJECTION: forcing a failure.
[  250.841220][ T8380] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  250.855994][ T8380] CPU: 0 UID: 0 PID: 8380 Comm: syz.5.612 Not tainted syzkaller #0 PREEMPT(full) 
[  250.856019][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  250.856043][ T8380] Call Trace:
[  250.856051][ T8380]  <TASK>
[  250.856060][ T8380]  dump_stack_lvl+0x189/0x250
[  250.856086][ T8380]  ? __pfx____ratelimit+0x10/0x10
[  250.856106][ T8380]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.856126][ T8380]  ? __pfx__printk+0x10/0x10
[  250.856152][ T8380]  ? fs_reclaim_acquire+0x7d/0x100
[  250.856178][ T8380]  should_fail_ex+0x414/0x560
[  250.856215][ T8380]  prepare_alloc_pages+0x213/0x610
[  250.856241][ T8380]  __alloc_frozen_pages_noprof+0x123/0x370
[  250.856259][ T8380]  ? arch_stack_walk+0xfc/0x150
[  250.856281][ T8380]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  250.856308][ T8380]  ? policy_nodemask+0x27c/0x720
[  250.856327][ T8380]  ? __lock_acquire+0xab9/0xd20
[  250.856355][ T8380]  alloc_pages_mpol+0x232/0x4a0
[  250.856383][ T8380]  vma_alloc_folio_noprof+0xe4/0x200
[  250.856409][ T8380]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  250.856444][ T8380]  folio_prealloc+0x30/0x180
[  250.856466][ T8380]  __handle_mm_fault+0x2ab9/0x5440
[  250.856502][ T8380]  ? __pfx___handle_mm_fault+0x10/0x10
[  250.856539][ T8380]  ? find_vma+0xe7/0x160
[  250.856558][ T8380]  ? __pfx_find_vma+0x10/0x10
[  250.856580][ T8380]  handle_mm_fault+0x40a/0x8e0
[  250.856609][ T8380]  do_user_addr_fault+0x764/0x1390
[  250.856641][ T8380]  exc_page_fault+0x76/0xf0
[  250.856659][ T8380]  asm_exc_page_fault+0x26/0x30
[  250.856674][ T8380] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  250.856696][ T8380] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  250.856710][ T8380] RSP: 0018:ffffc9001bbe7a18 EFLAGS: 00050206
[  250.856725][ T8380] RAX: ffffffff84c61301 RBX: ffff888012a4d000 RCX: 0000000000000740
[  250.856737][ T8380] RDX: 0000000000000000 RSI: ffff888012a4d8c0 RDI: 0000000080001000
[  250.856750][ T8380] RBP: ffffc9001bbe7b90 R08: ffff888012a4dfff R09: 1ffff11002549bff
[  250.856763][ T8380] R10: dffffc0000000000 R11: ffffed1002549c00 R12: 1ffff9200377cfaf
[  250.856775][ T8380] R13: 0000000080000740 R14: ffffc9001bbe7d88 R15: 0000000000001000
[  250.856794][ T8380]  ? _copy_to_iter+0x1b1/0x1790
[  250.856818][ T8380]  _copy_to_iter+0x24f/0x1790
[  250.856837][ T8380]  ? __pfx_filemap_get_entry+0x10/0x10
[  250.856867][ T8380]  ? __pfx__copy_to_iter+0x10/0x10
[  250.856884][ T8380]  ? shmem_get_folio_gfp+0xb64/0x1660
[  250.856913][ T8380]  ? page_copy_sane+0x4e/0x280
[  250.856933][ T8380]  copy_page_to_iter+0x10c/0x1c0
[  250.856955][ T8380]  shmem_file_read_iter+0x528/0x930
[  250.856992][ T8380]  vfs_read+0x557/0xa30
[  250.857011][ T8380]  ? fdget_pos+0x247/0x320
[  250.857033][ T8380]  ? __pfx_vfs_read+0x10/0x10
[  250.857064][ T8380]  ? __fget_files+0x2a/0x420
[  250.857087][ T8380]  ksys_read+0x145/0x250
[  250.857108][ T8380]  ? __pfx_ksys_read+0x10/0x10
[  250.857130][ T8380]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.857150][ T8380]  __do_fast_syscall_32+0xb6/0x2b0
[  250.857168][ T8380]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.857188][ T8380]  do_fast_syscall_32+0x34/0x80
[  250.857213][ T8380]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  250.857230][ T8380] RIP: 0023:0xf7f76539
[  250.857245][ T8380] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  250.857258][ T8380] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  250.857275][ T8380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000740
[  250.857286][ T8380] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000
[  250.857297][ T8380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  250.857306][ T8380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  250.857316][ T8380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  250.857342][ T8380]  </TASK>
[  251.711905][ T8384] netlink: 44 bytes leftover after parsing attributes in process `syz.4.609'.
[  252.146748][ T5938] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  252.192345][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'.
[  252.714942][ T5938] usb 6-1: Using ep0 maxpacket: 16
[  252.729092][ T5938] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  252.739298][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.749803][ T5938] usb 6-1: Product: syz
[  252.757882][ T5938] usb 6-1: Manufacturer: syz
[  252.762680][ T5938] usb 6-1: SerialNumber: syz
[  252.791750][ T5938] usb 6-1: config 0 descriptor??
[  252.823857][ T5938] as10x_usb: device has been detected
[  252.853950][ T5938] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  253.021088][ T8386] random: crng reseeded on system resumption
[  253.065988][ T5938] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  253.158213][ T5938] as10x_usb: error during firmware upload part1
[  253.187191][ T5938] Registered device Sky IT Digital Key (green led)
[  253.207045][ T8403] sock: sock_timestamping_bind_phc: sock not bind to device
[  254.620895][ T8414] netlink: 56 bytes leftover after parsing attributes in process `syz.2.618'.
[  254.647140][ T8414] netlink: 56 bytes leftover after parsing attributes in process `syz.2.618'.
[  254.710923][   T24] usb 6-1: USB disconnect, device number 15
[  254.727360][   T24] Unregistered device Sky IT Digital Key (green led)
[  254.733527][   T24] as10x_usb: device has been disconnected
[  255.294644][ T8418] syzkaller0: entered promiscuous mode
[  255.304579][ T8418] syzkaller0: entered allmulticast mode
[  255.606591][ T8424] netlink: 'syz.6.622': attribute type 1 has an invalid length.
[  255.679391][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.686121][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  255.726033][    T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  256.204023][    T9] dvb_usb_az6027 1-1:4.163: probe with driver dvb_usb_az6027 failed with error -110
[  256.787325][    T9] dvb-usb: found a 'Technisat SkyStar USB 2 HD CI' in cold state, will try to load a firmware
[  257.074911][    T9] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  257.083809][    T9] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  257.222092][ T8446] netlink: 44 bytes leftover after parsing attributes in process `syz.6.626'.
[  257.702373][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'.
[  259.418969][ T8473] fuse: Unknown parameter 'g'
[  259.661061][ T8477] bridge0: entered allmulticast mode
[  260.268830][ T8487] netlink: 'syz.0.636': attribute type 1 has an invalid length.
[  260.713318][ T5938] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  260.830188][ T8492] netlink: 44 bytes leftover after parsing attributes in process `syz.6.646'.
[  260.905167][ T5938] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  260.914248][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.976270][ T5938] usb 6-1: config 0 descriptor??
[  260.992977][ T5938] cp210x 6-1:0.0: cp210x converter detected
[  261.187327][ T8490] netlink: 48 bytes leftover after parsing attributes in process `syz.5.637'.
[  261.247151][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.637'.
[  261.837616][ T5938] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  261.974205][ T5938] cp210x 6-1:0.0: querying part number failed
[  262.115444][ T5938] usb 6-1: cp210x converter now attached to ttyUSB0
[  262.153280][ T5938] usb 6-1: USB disconnect, device number 16
[  262.198780][ T5938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  262.316864][ T5938] cp210x 6-1:0.0: device disconnected
[  264.385002][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  264.615164][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.637778][   T30] audit: type=1326 audit(1758388626.792:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.6.649" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x0
[  264.689275][   T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  264.722513][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  264.754921][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.771872][   T10] usb 6-1: config 0 descriptor??
[  264.850715][ T8535] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[8535]
[  265.322951][   T10] usb 6-1: USB disconnect, device number 17
[  265.714833][ T5972] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  266.026951][ T5972] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  266.070329][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.115903][ T5972] usb 3-1: config 0 descriptor??
[  266.128487][ T5972] cp210x 3-1:0.0: cp210x converter detected
[  266.303987][ T8553] pim6reg: entered allmulticast mode
[  266.340902][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.6.655'.
[  266.355002][ T8543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.654'.
[  266.364930][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'.
[  266.436207][ T5972] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  266.512038][ T5972] cp210x 3-1:0.0: querying part number failed
[  266.579835][ T5972] usb 3-1: cp210x converter now attached to ttyUSB0
[  266.610292][ T5972] usb 3-1: USB disconnect, device number 25
[  266.636086][ T1778] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  266.645204][ T8556] FAULT_INJECTION: forcing a failure.
[  266.645204][ T8556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.698437][ T8558] netlink: 14 bytes leftover after parsing attributes in process `syz.4.658'.
[  266.710494][ T5972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  266.732133][ T5972] cp210x 3-1:0.0: device disconnected
[  266.749232][ T8556] CPU: 0 UID: 0 PID: 8556 Comm: syz.0.657 Not tainted syzkaller #0 PREEMPT(full) 
[  266.749255][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  266.749266][ T8556] Call Trace:
[  266.749273][ T8556]  <TASK>
[  266.749280][ T8556]  dump_stack_lvl+0x189/0x250
[  266.749304][ T8556]  ? __pfx____ratelimit+0x10/0x10
[  266.749321][ T8556]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.749340][ T8556]  ? __pfx__printk+0x10/0x10
[  266.749364][ T8556]  ? __pfx___mutex_lock+0x10/0x10
[  266.749389][ T8556]  should_fail_ex+0x414/0x560
[  266.749417][ T8556]  _copy_to_user+0x31/0xb0
[  266.749448][ T8556]  ucma_query+0xe62/0x1280
[  266.749479][ T8556]  ? __pfx_ucma_query+0x10/0x10
[  266.749534][ T8556]  ? aa_file_perm+0x13a/0x1550
[  266.749567][ T8556]  ? __lock_acquire+0xab9/0xd20
[  266.749598][ T8556]  ? __might_fault+0xb0/0x130
[  266.749641][ T8556]  ucma_write+0x249/0x2e0
[  266.749667][ T8556]  ? __pfx_ucma_write+0x10/0x10
[  266.749683][ T8556]  ? security_file_permission+0x75/0x290
[  266.749706][ T8556]  ? rw_verify_area+0x255/0x4d0
[  266.749724][ T8556]  ? __lock_acquire+0xab9/0xd20
[  266.749743][ T8556]  ? __pfx_ucma_write+0x10/0x10
[  266.749762][ T8556]  vfs_write+0x27b/0xb30
[  266.749792][ T8556]  ? __pfx_vfs_write+0x10/0x10
[  266.749815][ T8556]  ? __fget_files+0x2a/0x420
[  266.749834][ T8556]  ? __fget_files+0x2a/0x420
[  266.749847][ T8556]  ? __fget_files+0x3a0/0x420
[  266.749860][ T8556]  ? __fget_files+0x2a/0x420
[  266.749884][ T8556]  ksys_write+0x145/0x250
[  266.749907][ T8556]  ? __pfx_ksys_write+0x10/0x10
[  266.749931][ T8556]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.749951][ T8556]  __do_fast_syscall_32+0xb6/0x2b0
[  266.749969][ T8556]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.749995][ T8556]  do_fast_syscall_32+0x34/0x80
[  266.750012][ T8556]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  266.750030][ T8556] RIP: 0023:0xf706e539
[  266.750046][ T8556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  266.750059][ T8556] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  266.750077][ T8556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  266.750089][ T8556] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000
[  266.750099][ T8556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  266.750109][ T8556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  266.750119][ T8556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  266.750146][ T8556]  </TASK>
[  267.115014][ T1778] usb 6-1: Using ep0 maxpacket: 8
[  267.183921][ T1778] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  267.197635][ T1778] usb 6-1: config 179 has no interface number 0
[  267.203915][ T1778] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  267.215547][ T1778] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  267.227052][ T1778] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  267.239080][ T1778] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  267.250592][ T1778] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  267.263892][ T1778] usb 6-1: config 179 interface 65 has no altsetting 0
[  267.271631][ T1778] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  267.284025][ T1778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.303524][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'.
[  267.400991][ T1778] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9
[  267.432172][ T8563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.660'.
[  267.465204][ T5220] input input9: unable to receive magic message: -110
[  267.515305][ T8563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.660'.
[  267.694827][ T5220] input input9: unable to receive magic message: -32
[  268.048566][ T8558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.071282][ T8558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.091264][ T8558] bond0 (unregistering): Released all slaves
[  268.687468][ T8583] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  269.755804][ T5930] usb 6-1: USB disconnect, device number 18
[  269.755867][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  270.531244][ T8612] syzkaller0: entered promiscuous mode
[  270.540408][ T8612] syzkaller0: entered allmulticast mode
[  270.575928][ T8610] fuse: Bad value for 'fd'
[  270.595367][ T8602] netlink: 44 bytes leftover after parsing attributes in process `syz.6.669'.
[  270.813607][   T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  271.107528][   T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  271.119245][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.163682][   T24] usb 6-1: config 0 descriptor??
[  271.171204][   T24] cp210x 6-1:0.0: cp210x converter detected
[  271.277752][ T8614] netlink: 44 bytes leftover after parsing attributes in process `syz.4.672'.
[  271.384643][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'.
[  271.410558][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'.
[  272.264789][   T24] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  272.324190][   T24] cp210x 6-1:0.0: querying part number failed
[  272.359080][   T24] usb 6-1: cp210x converter now attached to ttyUSB0
[  272.483254][   T24] usb 6-1: USB disconnect, device number 19
[  272.523491][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  272.532014][   T24] cp210x 6-1:0.0: device disconnected
[  273.782590][ T8647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.680'.
[  274.783910][ T8652] netlink: 'syz.2.683': attribute type 1 has an invalid length.
[  275.285009][ T5938] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  275.476747][ T5938] usb 5-1: Using ep0 maxpacket: 32
[  275.483328][ T5938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.509229][ T5938] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c
[  275.528290][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.545775][ T5938] usb 5-1: Product: syz
[  275.555074][ T5938] usb 5-1: Manufacturer: syz
[  275.561442][ T5938] usb 5-1: SerialNumber: syz
[  275.601337][ T8671] fuse: Bad value for 'group_id'
[  275.618442][ T8671] fuse: Bad value for 'group_id'
[  275.652505][ T8671] netlink: 44 bytes leftover after parsing attributes in process `syz.5.684'.
[  276.580946][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.2.689'.
[  276.726632][ T5938] empeg 5-1:1.0: empeg converter detected
[  276.744977][ T5938] empeg 5-1:1.0: probe with driver empeg failed with error -71
[  276.805449][ T5938] usb 5-1: USB disconnect, device number 17
[  277.260388][ T8689] FAULT_INJECTION: forcing a failure.
[  277.260388][ T8689] name failslab, interval 1, probability 0, space 0, times 0
[  277.282670][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.6.694 Not tainted syzkaller #0 PREEMPT(full) 
[  277.282694][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  277.282704][ T8689] Call Trace:
[  277.282711][ T8689]  <TASK>
[  277.282719][ T8689]  dump_stack_lvl+0x189/0x250
[  277.282745][ T8689]  ? __pfx____ratelimit+0x10/0x10
[  277.282764][ T8689]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.282783][ T8689]  ? __pfx__printk+0x10/0x10
[  277.282807][ T8689]  ? __pfx___might_resched+0x10/0x10
[  277.282824][ T8689]  ? fs_reclaim_acquire+0x7d/0x100
[  277.282845][ T8689]  should_fail_ex+0x414/0x560
[  277.282872][ T8689]  should_failslab+0xa8/0x100
[  277.282895][ T8689]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  277.282917][ T8689]  ? __alloc_skb+0x112/0x2d0
[  277.282939][ T8689]  __alloc_skb+0x112/0x2d0
[  277.282962][ T8689]  alloc_skb_with_frags+0xca/0x890
[  277.282983][ T8689]  ? get_page_from_freelist+0x21e4/0x22c0
[  277.283011][ T8689]  sock_alloc_send_pskb+0x857/0x990
[  277.283051][ T8689]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  277.283077][ T8689]  ? dev_get_by_index+0x22/0x2e0
[  277.283098][ T8689]  ? dev_get_by_index+0x22/0x2e0
[  277.283134][ T8689]  packet_sendmsg+0x33a0/0x5080
[  277.283166][ T8689]  ? aa_label_strn_parse+0x700/0x1090
[  277.283204][ T8689]  ? __pfx___might_resched+0x10/0x10
[  277.283217][ T8689]  ? __lock_acquire+0xab9/0xd20
[  277.283250][ T8689]  ? __pfx_packet_sendmsg+0x10/0x10
[  277.283266][ T8689]  ? aa_sk_perm+0x81e/0x950
[  277.283293][ T8689]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  277.283315][ T8689]  ? aa_sock_msg_perm+0xf1/0x1d0
[  277.283334][ T8689]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  277.283352][ T8689]  ? __pfx_packet_sendmsg+0x10/0x10
[  277.283373][ T8689]  __sock_sendmsg+0x21c/0x270
[  277.283399][ T8689]  __sys_sendto+0x3bd/0x520
[  277.283419][ T8689]  ? __pfx___sys_sendto+0x10/0x10
[  277.283434][ T8689]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  277.283465][ T8689]  ? __fget_files+0x3a0/0x420
[  277.283490][ T8689]  ? ksys_write+0x22a/0x250
[  277.283520][ T8689]  __ia32_sys_sendto+0xdd/0x100
[  277.283543][ T8689]  __do_fast_syscall_32+0xb6/0x2b0
[  277.283563][ T8689]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.283584][ T8689]  do_fast_syscall_32+0x34/0x80
[  277.283603][ T8689]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  277.283622][ T8689] RIP: 0023:0xf702e539
[  277.283637][ T8689] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  277.283652][ T8689] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  277.283674][ T8689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  277.283687][ T8689] RDX: 0000000000000012 RSI: 00000000100088c1 RDI: 0000000080002780
[  277.283698][ T8689] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  277.283708][ T8689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  277.283718][ T8689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  277.283743][ T8689]  </TASK>
[  277.595927][ T8694] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  278.444766][ T5872] Bluetooth: hci5: command 0x0406 tx timeout
[  278.457385][ T8706] netlink: 'syz.5.699': attribute type 1 has an invalid length.
[  279.447987][ T8719] FAULT_INJECTION: forcing a failure.
[  279.447987][ T8719] name failslab, interval 1, probability 0, space 0, times 0
[  279.524786][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.4.702 Not tainted syzkaller #0 PREEMPT(full) 
[  279.524810][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  279.524821][ T8719] Call Trace:
[  279.524828][ T8719]  <TASK>
[  279.524836][ T8719]  dump_stack_lvl+0x189/0x250
[  279.524861][ T8719]  ? __pfx____ratelimit+0x10/0x10
[  279.524880][ T8719]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.524900][ T8719]  ? __pfx__printk+0x10/0x10
[  279.524925][ T8719]  ? __pfx___might_resched+0x10/0x10
[  279.524942][ T8719]  ? fs_reclaim_acquire+0x7d/0x100
[  279.524964][ T8719]  should_fail_ex+0x414/0x560
[  279.524999][ T8719]  should_failslab+0xa8/0x100
[  279.525023][ T8719]  __kmalloc_cache_noprof+0x70/0x3d0
[  279.525045][ T8719]  ? ppp_register_net_channel+0x58/0x610
[  279.525068][ T8719]  ppp_register_net_channel+0x58/0x610
[  279.525090][ T8719]  ppp_asynctty_open+0x3a4/0x570
[  279.525114][ T8719]  tty_ldisc_open+0x9e/0x100
[  279.525135][ T8719]  tty_set_ldisc+0x373/0x560
[  279.525155][ T8719]  tty_ioctl+0xc38/0xde0
[  279.525174][ T8719]  __ia32_compat_sys_ioctl+0x540/0x840
[  279.525198][ T8719]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  279.525218][ T8719]  ? __fget_files+0x3a0/0x420
[  279.525241][ T8719]  ? fput+0xa0/0xd0
[  279.525259][ T8719]  ? ksys_write+0x22a/0x250
[  279.525294][ T8719]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.525316][ T8719]  __do_fast_syscall_32+0xb6/0x2b0
[  279.525335][ T8719]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.525357][ T8719]  do_fast_syscall_32+0x34/0x80
[  279.525375][ T8719]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  279.525392][ T8719] RIP: 0023:0xf709e539
[  279.525406][ T8719] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  279.525419][ T8719] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  279.525436][ T8719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005423
[  279.525447][ T8719] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  279.525456][ T8719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  279.525466][ T8719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  279.525476][ T8719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  279.525502][ T8719]  </TASK>
[  280.057462][ T8722] syzkaller0: entered promiscuous mode
[  280.062990][ T8722] syzkaller0: entered allmulticast mode
[  280.366394][ T8734] fuse: Bad value for 'group_id'
[  280.371392][ T8734] fuse: Bad value for 'group_id'
[  280.381030][ T8734] netlink: 44 bytes leftover after parsing attributes in process `syz.5.700'.
[  280.403054][ T5972] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  280.632677][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.656658][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.705126][ T5972] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  280.714200][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.729494][ T5972] usb 3-1: config 0 descriptor??
[  280.834916][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  280.985081][   T10] usb 7-1: Using ep0 maxpacket: 16
[  281.005794][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.072173][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.134097][   T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  281.160002][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.171329][   T10] usb 7-1: Product: 旒묮휴ᢱ젿냊ᅵ횣秚턷ᅃ⎴꿺ұ踟帠聎蟃ꧾ㓡匰几嶶䇕鿇玹낀蜦얉쬪蟈㴈儹刻䏋㱺첗欄ꠐ锲彃嫲侼潹෬耶뺽㌮죗Ᏸ燡ꋖ핼訲㴓㷄砍测Ⲣ溋苩̜總升ꢕꚂ췞刀蔃㰧䍷嫂넏샪폰癜돢㦔뗩釮킆献
[  281.230226][ T5972] usbhid 3-1:0.0: can't add hid device: -71
[  281.245720][ T5972] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  281.322512][ T5972] usb 3-1: USB disconnect, device number 26
[  281.332255][   T10] usb 7-1: Manufacturer: ъ
[  281.340332][   T10] usb 7-1: SerialNumber: О
[  281.640952][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.684164][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.738936][   T10] usb 7-1: 0:2 : does not exist
[  281.779664][   T10] usb 7-1: USB disconnect, device number 10
[  281.826250][ T8754] netlink: 'syz.0.712': attribute type 1 has an invalid length.
[  281.936111][ T5972] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  282.096776][ T5972] usb 5-1: unable to get BOS descriptor or descriptor too short
[  282.548589][ T5972] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.570971][ T5972] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  282.582888][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.592005][ T5972] usb 5-1: Product: syz
[  282.596617][ T5972] usb 5-1: Manufacturer: syz
[  282.603406][ T5972] usb 5-1: SerialNumber: syz
[  282.891074][ T8764] netlink: 'syz.0.725': attribute type 1 has an invalid length.
[  282.911200][ T8775] netlink: 48 bytes leftover after parsing attributes in process `syz.5.715'.
[  283.354863][ T5872] Bluetooth: hci6: command 0x0406 tx timeout
[  283.561954][ T8786] pim6reg: entered allmulticast mode
[  284.069965][ T5937] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  284.435198][ T5937] usb 3-1: Using ep0 maxpacket: 8
[  284.801982][ T8792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.718'.
[  284.833907][ T5937] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  284.842443][ T5937] usb 3-1: config 179 has no interface number 0
[  284.854289][ T5937] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  284.879468][ T5937] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  285.014861][ T5937] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  285.077574][ T5937] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  285.192104][ T5937] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  285.208203][ T5972] usb 5-1: USB disconnect, device number 18
[  285.287490][ T5937] usb 3-1: config 179 interface 65 has no altsetting 0
[  285.344866][ T5937] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  285.493110][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.606346][ T5937] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10
[  285.655085][ T5220] input input10: unable to receive magic message: -110
[  285.677849][ T5220] input input10: unable to receive magic message: -32
[  285.686521][ T5220] input input10: unable to receive magic message: -32
[  285.694525][ T5220] input input10: unable to receive magic message: -32
[  285.815991][ T8786] input input10: unable to receive magic message: -32
[  285.894803][ T5972] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  285.931272][ T5937] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  286.190529][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.213937][ T5972] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  286.259647][ T5972] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[  286.264958][ T5937] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  286.297777][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.331987][ T5972] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  286.332010][ T5937] usb 7-1: config 0 descriptor??
[  286.344105][ T5972] usb 5-1: config 0 interface 0 has no altsetting 1
[  286.347641][ T8805] fuse: Bad value for 'group_id'
[  286.359136][ T8805] fuse: Bad value for 'group_id'
[  286.374916][ T5972] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6
[  286.398167][ T8805] netlink: 44 bytes leftover after parsing attributes in process `syz.5.719'.
[  286.417030][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.438222][ T5937] cp210x 7-1:0.0: cp210x converter detected
[  286.490699][ T5972] usb 5-1: config 0 descriptor??
[  286.638877][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.721'.
[  286.776141][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.721'.
[  286.865541][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.721'.
[  286.997857][   T24] usb 3-1: USB disconnect, device number 27
[  287.003825][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  287.020257][ T5937] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71
[  287.076430][ T5937] cp210x 7-1:0.0: querying part number failed
[  287.123061][ T5937] usb 7-1: cp210x converter now attached to ttyUSB0
[  287.188583][ T5937] usb 7-1: USB disconnect, device number 11
[  287.224990][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  287.233923][ T5937] cp210x 7-1:0.0: device disconnected
[  288.183081][ T5937] usb 5-1: USB disconnect, device number 19
[  288.330660][ T8827] trusted_key: syz.6.727 sent an empty control message without MSG_MORE.
[  290.935662][   T31] INFO: task syz.3.210:6849 blocked for more than 143 seconds.
[  290.974870][ T5937] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  290.982592][   T31]       Not tainted syzkaller #0
[  291.016724][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  291.257738][   T31] task:syz.3.210       state:D stack:28296 pid:6849  tgid:6848  ppid:5882   task_flags:0x400040 flags:0x20004004
[  291.274997][   T31] Call Trace:
[  291.278435][   T31]  <TASK>
[  291.282547][   T31]  __schedule+0x1798/0x4cc0
[  291.414969][   T31]  ? __pfx___schedule+0x10/0x10
[  291.417846][ T5937] usb 3-1: config 0 has an invalid interface number: 248 but max is 0
[  291.420107][   T31]  ? schedule+0x91/0x360
[  291.433113][   T31]  schedule+0x165/0x360
[  291.437619][   T31]  schedule_preempt_disabled+0x13/0x30
[  291.443271][   T31]  __mutex_lock+0x7e6/0x1350
[  291.453716][   T31]  ? __mutex_lock+0x5bb/0x1350
[  291.457805][ T5937] usb 3-1: config 0 has no interface number 0
[  291.459090][   T31]  ? usbdev_open+0x16e/0x760
[  291.469670][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  291.478301][   T31]  ? bus_find_device+0x273/0x2b0
[  291.658958][   T31]  ? __pfx_bus_find_device+0x10/0x10
[  291.660315][ T5937] usb 3-1: New USB device found, idVendor=0af0, idProduct=7501, bcdDevice= 0.00
[  291.705939][   T31]  ? __kasan_kmalloc+0x93/0xb0
[  291.720603][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.724814][   T31]  ? usbdev_open+0xa7/0x760
[  291.744434][ T5937] usb 3-1: Product: syz
[  291.753289][ T5937] usb 3-1: Manufacturer: syz
[  291.763737][ T5937] usb 3-1: SerialNumber: syz
[  291.785084][ T5937] usb 3-1: config 0 descriptor??
[  291.793412][   T31]  usbdev_open+0x16e/0x760
[  291.809598][ T5937] hso 3-1:0.248: Not our interface
[  291.825693][   T31]  ? __pfx_usbdev_open+0x10/0x10
[  291.833458][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  291.839833][   T31]  chrdev_open+0x4c9/0x5e0
[  291.844341][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  291.852014][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  291.859258][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  291.864204][   T31]  do_dentry_open+0x950/0x13f0
[  291.876173][   T31]  vfs_open+0x3b/0x340
[  291.891688][   T31]  ? path_openat+0x2ecd/0x3830
[  291.897101][ T5937] usb-storage 3-1:0.248: USB Mass Storage device detected
[  291.935747][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.5.734'.
[  291.948707][   T31]  path_openat+0x2ee5/0x3830
[  291.988691][   T31]  ? arch_stack_walk+0xfc/0x150
[  292.007131][   T31]  ? stack_depot_save_flags+0x40/0x860
[  292.012658][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  292.041320][   T31]  ? __pfx_path_openat+0x10/0x10
[  292.046618][   T31]  ? do_fast_syscall_32+0x34/0x80
[  292.051755][   T31]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  292.058666][   T31]  do_filp_open+0x1fa/0x410
[  292.063302][   T31]  ? __lock_acquire+0xab9/0xd20
[  292.068530][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  292.135487][   T31]  ? _raw_spin_unlock+0x28/0x50
[  292.140369][   T31]  ? alloc_fd+0x64c/0x6c0
[  292.144691][   T31]  do_sys_openat2+0x121/0x1c0
[  292.254934][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  292.274960][   T31]  __ia32_compat_sys_openat+0x131/0x160
[  292.281909][   T31]  __do_fast_syscall_32+0xb6/0x2b0
[  292.301023][   T31]  do_fast_syscall_32+0x34/0x80
[  292.311444][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  292.322288][   T31] RIP: 0023:0xf7fa1539
[  292.330861][   T31] RSP: 002b:00000000f54a6100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  292.344559][   T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6150
[  292.352695][   T31] RDX: 000000000000a401 RSI: 0000000000000000 RDI: 00000000f7434ff4
[  292.364825][   T31] RBP: 000000000000a401 R08: 0000000000000000 R09: 0000000000000000
[  292.372909][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  292.384975][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  292.393145][   T31]  </TASK>
[  292.408128][   T31] INFO: task syz.1.227:6902 blocked for more than 144 seconds.
[  292.434493][   T31]       Not tainted syzkaller #0
[  292.439694][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  292.450545][   T31] task:syz.1.227       state:D stack:24200 pid:6902  tgid:6901  ppid:5883   task_flags:0x400040 flags:0x20004004
[  292.469974][   T31] Call Trace:
[  292.473367][   T31]  <TASK>
[  292.480002][   T31]  __schedule+0x1798/0x4cc0
[  292.484619][   T31]  ? __pfx___schedule+0x10/0x10
[  292.492180][   T31]  ? schedule+0x91/0x360
[  292.496814][   T31]  schedule+0x165/0x360
[  292.501065][   T31]  schedule_preempt_disabled+0x13/0x30
[  292.506718][   T31]  __mutex_lock+0x7e6/0x1350
[  292.511664][   T31]  ? __mutex_lock+0x5bb/0x1350
[  292.516730][   T31]  ? usbdev_open+0x16e/0x760
[  292.521518][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  292.526629][   T31]  ? bus_find_device+0x273/0x2b0
[  292.532345][   T31]  ? __pfx_bus_find_device+0x10/0x10
[  292.537975][   T31]  ? __kasan_kmalloc+0x93/0xb0
[  292.542787][   T31]  ? usbdev_open+0xa7/0x760
[  292.547360][   T31]  usbdev_open+0x16e/0x760
[  292.551878][   T31]  ? __pfx_usbdev_open+0x10/0x10
[  292.556988][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  292.562229][   T31]  chrdev_open+0x4c9/0x5e0
[  292.566733][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  292.571686][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  292.578072][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  292.583019][   T31]  do_dentry_open+0x950/0x13f0
[  292.588116][   T31]  vfs_open+0x3b/0x340
[  292.592194][   T31]  ? path_openat+0x2ecd/0x3830
[  292.597123][   T31]  path_openat+0x2ee5/0x3830
[  292.604870][   T31]  ? arch_stack_walk+0xfc/0x150
[  292.609809][   T31]  ? stack_depot_save_flags+0x40/0x860
[  292.615483][   T31]  ? __pfx_path_openat+0x10/0x10
[  292.620443][   T31]  ? do_fast_syscall_32+0x34/0x80
[  292.625583][   T31]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  292.632119][   T31]  do_filp_open+0x1fa/0x410
[  292.637414][   T31]  ? __lock_acquire+0xab9/0xd20
[  292.642298][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  292.647407][   T31]  ? _raw_spin_unlock+0x28/0x50
[  292.652278][   T31]  ? alloc_fd+0x64c/0x6c0
[  292.656690][   T31]  do_sys_openat2+0x121/0x1c0
[  292.661387][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  292.666666][   T31]  ? __pfx___se_sys_futex_time32+0x10/0x10
[  292.672490][   T31]  __ia32_compat_sys_openat+0x131/0x160
[  292.678087][   T31]  __do_fast_syscall_32+0xb6/0x2b0
[  292.683214][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.688505][   T31]  do_fast_syscall_32+0x34/0x80
[  292.693368][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  292.699982][   T31] RIP: 0023:0xf7f37539
[  292.704063][   T31] RSP: 002b:00000000f5436100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  292.712592][   T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5436150
[  292.725636][   T31] RDX: 0000000000163f42 RSI: 0000000000000000 RDI: 00000000f73c4ff4
[  292.733831][   T31] RBP: 0000000000163f42 R08: 0000000000000000 R09: 0000000000000000
[  292.742519][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  292.750593][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  292.758610][   T31]  </TASK>
[  292.761676][   T31] 
[  292.761676][   T31] Showing all locks held in the system:
[  292.771145][   T31] 6 locks held by kworker/0:0/9:
[  292.785458][   T31]  #0: ffff888144aa1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  292.797028][   T31]  #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  292.809243][   T31]  #2: ffff888027e80198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  292.818272][   T31]  #3: ffff888057460198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  292.823472][ T5937] usb 3-1: USB disconnect, device number 28
[  292.827703][   T31]  #4: ffff88807de73160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  292.843821][   T31]  #5: ffffffff8dfe0510 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0
[  292.854441][   T31] 1 lock held by khungtaskd/31:
[  292.859494][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  292.869536][   T31] 2 locks held by getty/5625:
[  292.874302][   T31]  #0: ffff88803387e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  292.885926][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  292.896200][   T31] 1 lock held by syz-executor/5879:
[  292.901455][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  292.911656][   T31] 3 locks held by kworker/1:4/5937:
[  292.916931][   T31]  #0: ffff888144aa1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  292.929428][   T31]  #1: ffffc9000453fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  292.942111][   T31]  #2: ffff888145b58198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  292.951079][   T31] 4 locks held by udevd/6257:
[  292.955912][   T31]  #0: ffff888057c0c668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  292.965046][   T31]  #1: ffff8880570dcc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  292.974496][   T31]  #2: ffff8880415403c8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  292.984211][   T31]  #3: ffff888057460198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  292.993620][   T31] 1 lock held by syz.3.210/6849:
[  292.998874][   T31]  #0: ffff888027e80198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[  293.008514][   T31] 1 lock held by syz.1.227/6902:
[  293.013465][   T31]  #0: ffff888027e80198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[  293.022567][   T31] 1 lock held by syz-executor/7058:
[  293.028039][   T31]  #0: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  293.039185][   T31] 1 lock held by syz.2.730/8836:
[  293.044831][   T31]  #0: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  293.054890][   T31] 1 lock held by syz.0.733/8860:
[  293.059835][   T31]  #0: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  293.069904][   T31] 
[  293.072248][   T31] =============================================
[  293.072248][   T31] 
[  293.083420][   T31] NMI backtrace for cpu 0
[  293.083438][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  293.083457][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  293.083467][   T31] Call Trace:
[  293.083475][   T31]  <TASK>
[  293.083483][   T31]  dump_stack_lvl+0x189/0x250
[  293.083510][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.083530][   T31]  ? __pfx__printk+0x10/0x10
[  293.083563][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  293.083589][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  293.083613][   T31]  ? __pfx__printk+0x10/0x10
[  293.083638][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  293.083665][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  293.083720][   T31]  watchdog+0xf93/0xfe0
[  293.083747][   T31]  ? watchdog+0x1de/0xfe0
[  293.083772][   T31]  kthread+0x70e/0x8a0
[  293.083795][   T31]  ? __pfx_watchdog+0x10/0x10
[  293.083815][   T31]  ? __pfx_kthread+0x10/0x10
[  293.083836][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.083858][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.083874][   T31]  ? __pfx_kthread+0x10/0x10
[  293.083895][   T31]  ret_from_fork+0x439/0x7d0
[  293.083914][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  293.083936][   T31]  ? __switch_to_asm+0x39/0x70
[  293.083955][   T31]  ? __switch_to_asm+0x33/0x70
[  293.083973][   T31]  ? __pfx_kthread+0x10/0x10
[  293.083993][   T31]  ret_from_fork_asm+0x1a/0x30
[  293.084027][   T31]  </TASK>
[  293.084035][   T31] Sending NMI from CPU 0 to CPUs 1:
[  293.229170][    C1] NMI backtrace for cpu 1
[  293.229188][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  293.229205][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  293.229215][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  293.229236][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  293.229250][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2
[  293.229264][    C1] RAX: 67dc8834b21b7f00 RBX: ffffffff819683f8 RCX: 67dc8834b21b7f00
[  293.229276][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba2fc RDI: ffffffff8be33f80
[  293.229287][    C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3
[  293.229299][    C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a730
[  293.229310][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40
[  293.229321][    C1] FS:  0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000
[  293.229334][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  293.229345][    C1] CR2: 00000000569539bc CR3: 0000000020bd8000 CR4: 00000000003526f0
[  293.229359][    C1] Call Trace:
[  293.229366][    C1]  <TASK>
[  293.229372][    C1]  default_idle+0x13/0x20
[  293.229389][    C1]  default_idle_call+0x74/0xb0
[  293.229406][    C1]  do_idle+0x1e8/0x510
[  293.229424][    C1]  ? __pfx_do_idle+0x10/0x10
[  293.229446][    C1]  cpu_startup_entry+0x44/0x60
[  293.229460][    C1]  start_secondary+0x101/0x110
[  293.229480][    C1]  common_startup_64+0x13e/0x147
[  293.229505][    C1]  </TASK>
[  293.403834][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  293.410719][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  293.419843][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  293.429914][   T31] Call Trace:
[  293.433192][   T31]  <TASK>
[  293.436114][   T31]  dump_stack_lvl+0x99/0x250
[  293.440700][   T31]  ? __asan_memcpy+0x40/0x70
[  293.445277][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.450461][   T31]  ? __pfx__printk+0x10/0x10
[  293.455055][   T31]  vpanic+0x281/0x750
[  293.459039][   T31]  ? __pfx_vpanic+0x10/0x10
[  293.463530][   T31]  ? preempt_schedule+0xae/0xc0
[  293.468368][   T31]  ? preempt_schedule_common+0x83/0xd0
[  293.473815][   T31]  panic+0xb9/0xc0
[  293.477520][   T31]  ? __pfx_panic+0x10/0x10
[  293.481945][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  293.487332][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  293.493491][   T31]  watchdog+0xfd2/0xfe0
[  293.497649][   T31]  ? watchdog+0x1de/0xfe0
[  293.502006][   T31]  kthread+0x70e/0x8a0
[  293.506065][   T31]  ? __pfx_watchdog+0x10/0x10
[  293.510731][   T31]  ? __pfx_kthread+0x10/0x10
[  293.515309][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.520499][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.525681][   T31]  ? __pfx_kthread+0x10/0x10
[  293.530258][   T31]  ret_from_fork+0x439/0x7d0
[  293.534837][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  293.539940][   T31]  ? __switch_to_asm+0x39/0x70
[  293.544695][   T31]  ? __switch_to_asm+0x33/0x70
[  293.549448][   T31]  ? __pfx_kthread+0x10/0x10
[  293.554023][   T31]  ret_from_fork_asm+0x1a/0x30
[  293.558787][   T31]  </TASK>
[  293.562066][   T31] Kernel Offset: disabled
[  293.566377][   T31] Rebooting in 86400 seconds..