last executing test programs:

10.515275355s ago: executing program 1 (id=2449):
dup(0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e821b800020428bd7000fcdbff"], 0x48}, 0x1, 0x0, 0x0, 0x20048011}, 0x44081) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x244740, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_NMI(r4, 0xae9a) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x8, 0x7f80, 0x0, 0x6, 0x51, 0x0, 0x76], 0x0, 0x100202})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0xe, 0x7, 0x0, 0x9, 0x3, 0x7f, 0x9, 0x62, 0x81, 0x7, 0xc, 0x0, 0x3ff, 0x7, 0x7, 0x2, 0xcd, 0x1, '\x00', 0xe, 0x84}) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x4, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = dup(r1) (async)
r6 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) (async)
io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0)

10.052833059s ago: executing program 3 (id=2451):
r0 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0xfffffffc, 0x10}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000500)={0x1000010}, 0x1)
socket(0x10, 0x3, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x94000001)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ptrace(0x10, 0x1)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, 0x0, 0x400)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x3, 0x78, 0xfff6, 0x0, 0x66ba, 0x40000040, r5})

9.788287431s ago: executing program 1 (id=2453):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c22, 0x2, 0x0, 0x17f}, &(0x7f00000002c0), &(0x7f00000001c0))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff})
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_setup(0x4082, &(0x7f0000000380))
syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0))
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
io_setup(0x1, &(0x7f0000000280))
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r2, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf)
openat$tun(0xffffff9c, &(0x7f0000000240), 0x104100, 0x0)

8.140892168s ago: executing program 3 (id=2457):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000001000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

7.858073016s ago: executing program 1 (id=2458):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfdd4}]}}}]}]}], {0x14}}, 0xf8}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x20)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x7}], 0x1c)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x2338, 0x9, 0xb, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x0, 0x6}, [@nested={0x1099, 0x10c, 0x0, 0x1, [@typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x19}, @generic="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", @generic="a51c444d4bf55af1c026d4d9885207bb18b51c183b4a45213a6e28214fa0aadfea05068da50bddf488873dca6e497f9ac5b1f92cedf2ccb02095c87dd764e0bf031dba55103aded09674afc39b19c20647757c000f4688b17a36d28fe3a7c4d07651367542d296ca07"]}, @nested={0x8, 0xa6, 0x0, 0x1, [@nested={0x4, 0x5d}]}, @nested={0x88, 0xa1, 0x0, 0x1, [@typed={0x84, 0xe8, 0x0, 0x0, @binary="8d90dd292f54f93c1916591002faa43d3f19269eae10abe498229cbb1d19ca4fbbb5689c98cb2179b5d06f27930a7607a9fdcbb46e5fd10e4236cff5c282bd86d1abf775d708f36e385da6f81d4982574f2e5d9e124cb6b80c6815d07a2f9f22516395dcab555eb43266d494ababab5eaf7b1d26fb4a124efeb4bac9bc2e72d1"}]}, @generic="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", @generic, @nested={0x1f6, 0x16, 0x0, 0x1, [@generic="ef3d023ec9a34f8e1db7494655c0ea55cd0f701b74668dcd38b800f4ed7a7f1158010870007e46184ba9cdc79e53a1641a118e8a836ffae5241d3594c4336084f2ba6a50a88b2d0745649658b0e9ed2b0ac30e3cf52d26b3004d0bb754b1bb7f8970f5604af45906865bff2ad48014eab0715de1f762acacf3b5a20fab1b5ff724f773e38434a497ebaf1fe53fab0e6c2b921a7d73ba2994282267570080b1cc2f9b54", @typed={0x8, 0xd4, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x87}, @typed={0xf4, 0x42, 0x0, 0x0, @binary="55eab12574ef71075e7552d24b52b0e337bcee41cb09fccc475a99b0ad0b4627a32cce37b98935640fc5e1e2c6a9db26759b544d0b752d9ac6b3c7a6914af3afa374c9502ba788fe1209df758ff94b7b16cde087d7d4a7d367a31712967395e8cd716f0b69ee5dfec6f448db0b9f537c4212b113a2bccd2a29b3bf4fa4e96c2c4766ae2b62f3f542ba4a25c16de783783d0545bc6b62d4b0f39289787749c554dc29c24c5e1720d7899eb03997f0cf66a64d11bc371c4b2627f48e3074c56d803afc97a5edca84eba17a2184d37831ef854239d4310bccc9ec3fde07a6cd90d913ba661c6effeb601268e69449e375b8"}, @typed={0x8, 0xdf, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x34}, @generic="261cf63a65b5cc0447b22ff005c8bfdbc9870f42dfa49278165c5c0a7f7f324352a7789cc0611b8bc791ee3b1e4337dd441188d0c0e4b6243596f721d1eeab19629da9"]}]}, 0x2338}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
sendto$inet6(r7, &(0x7f00000001c0)="f9681d8ff74a119fc839377bd1ea92c02c9cac135c632ab4f96506bf6cf5dc808436a8b7bcfeac0794782aa9722550676bba11f387a777eee948678db7ae924ba6ae425b50532aec8731db9e2ba37a20a65d9822f266f211c96699f8c613303826f352662140f259c2", 0x69, 0x4, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @private0, 0x2}, 0x1c)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b607003772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}})

7.539251883s ago: executing program 3 (id=2460):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000)
r2 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000001c0)={0xfffffffa, 0x1})
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000200)="13501ff6659fcebc7e908e9e7327c8551d76105ac80dee3d256f881853528b30ff713ebf9b5bcf73d60b4ea9368311f72630ae085de938726bd94206b0ec90fce33f01c5ab9e598d1538a7dcdf27731ac025b24b1ed6e95185c43b1352962a47d9b08e98dd311adc89f892c38273d1828dd1ec072cd9bd499303968cc9ac881fe7e9ad0285ec5ef2f6bdb1ba8b5dbd00308d3c768d99dadc2ef26634f19b68a1740908ab36c7cb0ac6")
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000002c0))
syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x62af, 0x40, 0xffffffff, 0x350})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xfdfffffffffffffe}], 0x0, 0x7}, 0x20)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe88000000000000000059d1d98501011400350077673100"/56], 0x50}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
socket$igmp6(0xa, 0x3, 0x2)

7.247905684s ago: executing program 1 (id=2464):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffffe00, @private0, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000002200)='\"', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000300)="bda4", 0x2}], 0x1}}], 0x2, 0xd8)
shutdown(r2, 0x1)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x27)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0xb, 0x101800)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f00000003c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x71)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000880)={0x0, 0x0, 0x18, &(0x7f0000000200)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x811, 0xff0f, 0x6}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc48e}}, {0x8b, &(0x7f0000000440)=@string={0x8b, 0x3, "88a727ece6827ffa5ee1fbab9b59ece1994616a0817c0f53d2fff69ab78af59178ad1989380a3a3a908feced616f7a55494854452a8acb6226339fb698d6cda9e99f162d3659c14a04315e9cbf56f7b10e9f8d7734641a038f9c71bd87ba90557bb0b4033ea54915fc40f2b4dc971618140c7bf2e2ddf7afc31c8b61c0e7f9e1a3f2e21a241de55af0"}}, {0x34, &(0x7f0000000500)=@string={0x34, 0x3, "95c091c6fd1b3a7e2b98ebd4719800c314606ba25a0842f8738cf71ee4802373a69703884e8d0b48e77311d53d5f0f5dd7ab"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41f}}, {0xc0, &(0x7f00000005c0)=@string={0xc0, 0x3, "a636c93fde30364a495b6030d38ca688b4d7de4dbb423185ce6d6aa07cb2f6a106a7b023db950300fb6ffc73e42a124ec18376195e00af119d4a6efcfc9ed71bd055efefd61dacc5a7bf6a14ab4825934e9210462ff79f95774ac3182b635e4993996a964a1ef9d95e72839792061e8dd6ce74b34ee36c1d75220f0bffc987e886bc0b6ac6f1076608af922027dd3331419cb6fb58583ebf0cf0b7688d3d3381ba1f12777db5c6f29c082abd200cd55274e4dafc78f52920f7262f32365f"}}, {0xcd, &(0x7f0000000680)=@string={0xcd, 0x3, "3484a86d8f74c0b5202059171c1b542abc492197ee227f271eb59a95cd57aed76781f20cccfc02e6305b42bff2d7e30a0e4ac2400a89fca3940b79ba2854843a88d94e61e9c577c30908a376e337ceddeb6e1e4e4e88694e9393485a91fcb23842c8db91a85b02069588f7e5755aa2f005ee4cef5d1a8505ffebe9839c4fea44f9839540d9c97a5a56340a631bed19543244280f75b8f808f4bf5dd2a4cca349c32270c94b1336ba696c91c6fddcb1721df4882b48a5b6b7e96c5fbe7b95d96c7fca551e6f83a3d26d412e"}}, {0xf6, &(0x7f0000000780)=@string={0xf6, 0x3, "8eeac14fe962b44aeb0c08767948e21e330bac2a3db5a7a8425d1fb6e09a44581db2b84556de896a9a3776551da6ba0e65c7db1b5cbfadbf06ffdf49f695b639e7f5ceac9eed10800c18d268b7aa93888ed74db03460e006e2ae0b1646815aed7cb196ee4dbeb0df7d467456cc6ec9c6e805f9855d96eabd8a8ded1cac0b6ea8576d333e9bdd83635b9ec8353de052085b17070923c0216a11a7f4b3fdeb05f430b555d2af8ddb25793b1ffb6ec4e8ae38ed615dc59b7a9463d6977f0b74bd5ccaa68598ee827620b08070d30952b75933637b7358d11929db8166e5877cabf0040553f697b97ed7361c6333cda48cd44eb2f889"}}]})

6.900481603s ago: executing program 4 (id=2465):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffffe00, @private0, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000002200)='\"', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000300)="bda4", 0x2}], 0x1}}], 0x2, 0xd8)
shutdown(r2, 0x1)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x27)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0xb, 0x101800)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300), &(0x7f00000003c0)=0x8)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x71)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000880)={0x0, 0x0, 0x18, &(0x7f0000000200)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x811, 0xff0f, 0x6}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc48e}}, {0x8b, &(0x7f0000000440)=@string={0x8b, 0x3, "88a727ece6827ffa5ee1fbab9b59ece1994616a0817c0f53d2fff69ab78af59178ad1989380a3a3a908feced616f7a55494854452a8acb6226339fb698d6cda9e99f162d3659c14a04315e9cbf56f7b10e9f8d7734641a038f9c71bd87ba90557bb0b4033ea54915fc40f2b4dc971618140c7bf2e2ddf7afc31c8b61c0e7f9e1a3f2e21a241de55af0"}}, {0x34, &(0x7f0000000500)=@string={0x34, 0x3, "95c091c6fd1b3a7e2b98ebd4719800c314606ba25a0842f8738cf71ee4802373a69703884e8d0b48e77311d53d5f0f5dd7ab"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41f}}, {0xc0, &(0x7f00000005c0)=@string={0xc0, 0x3, "a636c93fde30364a495b6030d38ca688b4d7de4dbb423185ce6d6aa07cb2f6a106a7b023db950300fb6ffc73e42a124ec18376195e00af119d4a6efcfc9ed71bd055efefd61dacc5a7bf6a14ab4825934e9210462ff79f95774ac3182b635e4993996a964a1ef9d95e72839792061e8dd6ce74b34ee36c1d75220f0bffc987e886bc0b6ac6f1076608af922027dd3331419cb6fb58583ebf0cf0b7688d3d3381ba1f12777db5c6f29c082abd200cd55274e4dafc78f52920f7262f32365f"}}, {0xcd, &(0x7f0000000680)=@string={0xcd, 0x3, "3484a86d8f74c0b5202059171c1b542abc492197ee227f271eb59a95cd57aed76781f20cccfc02e6305b42bff2d7e30a0e4ac2400a89fca3940b79ba2854843a88d94e61e9c577c30908a376e337ceddeb6e1e4e4e88694e9393485a91fcb23842c8db91a85b02069588f7e5755aa2f005ee4cef5d1a8505ffebe9839c4fea44f9839540d9c97a5a56340a631bed19543244280f75b8f808f4bf5dd2a4cca349c32270c94b1336ba696c91c6fddcb1721df4882b48a5b6b7e96c5fbe7b95d96c7fca551e6f83a3d26d412e"}}, {0xf6, &(0x7f0000000780)=@string={0xf6, 0x3, "8eeac14fe962b44aeb0c08767948e21e330bac2a3db5a7a8425d1fb6e09a44581db2b84556de896a9a3776551da6ba0e65c7db1b5cbfadbf06ffdf49f695b639e7f5ceac9eed10800c18d268b7aa93888ed74db03460e006e2ae0b1646815aed7cb196ee4dbeb0df7d467456cc6ec9c6e805f9855d96eabd8a8ded1cac0b6ea8576d333e9bdd83635b9ec8353de052085b17070923c0216a11a7f4b3fdeb05f430b555d2af8ddb25793b1ffb6ec4e8ae38ed615dc59b7a9463d6977f0b74bd5ccaa68598ee827620b08070d30952b75933637b7358d11929db8166e5877cabf0040553f697b97ed7361c6333cda48cd44eb2f889"}}]})

4.803924895s ago: executing program 0 (id=2468):
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="751875f45e198a547e7460399325ad2b7b035fc7a733d8c78011f6d76af6d185686638452f5da97da7e26a025a23f536be29224141ad1a1704cf322df9de1fe42509ab291eb317e433907159440bfb63e1", &(0x7f0000000080)=""/128, 0x4}, 0x1c)
sendmsg(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x1, @loopback, 0xf, 0x3}, 0x80, &(0x7f0000002480)=[{&(0x7f00000001c0)="c25be7c0840e596b01fbd601ca7b1a18033bdfb46eebf80634d775bc4ec04353ed28b8e40290cf505c592277ee976bae6412cd3c83c640b2980eaee64ce8b91930357b5be7e24504b20a560f4b4c82dcf9af2a65763d27563af88d752c803a43971ecd52e264055e7f86e2813c3b15bc8a37610c4a77c629c945e9ee648e9499dc2a7f7abbe675e3bbdedced78a67f980bc46b196492af2b2d038f3efcef50a4e54aac28225e364846b84b53b14e1997", 0xb0}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="5fa1ceb77cd4f7c20121883b05914599d719f98e4a5561042ededa8dac8ceb075fbe023e55111fdb0cc418fcf383b0e510bea8b389b25dcf640ca8d613b79dd21c8f58", 0x43}, {&(0x7f0000001340)="1d765c894431371876b7787bc1c23ac64b045d656b7d4432df11464abc7368f0808751f58537cbb40f68235c962d0a5adf1cf0abcf2eb45e15c246f8a7063c2ea386daed2c49430e48765440c15c191a25cd625c5e2cd27ba2383464526b5134d06afe2877fa40264468822999ed6f004d9264add37064f73931d1d2f3f29c9ba4896f52e98d4744a8fb4408fdf8438bf22dfe557466d89aa348513988d3cc571c1569a89f92ac3dcb34bc1ae434cba3112b327806d26788af2829b09de5686c879268a2d86ae7e8e4160724213a25434df121ca58929f0dc5a577d7", 0xdc}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="e8", 0x1}], 0x7}, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002500), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002540)={'batadv_slave_1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r2)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000002740)={&(0x7f0000002580), 0xc, &(0x7f0000002700)={&(0x7f0000002600)={0xd0, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x10}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x96}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x156}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x981d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40051}, 0x20004080)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000002780)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @private=0xa010102}, 0x0, 0x1, 0x2}}, 0x26)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002800), r0)
sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000002980)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)={0xe0, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4234}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x38, r1, 0x708, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x240c8080)
r7 = syz_usb_connect$cdc_ecm(0x4, 0x88, &(0x7f0000002ac0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xc, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x9f, 0x90, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0xe, {{0x9, 0x24, 0x6, 0x0, 0x0, "7cf622fd"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x8b8, 0x1, 0xbc7, 0x5}, [@acm={0x4, 0x24, 0x2, 0xd}, @mdlm={0x15, 0x24, 0x12, 0x100}, @acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @dmm={0x7, 0x24, 0x14, 0x280, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xee, 0xa3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x20, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002b80)={0xa, 0x6, 0x201, 0x9, 0x5, 0x2, 0x8, 0x8}, 0xc, &(0x7f0000002bc0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x2, 0x21}]}, 0x1, [{0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x2409}}]})
syz_usb_control_io$cdc_ecm(r7, &(0x7f0000002dc0)={0xc, &(0x7f0000002c80)={0x40, 0xc, 0xc9, {0xc9, 0x6, "bed734035c562fc14eddd867ddebaf231d6ecea4fa6dab14561b7b95cf5a036a3f64f0d1ea23c53d2429bd971f6549d6703a238d967e85fd8d0274960e1107667042f2f182c8a7c02e87399155608b3f1755f51693182b178dfab2e90510c25a5c08d31f7c58ced2c13225b92b96d47ee95ab4486ad1349a76fb7931dee25bfbb3e786ab5ac82dfe3d7bc6304fcfa2d3f5e2bf7fbb8f35d9909b7d39e89de65379492c02f34412153eebac0db4408a66102ea8f572cd95b053047e4409094fa7780d761d4995e7"}}, &(0x7f0000002d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002f80)={0x10, &(0x7f0000002e00)={0x0, 0x2e, 0xc9, "1d7910f23758df47086cb21b7bb3a5124f2dc4a3bce3b615f3935daf48e62429bdd4177a923aa9ce72d6f86df9dcb221337fd8fa822ce438a81f7390a9a74fcb1d331d0f2614f3e7bbe8d5f8aa2e5f94cfbf603b83ddd7dcfa199c26424b820cfdf261ffbecabe4b5379613dd96b875eceb2fa4dc68826f7872b575ef914708ff75851a144258ef1ccdf3b32f9b12c7d05343b4d5d22200e7937f894ead0b2fe053318160ae8790f321f47743b54b6becf5d7a3be5cda0589324a50177cddc880bce47debf27ee871f"}, &(0x7f0000002f00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002f40)={0x0, 0x8, 0x1, 0x3}})
fsopen(&(0x7f0000002fc0)='binder\x00', 0x0)
syz_usb_control_io$cdc_ecm(r7, &(0x7f0000003140)={0xc, &(0x7f0000003000)={0x40, 0x22, 0xc2, {0xc2, 0x5, "85de7ca842b0f07a5654ac75c45d876fa7e70b9926f406f390ebb0f83633fe505c97ae37f3d52a8157333c931cf172333ea9360c3db3fe6b9b65d2da4b21f5aefc45a4ae317a1428fa44936f1b040e2bf0e0bcddce4a0197c562bb9df34ac692818bcc5c0e506c9d69e21cf7afa27034b8286e0122b60f5a4890c00da897b230651060f7d95602c920a6621ca3a28c57855ac839796160e27c16df694f4c88ec4484086aeb500b9cb2c14bea2495a5884900fb5a13a5ef88fbc0d7386fb3a087"}}, &(0x7f0000003100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003300)={0x10, &(0x7f0000003180)={0x20, 0x17, 0xe8, "429935685cd3d5afa8882715b1805a14404a96f28ced82f23c8f399bb14e2ab3b95668f22a32a39aab7853e64fdb99db82f05ac6768eb09e25bed9af5d93519c7ace1d6c32f6f16eb2e4be6869ea60716a3baf314e1bc7cfe978c1269c04fcb5780759ab3f264469f374163f601bdf7e4078efa22d6730d6d212fff83cd01d6b37733c55de7dcea7f28cf3c11c23bb7ad22a5d4f303ad7ebc41189fdbb9ae5fbb678aefc3e716e5e7d304025c5d20ca236cee4010f932ae08a26d5dbcb69db1b6eaa9d5eed13180dd6dbc3a2d346544cc100e72f02180496957ef2a32ad2510a345de4efb368ffbb"}, &(0x7f0000003280)={0x0, 0xa, 0x1, 0x83}, &(0x7f00000032c0)={0x0, 0x8, 0x1, 0x3}})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), r5)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x20, r8, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x7, 0x5d}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x40020)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003580)={'wlan0\x00'})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000035c0)=0x5, 0x4)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000003600)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000003640)={0x7, {{0xa, 0x4e20, 0x7fffffff, @empty, 0xe983}}, 0x1, 0x6, [{{0xa, 0x5, 0xfffff001, @mcast1, 0x8}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {{0xa, 0x4e24, 0xfffffb7f, @ipv4={'\x00', '\xff\xff', @local}, 0x80000000}}, {{0xa, 0x4e23, 0x100, @private1, 0xfff}}, {{0xa, 0x4e20, 0x2, @empty, 0x2183}}, {{0xa, 0x4e24, 0x9, @mcast2, 0x2807}}]}, 0x38c)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000003a00)={{r2}, "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"})
r10 = openat$null(0xffffff9c, &(0x7f0000004a00), 0x422c0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r10, 0x40096101, &(0x7f0000004ac0)={{&(0x7f0000004a40)={'GENERAL\x00'}}, 0x2})
bind$unix(r10, &(0x7f0000004b00)=@file={0x0, './file0\x00'}, 0x6e)

3.982875718s ago: executing program 3 (id=2470):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x2, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x800312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x80000003, 0x9, 0x3e7, 0x9, 0xede0, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x5, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x5, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x81f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x2, 0x3c, 0x38, 0x69, 0x0, 0x4, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x83, 0x3, 0x9}, @lsrr={0x83, 0x7, 0xdc, [@private=0xa010101]}, @ssrr={0x89, 0x3, 0x9a}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x5, 0x0, 0x5dc}}}}}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='\x00\x00{g;L4\x06\x86{\x86e|.3\xa7\x00\x00\x00\x00', &(0x7f0000000000)='\x11\xe9\x04\x01\x00\x9a\xb7m\xfe\xe5\xd9j\x16VP\xce\x8d\xb9GT\a\xd4R\x11\x8c|\xc7\xdc\xd4\xc1n\xb2\x95\xa0\xda\x1d\x99\xd6\'IM\xefI\xd8G\x88\xaa\x98\xb12\xaf\xe8\x10\x81\xe2\x9e\xfc\xb3\x922n1Y', 0x0)
r6 = syz_usb_connect$uac1(0x2, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r6, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0004}]})
r7 = getpgrp(0x0)
r8 = syz_pidfd_open(r7, 0x0)
process_madvise(r8, 0x0, 0x0, 0x4, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)

3.956291811s ago: executing program 0 (id=2471):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x55, 0x40000020, 0x0) (fail_nth: 2)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x3)
sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)

3.868834525s ago: executing program 2 (id=2472):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x20000000}, 0x0)

3.692619706s ago: executing program 2 (id=2473):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x50000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0x1, &(0x7f00000004c0)="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", &(0x7f0000000280)=@udp6=r2, 0x1}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000640)={0x101, 0x2, 0x2, {0x0, @vbi={0x400, 0x7, 0x2, 0x47314356, [0xe, 0xd2], [0x7, 0x2], 0x1}}, 0x5})
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'xfrm0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, r5}, 0x14)
syz_emit_ethernet(0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="b3"], 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
getcwd(&(0x7f0000000000)=""/149, 0x95)
read$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=""/104, 0x68)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7fffffff)
r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r6, 0xc0cc5604, &(0x7f0000000180)={0x8, @vbi={0x3, 0x3, 0x1000, 0x31303453, [0x2, 0x8], [0x9, 0xc101], 0x108}})
r7 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000002c0))
fchdir(r7)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000300)={0x40000000})
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000340))
ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000380)=0xd)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'dummy0\x00'})

3.593133523s ago: executing program 2 (id=2474):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x18000000)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

3.327292397s ago: executing program 4 (id=2475):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x3a, @in6={0xa, 0x12, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]})
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r9=>r3}, './file0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000240)={0x10001, 0x2, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x7, 0x7, 0x0, 0x4, 0x5, 0x3, 0x4d, 0x2, 0xf9, 0x3, 0x80, 0x9, 0x8000000000000000}, {0x6, 0x80, 0x4, 0xc4, 0x4, 0x1, 0x8, 0x3, 0x7, 0xf9, 0x0, 0x7d, 0x6}, {0xe2a5, 0xd, 0x1, 0x6c, 0x2, 0x10, 0xd, 0x6, 0xff, 0x6, 0x3, 0x7}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r11, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1)
keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0x39)

3.035663077s ago: executing program 0 (id=2476):
r0 = epoll_create1(0x80000)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000005, 0x11, r0, 0xe7ccb000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}}, 0x0)
unshare(0x2040400)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x10000)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000080))
socket$packet(0x11, 0x2, 0x300)

3.031664432s ago: executing program 1 (id=2477):
set_mempolicy(0x2, 0x0, 0xf5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3ffff}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1c}]}]}, 0x20}}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r5, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0)
tkill(0x0, 0x39)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

2.924642011s ago: executing program 0 (id=2478):
r0 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0xfffffffc, 0x10}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000500)={0x1000010}, 0x1)
socket(0x10, 0x3, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x94000001)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ptrace(0x10, 0x1)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, 0x0, 0x400)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x3, 0x78, 0xfff6, 0x0, 0x66ba, 0x40000040, r5})

2.699169661s ago: executing program 4 (id=2479):
set_mempolicy(0x2, 0x0, 0xf5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3ffff}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_pidfd_open(0x0, 0x0)
setns(r3, 0x24020000)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r5, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0)
tkill(0x0, 0x39)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

2.568940149s ago: executing program 2 (id=2480):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0xf00}, 0x0)

2.368803332s ago: executing program 2 (id=2481):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x14, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af83, &(0x7f0000000180)={0x3, 0x0, [{0x1, 0x0, 0x0}, {0x5000, 0x8d, &(0x7f00000006c0)=""/141}, {0xeeee8000, 0x71, &(0x7f0000000240)=""/113}]})
syz_usb_connect(0x5, 0xb6, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605ffff020102092403050703020496062404024cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200000000000000003847c1db"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x860}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x415}}, {0x51, &(0x7f0000000100)=@string={0x51, 0x3, "ebedbed826f0ef434688117db21210d06c45eb8f797c940cb7b953b5013c87671ee85a5f3a7dbc782d2269c59806a6478d3cb89d55b105a337e45a88145251466cb663a2b351af850648f883d4a44d"}}]})

1.973075784s ago: executing program 0 (id=2482):
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x49af4b32, 0x6f6440)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x42)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x9000000, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010000000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="0006"], 0x48}, 0x1, 0x2}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000440)=0x4010000, 0x4)

1.578190923s ago: executing program 4 (id=2483):
r0 = socket$inet(0x2, 0x3, 0x33)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x7ee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)

1.372733815s ago: executing program 3 (id=2484):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x50000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0x1, &(0x7f00000004c0)="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", &(0x7f0000000280)=@udp6=r2, 0x1}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000640)={0x101, 0x2, 0x2, {0x0, @vbi={0x400, 0x7, 0x2, 0x47314356, [0xe, 0xd2], [0x7, 0x2], 0x1}}, 0x5})
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'xfrm0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, r5}, 0x14)
syz_emit_ethernet(0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="b3"], 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
getcwd(&(0x7f0000000000)=""/149, 0x95)
read$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=""/104, 0x68)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7fffffff)
r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r6, 0xc0cc5604, &(0x7f0000000180)={0x8, @vbi={0x3, 0x3, 0x1000, 0x31303453, [0x2, 0x8], [0x9, 0xc101], 0x108}})
r7 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000002c0))
r8 = epoll_create(0xfffffff4)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000300)={0x40000000})
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000340))
ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000380)=0xd)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'dummy0\x00'})

1.159025514s ago: executing program 3 (id=2485):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffffe00, @private0, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000002200)='\"', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000300)="bda4", 0x2}], 0x1}}], 0x2, 0xd8)
shutdown(r2, 0x1)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x27)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0xb, 0x101800)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300), &(0x7f00000003c0)=0x8)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x71)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000880)={0x0, 0x0, 0x18, &(0x7f0000000200)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x811, 0xff0f, 0x6}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc48e}}, {0x8b, &(0x7f0000000440)=@string={0x8b, 0x3, "88a727ece6827ffa5ee1fbab9b59ece1994616a0817c0f53d2fff69ab78af59178ad1989380a3a3a908feced616f7a55494854452a8acb6226339fb698d6cda9e99f162d3659c14a04315e9cbf56f7b10e9f8d7734641a038f9c71bd87ba90557bb0b4033ea54915fc40f2b4dc971618140c7bf2e2ddf7afc31c8b61c0e7f9e1a3f2e21a241de55af0"}}, {0x34, &(0x7f0000000500)=@string={0x34, 0x3, "95c091c6fd1b3a7e2b98ebd4719800c314606ba25a0842f8738cf71ee4802373a69703884e8d0b48e77311d53d5f0f5dd7ab"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41f}}, {0xc0, &(0x7f00000005c0)=@string={0xc0, 0x3, "a636c93fde30364a495b6030d38ca688b4d7de4dbb423185ce6d6aa07cb2f6a106a7b023db950300fb6ffc73e42a124ec18376195e00af119d4a6efcfc9ed71bd055efefd61dacc5a7bf6a14ab4825934e9210462ff79f95774ac3182b635e4993996a964a1ef9d95e72839792061e8dd6ce74b34ee36c1d75220f0bffc987e886bc0b6ac6f1076608af922027dd3331419cb6fb58583ebf0cf0b7688d3d3381ba1f12777db5c6f29c082abd200cd55274e4dafc78f52920f7262f32365f"}}, {0xcd, &(0x7f0000000680)=@string={0xcd, 0x3, "3484a86d8f74c0b5202059171c1b542abc492197ee227f271eb59a95cd57aed76781f20cccfc02e6305b42bff2d7e30a0e4ac2400a89fca3940b79ba2854843a88d94e61e9c577c30908a376e337ceddeb6e1e4e4e88694e9393485a91fcb23842c8db91a85b02069588f7e5755aa2f005ee4cef5d1a8505ffebe9839c4fea44f9839540d9c97a5a56340a631bed19543244280f75b8f808f4bf5dd2a4cca349c32270c94b1336ba696c91c6fddcb1721df4882b48a5b6b7e96c5fbe7b95d96c7fca551e6f83a3d26d412e"}}, {0xf6, &(0x7f0000000780)=@string={0xf6, 0x3, "8eeac14fe962b44aeb0c08767948e21e330bac2a3db5a7a8425d1fb6e09a44581db2b84556de896a9a3776551da6ba0e65c7db1b5cbfadbf06ffdf49f695b639e7f5ceac9eed10800c18d268b7aa93888ed74db03460e006e2ae0b1646815aed7cb196ee4dbeb0df7d467456cc6ec9c6e805f9855d96eabd8a8ded1cac0b6ea8576d333e9bdd83635b9ec8353de052085b17070923c0216a11a7f4b3fdeb05f430b555d2af8ddb25793b1ffb6ec4e8ae38ed615dc59b7a9463d6977f0b74bd5ccaa68598ee827620b08070d30952b75933637b7358d11929db8166e5877cabf0040553f697b97ed7361c6333cda48cd44eb2f889"}}]})

1.121721404s ago: executing program 4 (id=2486):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x55, 0x40000020, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002000040"])
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x3)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000))
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000ec0)='\x00M', 0x2}], 0x2}}], 0x1, 0x0)
rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180))
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0)
sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)

780.563305ms ago: executing program 1 (id=2487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0xc8}}, 0x40095) (async)
close(r0)
syz_open_dev$video(0x0, 0x7ff000, 0x40000) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) (async)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sched_setattr(0x0, 0x0, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000240)={0x16, 0x4, 0xea}) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000436000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) (async)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000000000)) (async)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x9)
openat$zero(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000000280)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33346d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb3655668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

780.123745ms ago: executing program 0 (id=2488):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffffe00, @private0, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000002200)='\"', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000300)="bda4", 0x2}], 0x1}}], 0x2, 0xd8)
shutdown(r2, 0x1)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x27)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0xb, 0x101800)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f00000003c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x71)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000880)={0x0, 0x0, 0x18, &(0x7f0000000200)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x811, 0xff0f, 0x6}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc48e}}, {0x8b, &(0x7f0000000440)=@string={0x8b, 0x3, "88a727ece6827ffa5ee1fbab9b59ece1994616a0817c0f53d2fff69ab78af59178ad1989380a3a3a908feced616f7a55494854452a8acb6226339fb698d6cda9e99f162d3659c14a04315e9cbf56f7b10e9f8d7734641a038f9c71bd87ba90557bb0b4033ea54915fc40f2b4dc971618140c7bf2e2ddf7afc31c8b61c0e7f9e1a3f2e21a241de55af0"}}, {0x34, &(0x7f0000000500)=@string={0x34, 0x3, "95c091c6fd1b3a7e2b98ebd4719800c314606ba25a0842f8738cf71ee4802373a69703884e8d0b48e77311d53d5f0f5dd7ab"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41f}}, {0xc0, &(0x7f00000005c0)=@string={0xc0, 0x3, "a636c93fde30364a495b6030d38ca688b4d7de4dbb423185ce6d6aa07cb2f6a106a7b023db950300fb6ffc73e42a124ec18376195e00af119d4a6efcfc9ed71bd055efefd61dacc5a7bf6a14ab4825934e9210462ff79f95774ac3182b635e4993996a964a1ef9d95e72839792061e8dd6ce74b34ee36c1d75220f0bffc987e886bc0b6ac6f1076608af922027dd3331419cb6fb58583ebf0cf0b7688d3d3381ba1f12777db5c6f29c082abd200cd55274e4dafc78f52920f7262f32365f"}}, {0xcd, &(0x7f0000000680)=@string={0xcd, 0x3, "3484a86d8f74c0b5202059171c1b542abc492197ee227f271eb59a95cd57aed76781f20cccfc02e6305b42bff2d7e30a0e4ac2400a89fca3940b79ba2854843a88d94e61e9c577c30908a376e337ceddeb6e1e4e4e88694e9393485a91fcb23842c8db91a85b02069588f7e5755aa2f005ee4cef5d1a8505ffebe9839c4fea44f9839540d9c97a5a56340a631bed19543244280f75b8f808f4bf5dd2a4cca349c32270c94b1336ba696c91c6fddcb1721df4882b48a5b6b7e96c5fbe7b95d96c7fca551e6f83a3d26d412e"}}, {0xf6, &(0x7f0000000780)=@string={0xf6, 0x3, "8eeac14fe962b44aeb0c08767948e21e330bac2a3db5a7a8425d1fb6e09a44581db2b84556de896a9a3776551da6ba0e65c7db1b5cbfadbf06ffdf49f695b639e7f5ceac9eed10800c18d268b7aa93888ed74db03460e006e2ae0b1646815aed7cb196ee4dbeb0df7d467456cc6ec9c6e805f9855d96eabd8a8ded1cac0b6ea8576d333e9bdd83635b9ec8353de052085b17070923c0216a11a7f4b3fdeb05f430b555d2af8ddb25793b1ffb6ec4e8ae38ed615dc59b7a9463d6977f0b74bd5ccaa68598ee827620b08070d30952b75933637b7358d11929db8166e5877cabf0040553f697b97ed7361c6333cda48cd44eb2f889"}}]})

661.526913ms ago: executing program 2 (id=2489):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x8000)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090aafc5bbc9a2a6f69c00000a0000040900010073797a31000000000800054000000002090002007379"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
unshare(0x78060300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})

0s ago: executing program 4 (id=2490):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x8000)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090aafc5bbc9a2a6f69c00000a0000040900010073797a31000000000800054000000002090002007379"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
unshare(0x78060300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})

kernel console output (not intermixed with test programs):

6.709160][ T5936] dw2102: command 0x0e transfer failed.
[  656.720016][ T5936] dvb-usb: bulk message failed: -22 (3/0)
[  656.733171][ T5936] dw2102: command 0x0e transfer failed.
[  656.749219][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  656.854620][ T5936] dw2102: command 0x51 transfer failed.
[  656.909647][ T5936] dvb-usb: bulk message failed: -22 (5/0)
[  656.932184][ T5936] dw2102: i2c probe for address 0x68 failed.
[  657.064350][ T5936] dvb-usb: bulk message failed: -22 (5/0)
[  657.117928][ T5936] dw2102: i2c probe for address 0x69 failed.
[  657.147875][ T5936] dvb-usb: bulk message failed: -22 (5/0)
[  657.358875][ T5936] dw2102: i2c probe for address 0x6a failed.
[  657.420701][ T5936] dw2102: probing for demodulator failed. Is the external power switched on?
[  657.479512][ T5936] dvb-usb: no frontend was attached by 'TeVii S662'
[  657.668823][T12522] fuse: Bad value for 'fd'
[  657.928784][ T5936] rc_core: IR keymap rc-tt-1500 not found
[  657.961628][ T5936] Registered IR keymap rc-empty
[  657.996872][ T5936] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  658.063096][ T5936] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input23
[  658.183345][ T5936] dvb-usb: schedule remote query interval to 250 msecs.
[  658.199507][ T5936] dw2102: su3000_power_ctrl: 0, initialized 1
[  658.206387][ T5936] dvb-usb: TeVii S662 successfully initialized and connected.
[  658.265668][ T5936] usb 2-1: USB disconnect, device number 84
[  658.334364][ T5936] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  659.152886][T12537] FAULT_INJECTION: forcing a failure.
[  659.152886][T12537] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  659.188873][T12537] CPU: 1 UID: 0 PID: 12537 Comm: syz.4.1628 Not tainted syzkaller #0 PREEMPT(full) 
[  659.188903][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  659.188916][T12537] Call Trace:
[  659.188924][T12537]  <TASK>
[  659.188932][T12537]  dump_stack_lvl+0x189/0x250
[  659.188961][T12537]  ? __pfx____ratelimit+0x10/0x10
[  659.188987][T12537]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.189010][T12537]  ? __pfx__printk+0x10/0x10
[  659.189038][T12537]  ? __might_fault+0xb0/0x130
[  659.189078][T12537]  should_fail_ex+0x414/0x560
[  659.189128][T12537]  _copy_from_iter+0x1de/0x1790
[  659.189161][T12537]  ? rcu_is_watching+0x15/0xb0
[  659.189183][T12537]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  659.189212][T12537]  ? __pfx__copy_from_iter+0x10/0x10
[  659.189238][T12537]  ? __build_skb_around+0x257/0x3e0
[  659.189265][T12537]  ? netlink_sendmsg+0x642/0xb30
[  659.189285][T12537]  ? skb_put+0x11b/0x210
[  659.189311][T12537]  netlink_sendmsg+0x6b2/0xb30
[  659.189342][T12537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.189366][T12537]  ? __import_iovec+0x5d4/0x7f0
[  659.189390][T12537]  ? aa_sock_msg_perm+0xf1/0x1d0
[  659.189412][T12537]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  659.189434][T12537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.189456][T12537]  __sock_sendmsg+0x21c/0x270
[  659.189491][T12537]  ____sys_sendmsg+0x505/0x830
[  659.189522][T12537]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.189564][T12537]  ___sys_sendmsg+0x21f/0x2a0
[  659.189599][T12537]  ? __pfx____sys_sendmsg+0x10/0x10
[  659.189660][T12537]  ? __fget_files+0x2a/0x420
[  659.189677][T12537]  ? __fget_files+0x3a0/0x420
[  659.189706][T12537]  __sys_sendmsg+0x164/0x220
[  659.189734][T12537]  ? __pfx___sys_sendmsg+0x10/0x10
[  659.189776][T12537]  ? lockdep_hardirqs_on+0x9c/0x150
[  659.189799][T12537]  __do_fast_syscall_32+0xb6/0x2b0
[  659.189822][T12537]  ? lockdep_hardirqs_on+0x9c/0x150
[  659.189846][T12537]  do_fast_syscall_32+0x34/0x80
[  659.189867][T12537]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  659.189889][T12537] RIP: 0023:0xf704e539
[  659.189907][T12537] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  659.189925][T12537] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  659.189947][T12537] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000f00
[  659.189962][T12537] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000
[  659.189974][T12537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  659.189987][T12537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  659.190015][T12537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  659.190043][T12537]  </TASK>
[  659.746449][T12549] FAULT_INJECTION: forcing a failure.
[  659.746449][T12549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  659.760548][T12549] CPU: 1 UID: 0 PID: 12549 Comm: syz.1.1631 Not tainted syzkaller #0 PREEMPT(full) 
[  659.760578][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  659.760592][T12549] Call Trace:
[  659.760600][T12549]  <TASK>
[  659.760609][T12549]  dump_stack_lvl+0x189/0x250
[  659.760640][T12549]  ? __pfx____ratelimit+0x10/0x10
[  659.760662][T12549]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.760686][T12549]  ? __pfx__printk+0x10/0x10
[  659.760727][T12549]  should_fail_ex+0x414/0x560
[  659.760763][T12549]  _copy_to_user+0x31/0xb0
[  659.760791][T12549]  simple_read_from_buffer+0xe1/0x170
[  659.760825][T12549]  proc_fail_nth_read+0x1b3/0x220
[  659.760852][T12549]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  659.760879][T12549]  ? rw_verify_area+0x2a6/0x4d0
[  659.760904][T12549]  ? __lock_acquire+0xab9/0xd20
[  659.760930][T12549]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  659.760954][T12549]  vfs_read+0x200/0xa30
[  659.760977][T12549]  ? fdget_pos+0x247/0x320
[  659.761000][T12549]  ? __pfx___mutex_lock+0x10/0x10
[  659.761022][T12549]  ? __pfx_vfs_read+0x10/0x10
[  659.761048][T12549]  ? __fget_files+0x2a/0x420
[  659.761069][T12549]  ? __fget_files+0x3a0/0x420
[  659.761084][T12549]  ? __fget_files+0x2a/0x420
[  659.761111][T12549]  ksys_read+0x145/0x250
[  659.761139][T12549]  ? __pfx_ksys_read+0x10/0x10
[  659.761169][T12549]  ? lockdep_hardirqs_on+0x9c/0x150
[  659.761194][T12549]  __do_fast_syscall_32+0xb6/0x2b0
[  659.761217][T12549]  ? lockdep_hardirqs_on+0x9c/0x150
[  659.761242][T12549]  do_fast_syscall_32+0x34/0x80
[  659.761264][T12549]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  659.761297][T12549] RIP: 0023:0xf707e539
[  659.761315][T12549] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  659.761332][T12549] RSP: 002b:00000000f546e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  659.761354][T12549] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546e620
[  659.761366][T12549] RDX: 000000000000000f RSI: 00000000f73f4ff4 RDI: 0000000000000000
[  659.761378][T12549] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  659.761390][T12549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  659.761400][T12549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  659.761430][T12549]  </TASK>
[  660.682105][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'.
[  660.781921][T12570] fuse: Bad value for 'fd'
[  662.059116][   T10] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  662.199392][   T10] usb 1-1: device descriptor read/64, error -71
[  662.582415][   T10] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  662.809183][   T10] usb 1-1: device descriptor read/64, error -71
[  662.929528][   T10] usb usb1-port1: attempt power cycle
[  663.407155][T12601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1644'.
[  663.679276][   T10] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  663.770688][ T5934] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  663.889445][T12608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.942177][ T5934] usb 3-1: Using ep0 maxpacket: 16
[  663.953723][ T5934] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[  663.972845][ T5934] usb 3-1: config 0 has no interface number 0
[  663.994960][ T5934] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  664.011976][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.039129][ T5934] usb 3-1: Product: syz
[  664.043504][ T5934] usb 3-1: Manufacturer: syz
[  664.048132][ T5934] usb 3-1: SerialNumber: syz
[  664.084971][ T5934] usb 3-1: config 0 descriptor??
[  664.510663][ T5934] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  664.550656][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  664.720683][T12601] dtv5100: wlen = 0, aborting.
[  664.736584][ T5934] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  664.772917][ T5934] usb 3-1: media controller created
[  664.971437][   T10] usb 1-1: device descriptor read/8, error -71
[  665.095312][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  665.149368][ T5968] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  665.170104][ T5934] zl10353_read_register: readreg error (reg=127, ret==0)
[  665.268883][    T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  665.319508][ T5934] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  665.339856][ T5968] usb 5-1: Using ep0 maxpacket: 32
[  665.340718][ T5934] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  665.358222][ T5968] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  665.364810][ T5934] usb 3-1: USB disconnect, device number 79
[  665.435827][    T9] usb 2-1: Using ep0 maxpacket: 16
[  665.448752][ T5968] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  665.468868][    T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  665.488752][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.496996][ T5968] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  665.508254][ T5934] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  665.518677][    T9] usb 2-1: Product: syz
[  665.537162][ T5968] usb 5-1: config 1 has no interface number 0
[  665.543789][    T9] usb 2-1: Manufacturer: syz
[  665.548603][ T5968] usb 5-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  665.559913][    T9] usb 2-1: SerialNumber: syz
[  665.603418][    T9] usb 2-1: config 0 descriptor??
[  665.616917][ T5968] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  665.660351][ T5968] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  665.690642][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.704613][T12631] fuse: Bad value for 'fd'
[  665.904354][ T5968] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  665.935506][ T5968] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  665.949859][ T5968] snd_usb_pod 5-1:1.1: invalid control EP
[  665.963457][ T5968] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  666.014213][ T5968] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  666.026795][ T5968] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[  666.067535][    T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  666.079791][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  666.208058][T12640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  666.215798][T12640] IPv6: NLM_F_CREATE should be set when creating new route
[  666.223096][T12640] IPv6: NLM_F_CREATE should be set when creating new route
[  666.243324][    T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  666.256038][    T9] usb 2-1: media controller created
[  666.263489][T12640] lo: entered allmulticast mode
[  666.269814][T12620] dtv5100: wlen = 2000, aborting.
[  666.282724][T12640] tunl0: entered allmulticast mode
[  666.295913][   T10] usb 5-1: USB disconnect, device number 45
[  666.304024][T12640] gre0: entered allmulticast mode
[  666.486046][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  666.680361][T12640] gretap0: entered allmulticast mode
[  666.740429][T12640] erspan0: entered allmulticast mode
[  666.745596][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  666.791458][T12640] ip_vti0: entered allmulticast mode
[  666.795257][    T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  666.811311][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  666.834082][    T9] usb 2-1: USB disconnect, device number 85
[  666.844009][T12640] ip6_vti0: entered allmulticast mode
[  667.105470][T12640] sit0: left promiscuous mode
[  667.140924][T12640] sit0: entered allmulticast mode
[  667.167311][T12640] ip6tnl0: entered allmulticast mode
[  667.450223][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  667.460740][T12640] ip6gre0: entered allmulticast mode
[  667.556959][T12640] syz_tun: entered allmulticast mode
[  667.636877][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  667.636893][   T30] audit: type=1326 audit(1757233115.699:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.1.1656" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0
[  667.724060][T12640] ip6gretap0: entered allmulticast mode
[  667.823490][T12640] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.831568][T12640] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.852373][T12640] bridge0: entered allmulticast mode
[  667.894790][T12640] vcan0: entered allmulticast mode
[  667.942423][T12640] bond0: entered allmulticast mode
[  667.975937][T12640] bond_slave_0: entered allmulticast mode
[  668.001530][T12640] bond_slave_1: entered allmulticast mode
[  668.055800][T12640] team0: entered allmulticast mode
[  668.074562][T12640] team_slave_0: entered allmulticast mode
[  668.081559][T12640] team_slave_1: entered allmulticast mode
[  668.113226][T12640] dummy0: entered allmulticast mode
[  668.153967][T12640] nlmon0: entered allmulticast mode
[  668.176836][T12640] caif0: entered allmulticast mode
[  668.196474][T12640] batadv0: entered allmulticast mode
[  668.224937][T12640] veth0: entered allmulticast mode
[  668.235230][T12640] veth1: entered allmulticast mode
[  668.249931][T12640] wg0: entered allmulticast mode
[  668.275108][T12640] wg1: entered allmulticast mode
[  668.295230][T12640] wg2: entered allmulticast mode
[  668.306194][T12640] veth0_to_bridge: entered allmulticast mode
[  668.326506][T12640] veth1_to_bridge: entered allmulticast mode
[  668.342377][T12640] veth0_to_bond: entered allmulticast mode
[  668.371256][T12640] veth1_to_bond: entered allmulticast mode
[  668.397349][T12640] veth0_to_team: entered allmulticast mode
[  668.525810][T12640] veth1_to_team: entered allmulticast mode
[  668.544711][T12640] veth0_to_batadv: entered allmulticast mode
[  668.566465][T12640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.581079][T12640] batadv_slave_0: entered allmulticast mode
[  668.606655][T12640] veth1_to_batadv: entered allmulticast mode
[  668.617305][T12640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.627329][T12640] batadv_slave_1: entered allmulticast mode
[  668.652941][T12640] xfrm0: entered allmulticast mode
[  668.663201][T12640] veth0_to_hsr: entered allmulticast mode
[  668.676966][T12640] hsr_slave_0: entered allmulticast mode
[  668.690452][T12640] veth1_to_hsr: entered allmulticast mode
[  668.734188][T12640] hsr_slave_1: entered allmulticast mode
[  668.746079][T12640] hsr0: entered allmulticast mode
[  668.757051][T12640] veth1_virt_wifi: entered allmulticast mode
[  668.766366][T12640] veth0_virt_wifi: entered allmulticast mode
[  668.778896][T12640] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  668.807678][T12640] veth1_vlan: entered allmulticast mode
[  668.840837][T12640] veth0_vlan: entered allmulticast mode
[  668.875354][T12640] @: entered allmulticast mode
[  668.885148][T12640] vlan1: entered allmulticast mode
[  668.895175][T12640] tipc: Resetting bearer <eth:macvlan0>
[  668.907801][T12640] macvlan0: entered allmulticast mode
[  668.930105][T12640] macvlan1: entered allmulticast mode
[  668.980172][  T921] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[  668.993580][T12640] ipvlan0: entered allmulticast mode
[  669.006054][T12640] ipvlan1: entered allmulticast mode
[  669.013139][T12640] veth1_macvtap: entered allmulticast mode
[  669.049759][T12640] veth0_macvtap: entered allmulticast mode
[  669.145531][T12640] macvtap0: entered allmulticast mode
[  669.157527][T12640] macsec0: entered allmulticast mode
[  669.169152][  T921] usb 3-1: device descriptor read/64, error -71
[  669.181234][T12640] geneve0: entered allmulticast mode
[  669.191329][T12640] geneve1: entered allmulticast mode
[  669.239359][T12640] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  669.246547][T12640] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  669.255979][T12640] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  669.274693][T12640] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  669.286793][T12640] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  669.345754][T12640] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  669.355982][T12640] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  669.371816][T12640] macvlan2: entered allmulticast mode
[  669.377499][T12640] macvlan3: entered allmulticast mode
[  669.387474][T12640] vxlan0: entered allmulticast mode
[  669.393284][T12640] bond1: left promiscuous mode
[  669.398215][T12640] geneve2: left promiscuous mode
[  669.403845][T12640] bond1: entered allmulticast mode
[  669.409241][  T921] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[  669.441212][T12640] geneve2: entered allmulticast mode
[  669.455631][T12640] batman_adv: batadv0: Interface deactivated: macsec1
[  669.463340][T12640] macsec1: entered allmulticast mode
[  669.489983][T12640] syztnl1: entered allmulticast mode
[  669.497412][T12640] bond0.0: entered allmulticast mode
[  669.503201][T12640] vlan0: entered allmulticast mode
[  669.517820][T12640] ip6gretap1: left promiscuous mode
[  669.533840][T12640] veth2: entered allmulticast mode
[  669.543534][T12640] veth3: entered allmulticast mode
[  669.551847][T12640] vxcan0: entered allmulticast mode
[  669.557300][T12640] vxcan1: entered allmulticast mode
[  669.569464][T12640] ip6tnl1: entered allmulticast mode
[  669.569918][  T921] usb 3-1: device descriptor read/64, error -71
[  669.577097][T12640] vxcan2: entered allmulticast mode
[  669.594400][T12640] vxcan3: entered allmulticast mode
[  669.621547][ T1159] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.679761][  T197] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.724403][  T197] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.804967][  T921] usb usb3-port1: attempt power cycle
[  669.813602][  T197] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  670.163711][  T921] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  670.350029][  T921] usb 3-1: device descriptor read/8, error -71
[  670.619103][  T921] usb 3-1: new full-speed USB device number 83 using dummy_hcd
[  671.774857][  T921] usb 3-1: device descriptor read/8, error -71
[  671.969585][  T921] usb usb3-port1: unable to enumerate USB device
[  673.250531][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'.
[  673.369840][T12716] FAULT_INJECTION: forcing a failure.
[  673.369840][T12716] name failslab, interval 1, probability 0, space 0, times 0
[  673.479153][T12716] CPU: 0 UID: 0 PID: 12716 Comm: syz.1.1674 Not tainted syzkaller #0 PREEMPT(full) 
[  673.479184][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  673.479196][T12716] Call Trace:
[  673.479204][T12716]  <TASK>
[  673.479214][T12716]  dump_stack_lvl+0x189/0x250
[  673.479242][T12716]  ? __pfx____ratelimit+0x10/0x10
[  673.479263][T12716]  ? __pfx_dump_stack_lvl+0x10/0x10
[  673.479287][T12716]  ? __pfx__printk+0x10/0x10
[  673.479311][T12716]  ? netlink_unicast+0x82c/0x9e0
[  673.479343][T12716]  ? ___sys_sendmsg+0x21f/0x2a0
[  673.479367][T12716]  ? __do_fast_syscall_32+0xb6/0x2b0
[  673.479401][T12716]  should_fail_ex+0x414/0x560
[  673.479437][T12716]  should_failslab+0xa8/0x100
[  673.479469][T12716]  kmem_cache_alloc_noprof+0x73/0x3c0
[  673.479496][T12716]  ? skb_clone+0x212/0x3a0
[  673.479527][T12716]  skb_clone+0x212/0x3a0
[  673.479558][T12716]  __netlink_deliver_tap+0x404/0x850
[  673.479594][T12716]  ? netlink_deliver_tap+0x2e/0x1b0
[  673.479617][T12716]  netlink_deliver_tap+0x19c/0x1b0
[  673.479640][T12716]  netlink_sendskb+0x68/0x140
[  673.479674][T12716]  netlink_unicast+0x397/0x9e0
[  673.479703][T12716]  ? __asan_memcpy+0x40/0x70
[  673.479735][T12716]  ? __pfx_netlink_unicast+0x10/0x10
[  673.479774][T12716]  netlink_rcv_skb+0x28c/0x470
[  673.479796][T12716]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  673.479813][T12716]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  673.479837][T12716]  ? netlink_deliver_tap+0x2e/0x1b0
[  673.479857][T12716]  netlink_unicast+0x82c/0x9e0
[  673.479886][T12716]  ? __pfx_netlink_unicast+0x10/0x10
[  673.479909][T12716]  ? netlink_sendmsg+0x642/0xb30
[  673.479923][T12716]  ? skb_put+0x11b/0x210
[  673.479942][T12716]  netlink_sendmsg+0x805/0xb30
[  673.479964][T12716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  673.479981][T12716]  ? __import_iovec+0x5d4/0x7f0
[  673.479999][T12716]  ? aa_sock_msg_perm+0xf1/0x1d0
[  673.480015][T12716]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  673.480038][T12716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  673.480055][T12716]  __sock_sendmsg+0x21c/0x270
[  673.480079][T12716]  ____sys_sendmsg+0x505/0x830
[  673.480101][T12716]  ? __pfx_____sys_sendmsg+0x10/0x10
[  673.480131][T12716]  ___sys_sendmsg+0x21f/0x2a0
[  673.480151][T12716]  ? __pfx____sys_sendmsg+0x10/0x10
[  673.480196][T12716]  ? __fget_files+0x2a/0x420
[  673.480208][T12716]  ? __fget_files+0x3a0/0x420
[  673.480229][T12716]  __sys_sendmsg+0x164/0x220
[  673.480248][T12716]  ? __pfx___sys_sendmsg+0x10/0x10
[  673.480278][T12716]  ? lockdep_hardirqs_on+0x9c/0x150
[  673.480295][T12716]  __do_fast_syscall_32+0xb6/0x2b0
[  673.480311][T12716]  ? lockdep_hardirqs_on+0x9c/0x150
[  673.480328][T12716]  do_fast_syscall_32+0x34/0x80
[  673.480343][T12716]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  673.480361][T12716] RIP: 0023:0xf707e539
[  673.480374][T12716] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  673.480387][T12716] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  673.480402][T12716] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0
[  673.480413][T12716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  673.480421][T12716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  673.480429][T12716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  673.480438][T12716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  673.480458][T12716]  </TASK>
[  674.725002][T12732] vim2m vim2m.0: vidioc_s_fmt queue busy
[  675.565612][    T9] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[  675.732767][    T9] usb 3-1: device descriptor read/64, error -71
[  676.049261][    T9] usb 3-1: new full-speed USB device number 85 using dummy_hcd
[  676.536912][    T9] usb 3-1: device descriptor read/64, error -71
[  676.606372][T12761] netlink: 193484 bytes leftover after parsing attributes in process `syz.1.1687'.
[  676.616583][T12761] netlink: zone id is out of range
[  676.635689][T12761] netlink: zone id is out of range
[  676.646293][T12761] netlink: zone id is out of range
[  676.657407][    T9] usb usb3-port1: attempt power cycle
[  676.758677][T12761] netlink: zone id is out of range
[  676.764753][T12761] netlink: zone id is out of range
[  676.774555][T12761] netlink: zone id is out of range
[  676.793933][T12761] netlink: zone id is out of range
[  676.812456][T12761] netlink: zone id is out of range
[  676.818667][T12761] netlink: zone id is out of range
[  676.875206][T12761] netlink: zone id is out of range
[  677.089109][    T9] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[  677.163775][    T9] usb 3-1: device descriptor read/8, error -71
[  677.246984][   T30] audit: type=1326 audit(1757233125.309:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  677.463000][   T30] audit: type=1326 audit(1757233125.309:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  677.500039][    T9] usb 3-1: new full-speed USB device number 87 using dummy_hcd
[  677.562512][   T30] audit: type=1326 audit(1757233125.309:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf707e539 code=0x7ffc0000
[  677.618240][    T9] usb 3-1: device descriptor read/8, error -71
[  677.639206][   T30] audit: type=1326 audit(1757233125.309:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  677.779420][    T9] usb usb3-port1: unable to enumerate USB device
[  677.796495][   T30] audit: type=1326 audit(1757233125.309:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  679.339832][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'.
[  679.352053][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'.
[  679.384299][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'.
[  680.782378][T12818] macsec2: entered allmulticast mode
[  681.027095][T12823] syzkaller1: entered promiscuous mode
[  681.050918][T12823] syzkaller1: entered allmulticast mode
[  683.468477][T12858] delete_channel: no stack
[  686.732767][T12922] fuse: Bad value for 'rootmode'
[  687.479699][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1735'.
[  687.759144][    T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  687.890326][    T9] usb 3-1: device descriptor read/64, error -71
[  688.139694][    T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  688.678155][    T9] usb 3-1: device descriptor read/64, error -71
[  688.844059][    T9] usb usb3-port1: attempt power cycle
[  689.043390][T12951] veth0_to_bridge: left allmulticast mode
[  689.049340][T12951] veth0_to_bridge: left promiscuous mode
[  689.058335][T12951] bridge0: port 1(veth0_to_bridge) entered disabled state
[  689.389145][    T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  689.421426][    T9] usb 3-1: device descriptor read/8, error -71
[  689.638591][T12958] fuse: Bad value for 'rootmode'
[  689.685188][    T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  689.729979][    T9] usb 3-1: device descriptor read/8, error -71
[  689.852372][    T9] usb usb3-port1: unable to enumerate USB device
[  690.264992][T12961] netlink: 'syz.3.1745': attribute type 1 has an invalid length.
[  690.275676][T12961] netlink: 'syz.3.1745': attribute type 2 has an invalid length.
[  691.273379][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  691.279820][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  691.289107][ T5936] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  691.495484][ T5936] usb 1-1: unable to get BOS descriptor or descriptor too short
[  691.506757][ T5936] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7
[  691.576408][ T5936] usb 1-1: config 1 interface 1 has no altsetting 0
[  691.898502][ T5936] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  691.917874][ T5968] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  691.958605][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.987204][ T5936] usb 1-1: Product: syz
[  691.993543][ T5936] usb 1-1: Manufacturer: syz
[  692.016791][ T5936] usb 1-1: SerialNumber: syz
[  692.092717][ T5968] usb 5-1: device descriptor read/64, error -71
[  692.353607][ T5968] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  692.491583][ T5968] usb 5-1: device descriptor read/64, error -71
[  692.616237][ T5927] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  692.654490][ T5968] usb usb5-port1: attempt power cycle
[  692.783285][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short
[  692.794368][ T5927] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7
[  692.808726][ T5927] usb 4-1: config 1 interface 1 has no altsetting 0
[  692.841425][ T5927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  692.852314][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.878043][ T5927] usb 4-1: Product: syz
[  692.882976][ T5927] usb 4-1: Manufacturer: syz
[  692.893318][ T5927] usb 4-1: SerialNumber: syz
[  693.019806][ T5968] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  693.079900][ T5968] usb 5-1: device descriptor read/8, error -71
[  693.329412][ T5968] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  693.350188][ T5968] usb 5-1: device descriptor read/8, error -71
[  693.469549][ T5968] usb usb5-port1: unable to enumerate USB device
[  693.972687][ T5936] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  694.037933][T13004] netlink: 'syz.0.1756': attribute type 8 has an invalid length.
[  694.124386][ T5936] usb 1-1: USB disconnect, device number 52
[  694.139332][ T5968] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  694.247994][T11904] udevd[11904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.272548][T13007] fuse: Bad value for 'rootmode'
[  694.301537][ T5968] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  694.349441][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.417563][ T5968] usb 2-1: config 0 descriptor??
[  695.110417][   T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  695.223956][ T5927] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  695.293812][   T10] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[  695.315523][ T5927] usb 4-1: USB disconnect, device number 55
[  695.336321][   T10] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[  695.364143][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  695.531272][   T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  695.540916][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.605806][   T10] usb 5-1: Product: syz
[  695.615832][   T10] usb 5-1: Manufacturer: syz
[  695.631435][   T10] usb 5-1: SerialNumber: syz
[  695.633363][T11904] udevd[11904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  695.654420][   T10] usb 5-1: config 0 descriptor??
[  695.679712][   T10] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected
[  695.687717][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  695.729627][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  695.740491][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  695.748705][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  695.764501][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85
[  695.827812][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5
[  695.952405][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.030434][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.045771][   T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  696.061556][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83
[  696.070144][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3
[  696.079652][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  696.141527][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86
[  696.150232][   T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  696.160600][   T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  696.175731][   T10] usb 5-1: USB disconnect, device number 50
[  696.190935][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  696.386661][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  696.416040][   T10] keyspan 5-1:0.0: device disconnected
[  696.912189][ T5968] pegasus 2-1:0.0: setup Pegasus II specific registers
[  697.548730][ T5968] pegasus 2-1:0.0: can't locate MII phy, using default
[  697.588412][ T5968] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, f6:23:23:cc:23:6f
[  697.797370][ T5968] usb 2-1: USB disconnect, device number 86
[  698.080007][ T5927] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  698.417599][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  698.467012][ T5927] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  698.520417][ T5927] usb 5-1: config 1 has no interface number 1
[  698.526818][ T5927] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  698.634410][ T5927] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  698.767738][ T5927] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  698.777293][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.793206][ T5927] usb 5-1: Product: syz
[  698.867298][ T5927] usb 5-1: Manufacturer: syz
[  698.896875][ T5927] usb 5-1: SerialNumber: syz
[  699.009591][T13049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  699.275290][T13062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  699.355967][T13062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.372963][ T5927] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  699.389841][ T5927] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  699.446184][ T5869] Bluetooth: hci3: unexpected event for opcode 0x0402
[  699.615608][ T5927] usb 5-1: USB disconnect, device number 51
[  699.844913][T12250] udevd[12250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.264433][T13070] fuse: Unknown parameter 'use00000000000000000000'
[  700.821062][T13071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1770'.
[  702.999649][ T5951] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  703.145272][ T5951] usb 1-1: device descriptor read/64, error -71
[  703.452595][ T5951] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  703.619132][ T5951] usb 1-1: device descriptor read/64, error -71
[  703.730557][ T5951] usb usb1-port1: attempt power cycle
[  703.828690][T13122] fuse: Unknown parameter 'use00000000000000000000'
[  704.082521][ T5951] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  704.113535][ T5951] usb 1-1: device descriptor read/8, error -71
[  704.316832][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1784'.
[  704.379334][ T5951] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  704.590840][T13126] veth5: entered promiscuous mode
[  704.595981][T13126] veth5: entered allmulticast mode
[  704.719742][T13126] bridge8: port 1(veth5) entered blocking state
[  704.731270][ T5951] usb 1-1: device descriptor read/8, error -71
[  704.739586][T13126] bridge8: port 1(veth5) entered disabled state
[  704.852012][ T5951] usb usb1-port1: unable to enumerate USB device
[  705.638516][T13143] FAULT_INJECTION: forcing a failure.
[  705.638516][T13143] name failslab, interval 1, probability 0, space 0, times 0
[  705.708621][T13143] CPU: 0 UID: 0 PID: 13143 Comm: syz.1.1790 Not tainted syzkaller #0 PREEMPT(full) 
[  705.708643][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  705.708653][T13143] Call Trace:
[  705.708659][T13143]  <TASK>
[  705.708665][T13143]  dump_stack_lvl+0x189/0x250
[  705.708689][T13143]  ? __pfx____ratelimit+0x10/0x10
[  705.708704][T13143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.708722][T13143]  ? __pfx__printk+0x10/0x10
[  705.708747][T13143]  ? __pfx___might_resched+0x10/0x10
[  705.708760][T13143]  ? fs_reclaim_acquire+0x7d/0x100
[  705.708787][T13143]  should_fail_ex+0x414/0x560
[  705.708814][T13143]  should_failslab+0xa8/0x100
[  705.708837][T13143]  __kmalloc_cache_noprof+0x70/0x3d0
[  705.708857][T13143]  ? fuse_lookup_name+0x1b5/0x860
[  705.708879][T13143]  fuse_lookup_name+0x1b5/0x860
[  705.708907][T13143]  ? __pfx_fuse_lookup_name+0x10/0x10
[  705.708929][T13143]  ? fuse_lock_inode+0xd3/0x120
[  705.708987][T13143]  fuse_lookup+0x1e9/0x640
[  705.709021][T13143]  ? __pfx_fuse_lookup+0x10/0x10
[  705.709061][T13143]  ? __pfx_d_alloc_parallel+0x10/0x10
[  705.709092][T13143]  fuse_atomic_open+0x173/0x440
[  705.709125][T13143]  ? __pfx_fuse_atomic_open+0x10/0x10
[  705.709154][T13143]  path_openat+0xf66/0x3830
[  705.709177][T13143]  ? arch_stack_walk+0xfc/0x150
[  705.709238][T13143]  ? __pfx_path_openat+0x10/0x10
[  705.709259][T13143]  ? do_fast_syscall_32+0x34/0x80
[  705.709302][T13143]  do_filp_open+0x1fa/0x410
[  705.709324][T13143]  ? __lock_acquire+0xab9/0xd20
[  705.709355][T13143]  ? __pfx_do_filp_open+0x10/0x10
[  705.709402][T13143]  ? _raw_spin_unlock+0x28/0x50
[  705.709429][T13143]  ? alloc_fd+0x64c/0x6c0
[  705.709471][T13143]  do_sys_openat2+0x121/0x1c0
[  705.709497][T13143]  ? __pfx_do_sys_openat2+0x10/0x10
[  705.709543][T13143]  __se_sys_openat2+0x226/0x2c0
[  705.709570][T13143]  ? __pfx___se_sys_openat2+0x10/0x10
[  705.709601][T13143]  ? lockdep_hardirqs_on+0x9c/0x150
[  705.709626][T13143]  __do_fast_syscall_32+0xb6/0x2b0
[  705.709649][T13143]  ? lockdep_hardirqs_on+0x9c/0x150
[  705.709674][T13143]  do_fast_syscall_32+0x34/0x80
[  705.709697][T13143]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  705.709722][T13143] RIP: 0023:0xf707e539
[  705.709739][T13143] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  705.709758][T13143] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 00000000000001b5
[  705.709779][T13143] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000
[  705.709794][T13143] RDX: 0000000080000100 RSI: 0000000000000018 RDI: 0000000000000000
[  705.709807][T13143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  705.709819][T13143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  705.709831][T13143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  705.709862][T13143]  </TASK>
[  705.992669][    C0] vkms_vblank_simulate: vblank timer overrun
[  706.740525][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.750251][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.951169][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  707.100127][    T9] usb 4-1: device descriptor read/64, error -71
[  707.344340][    T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  707.529153][    T9] usb 4-1: device descriptor read/64, error -71
[  707.649992][    T9] usb usb4-port1: attempt power cycle
[  707.924456][T13166] fuse: Unknown parameter 'use00000000000000000000'
[  707.937710][T13168] sch_tbf: peakrate 1 is lower than or equals to rate 6 !
[  707.988524][T13168] netlink: 'syz.2.1796': attribute type 6 has an invalid length.
[  708.003826][T13168] netlink: 'syz.2.1796': attribute type 6 has an invalid length.
[  708.069273][    T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  708.122204][    T9] usb 4-1: device descriptor read/8, error -71
[  708.369501][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  708.472999][    T9] usb 4-1: device descriptor read/8, error -71
[  708.491122][ T5968] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  708.590418][    T9] usb usb4-port1: unable to enumerate USB device
[  708.665253][ T5968] usb 3-1: Using ep0 maxpacket: 8
[  708.753932][ T5968] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  708.769426][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.797425][ T5968] usb 3-1: config 0 descriptor??
[  709.410421][ T5927] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  709.754635][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short
[  709.779327][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  709.993815][ T5927] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  710.200499][ T5927] usb 2-1: config 1 has no interface number 1
[  710.221441][ T5927] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  710.253789][ T5927] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7
[  710.300019][ T5927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  710.309819][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.321487][ T5927] usb 2-1: Product: syz
[  710.332553][ T5927] usb 2-1: Manufacturer: syz
[  710.342975][ T5927] usb 2-1: SerialNumber: syz
[  711.030858][ T5968] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  711.041551][ T5968] asix 3-1:0.0: probe with driver asix failed with error -71
[  711.098499][ T5968] usb 3-1: USB disconnect, device number 92
[  713.685935][T13225] fuse: Unknown parameter 'user_i00000000000000000000'
[  713.745550][ T5927] usb 2-1: invalid UAC_HEADER (v1)
[  713.799992][ T5927] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  713.900627][ T5927] usb 2-1: USB disconnect, device number 87
[  713.953417][T11904] udevd[11904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  714.495502][T13236] netlink: 'syz.2.1811': attribute type 21 has an invalid length.
[  715.671614][T13252] loop6: detected capacity change from 0 to 7
[  715.720932][T11899] Dev loop6: unable to read RDB block 7
[  715.729930][T11899]  loop6: AHDI p1 p2
[  715.738493][T11899] loop6: partition table partially beyond EOD, truncated
[  715.773941][T11899] loop6: p1 start 926365495 is beyond EOD, truncated
[  715.980332][T13252] Dev loop6: unable to read RDB block 7
[  715.986846][T13252]  loop6: AHDI p1 p2
[  715.996970][T13252] loop6: partition table partially beyond EOD, truncated
[  716.004951][T13252] loop6: p1 start 926365495 is beyond EOD, truncated
[  716.923872][ T5927] usb 3-1: new full-speed USB device number 93 using dummy_hcd
[  717.083365][ T5927] usb 3-1: device descriptor read/64, error -71
[  717.359146][ T5927] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[  717.500838][ T5927] usb 3-1: device descriptor read/64, error -71
[  717.709585][ T5927] usb usb3-port1: attempt power cycle
[  718.393273][ T5927] usb 3-1: new full-speed USB device number 95 using dummy_hcd
[  718.722339][ T5927] usb 3-1: device descriptor read/8, error -71
[  718.959208][ T5927] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[  718.983535][ T5927] usb 3-1: device descriptor read/8, error -71
[  719.099497][ T5927] usb usb3-port1: unable to enumerate USB device
[  719.455865][T13286] fuse: Unknown parameter 'user_i00000000000000000000'
[  721.540724][T13310] ip6_vti0: Master is either lo or non-ether device
[  721.858948][T13316] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  721.872104][T13316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1831'.
[  723.357634][T13339] netlink: 'syz.3.1836': attribute type 4 has an invalid length.
[  723.609399][T13344] fuse: Unknown parameter 'user_i00000000000000000000'
[  723.689140][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'.
[  724.614000][ T5968] usb 3-1: new full-speed USB device number 97 using dummy_hcd
[  724.789461][ T5968] usb 3-1: device descriptor read/64, error -71
[  725.046701][ T5968] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[  725.369134][ T5968] usb 3-1: device descriptor read/64, error -71
[  725.504621][ T5968] usb usb3-port1: attempt power cycle
[  725.963434][ T5968] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[  726.014565][ T5968] usb 3-1: device descriptor read/8, error -71
[  726.289645][ T5968] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[  726.313685][ T5968] usb 3-1: device descriptor read/8, error -71
[  726.430998][ T5968] usb usb3-port1: unable to enumerate USB device
[  727.129115][ T5968] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  727.401331][ T5968] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  727.739071][ T5968] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  727.978845][ T5968] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  728.076733][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.404522][ T5936] usb 4-1: USB disconnect, device number 60
[  730.486127][T13411] fuse: Unknown parameter 'user_id00000000000000000000'
[  732.970800][ T5968] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[  733.699242][ T5968] usb 2-1: device descriptor read/64, error -71
[  734.229100][ T5968] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[  734.389130][ T5968] usb 2-1: device descriptor read/64, error -71
[  734.639592][ T5968] usb usb2-port1: attempt power cycle
[  735.449704][ T5968] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  735.520071][ T5968] usb 2-1: device descriptor read/8, error -71
[  735.657547][   T30] audit: type=1326 audit(1757233183.719:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.1863" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0
[  735.701188][T13463] netlink: 'syz.1.1865': attribute type 1 has an invalid length.
[  735.918024][T13463] gretap2: entered promiscuous mode
[  735.958861][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'.
[  735.973702][T13463] bond3: (slave gretap2): making interface the new active one
[  736.006531][T13463] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  736.190854][T13470] 8021q: adding VLAN 0 to HW filter on device bond3
[  736.228243][T13477] fuse: Unknown parameter 'user_id00000000000000000000'
[  740.279342][ T5968] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  740.487779][ T5968] usb 2-1: device descriptor read/64, error -71
[  740.799106][ T5968] usb 2-1: new full-speed USB device number 93 using dummy_hcd
[  740.939187][ T5968] usb 2-1: device descriptor read/64, error -71
[  741.050701][ T5968] usb usb2-port1: attempt power cycle
[  741.452680][ T5968] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[  741.501778][ T5968] usb 2-1: device descriptor read/8, error -71
[  741.739271][ T5968] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[  741.772165][ T5968] usb 2-1: device descriptor read/8, error -71
[  741.896168][ T5968] usb usb2-port1: unable to enumerate USB device
[  742.265027][T13538] fuse: Unknown parameter 'user_id00000000000000000000'
[  742.353061][T13545] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1883'.
[  746.049109][ T5936] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  746.239202][ T5936] usb 5-1: device descriptor read/64, error -71
[  746.619104][ T5936] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  746.799480][ T5936] usb 5-1: device descriptor read/64, error -71
[  746.909852][ T5936] usb usb5-port1: attempt power cycle
[  747.279589][ T5936] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  747.346407][ T5936] usb 5-1: device descriptor read/8, error -71
[  747.563494][T13604] fuse: Bad value for 'fd'
[  747.713510][ T5936] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  747.876503][ T5936] usb 5-1: device descriptor read/8, error -71
[  748.178889][ T5936] usb usb5-port1: unable to enumerate USB device
[  752.129713][T13652] fuse: Bad value for 'fd'
[  752.713243][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  752.719899][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  753.059088][ T5968] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  753.381187][ T5968] usb 1-1: device descriptor read/64, error -71
[  753.709125][ T5968] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  753.882211][ T5968] usb 1-1: device descriptor read/64, error -71
[  754.460738][ T5968] usb usb1-port1: attempt power cycle
[  755.119144][ T5968] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  755.251230][ T5968] usb 1-1: device descriptor read/8, error -71
[  755.479117][ T5936] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  755.579055][ T5968] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  755.929252][ T5936] usb 3-1: Using ep0 maxpacket: 8
[  755.940717][ T5936] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 23, changing to 8
[  755.955171][ T5936] usb 3-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 32
[  755.981148][ T5968] usb 1-1: device descriptor read/8, error -71
[  755.988627][ T5936] usb 3-1: config 1 interface 0 has no altsetting 0
[  756.078687][ T5936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  756.094762][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.099467][ T5968] usb usb1-port1: unable to enumerate USB device
[  756.114280][ T5936] usb 3-1: Product: 轢㵲㮂렻嘦렩ⲵ㓳䷆멿㣗බ䫣쿫嫛麘•Ä懆朑䜣哾蜼왡暲Ċ⏲쫛᠕䓸쟥쨞猉돧㱑뢕₨⮿㎐톥挀ᴲ࠱⨗炮死菌婿쉤漱针熳䆐₪炰㿸멯敟縼繫䓓䳍᫸旑ꔎ矐邾㧮깫▐燇臙
[  756.139201][    C1] vkms_vblank_simulate: vblank timer overrun
[  756.173208][ T5936] usb 3-1: Manufacturer: Ⰻ
[  756.186830][ T5936] usb 3-1: SerialNumber: Р
[  756.224214][T13694] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  756.639730][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.656472][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.687850][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'.
[  756.703447][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'.
[  756.760449][T13694] netlink: 'syz.2.1919': attribute type 1 has an invalid length.
[  756.985527][T13694] 8021q: adding VLAN 0 to HW filter on device bond2
[  757.275145][T13705] bond2: (slave geneve3): making interface the new active one
[  757.485658][T13705] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  757.532494][T13694] bond2: entered promiscuous mode
[  757.537644][T13694] geneve3: entered promiscuous mode
[  757.606803][ T5936] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  757.671214][ T5936] usb 3-1: USB disconnect, device number 101
[  758.717176][T13727] fuse: Bad value for 'fd'
[  760.729099][    T9] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  761.019158][ T5956] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  761.250580][ T5956] usb 4-1: Using ep0 maxpacket: 16
[  761.266072][ T5956] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  761.277211][ T5956] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  761.298511][ T5956] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  761.311411][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.345610][    T9] usb 5-1: device descriptor read/64, error -71
[  761.375935][ T5956] usb 4-1: Product: syz
[  761.383887][ T5956] usb 4-1: Manufacturer: syz
[  761.391570][ T5956] usb 4-1: SerialNumber: syz
[  761.589122][    T9] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  761.799123][    T9] usb 5-1: device descriptor read/64, error -71
[  761.837626][T13753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.846846][T13753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.857411][T13753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.900351][T13753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.909461][    T9] usb usb5-port1: attempt power cycle
[  761.967537][ T5956] usb 4-1: 0:2 : does not exist
[  762.309879][    T9] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[  762.343843][    T9] usb 5-1: device descriptor read/8, error -71
[  762.919581][    T9] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  762.939886][ T5956] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  762.956352][    T9] usb 5-1: device descriptor read/8, error -71
[  763.014925][ T5956] usb 4-1: USB disconnect, device number 61
[  763.099057][    T9] usb usb5-port1: unable to enumerate USB device
[  763.172542][T11904] udevd[11904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  764.481849][T13791] fuse: Unknown parameter '0x0000000000000009'
[  765.809495][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'.
[  767.989491][ T5936] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  768.154340][ T5936] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  768.196668][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  768.227188][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  768.395955][T13840] fuse: Unknown parameter '0x0000000000000009'
[  768.404837][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  768.485638][    T9] usb 3-1: new full-speed USB device number 102 using dummy_hcd
[  768.511243][ T5936] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  768.523852][ T5936] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  768.536189][ T5936] usb 5-1: Manufacturer: syz
[  768.590597][ T5936] usb 5-1: config 0 descriptor??
[  768.719310][    T9] usb 3-1: device descriptor read/64, error -71
[  768.959042][    T9] usb 3-1: new full-speed USB device number 103 using dummy_hcd
[  769.012402][ T5936] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  769.450036][    T9] usb 3-1: device descriptor read/64, error -71
[  769.504462][ T5936] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  769.559612][    T9] usb usb3-port1: attempt power cycle
[  769.789187][ T5927] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  769.919375][    T9] usb 3-1: new full-speed USB device number 104 using dummy_hcd
[  769.962809][    T9] usb 3-1: device descriptor read/8, error -71
[  770.065066][ T5951] usb 5-1: USB disconnect, device number 60
[  770.629247][    T9] usb 3-1: new full-speed USB device number 105 using dummy_hcd
[  770.666121][    T9] usb 3-1: device descriptor read/8, error -71
[  770.783291][    T9] usb usb3-port1: unable to enumerate USB device
[  772.382484][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'.
[  773.144584][T13883] fuse: Unknown parameter '0x0000000000000009'
[  773.976712][T13893] netlink: 'syz.0.1966': attribute type 1 has an invalid length.
[  773.987102][T13893] netlink: 'syz.0.1966': attribute type 2 has an invalid length.
[  774.219068][    T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  774.445032][    T9] usb 5-1: Using ep0 maxpacket: 32
[  774.456133][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  774.525313][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  774.614982][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  774.629283][   T10] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  774.662549][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  774.756007][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  774.775730][    T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  774.775764][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.775786][    T9] usb 5-1: Product: syz
[  774.775803][    T9] usb 5-1: Manufacturer: syz
[  774.775820][    T9] usb 5-1: SerialNumber: syz
[  774.787224][    T9] usb 5-1: config 0 descriptor??
[  774.792718][   T10] usb 4-1: device descriptor read/64, error -71
[  775.029075][   T10] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  775.261101][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.269765][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.277938][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.287286][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.294249][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.301700][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.308432][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.315623][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.322087][   T10] usb 4-1: device descriptor read/64, error -71
[  775.353925][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.369318][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.378401][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.397423][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.412442][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  775.450056][   T10] usb usb4-port1: attempt power cycle
[  775.511991][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  776.036459][   T10] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  776.125039][   T10] usb 4-1: device descriptor read/8, error -71
[  776.135100][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  776.186612][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  776.193608][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  776.220341][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  776.227430][    T9] iforce 5-1:0.0: usb_submit_urb failed: -71
[  776.318979][    T9] input input24: Timeout waiting for response from device.
[  776.561532][   T10] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  776.592422][    T9] usb 5-1: USB disconnect, device number 61
[  776.763477][   T10] usb 4-1: device descriptor read/8, error -71
[  776.879838][   T10] usb usb4-port1: unable to enumerate USB device
[  777.694385][T13932] fuse: Unknown parameter '0x0000000000000009'
[  778.125240][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1979'.
[  779.956396][T13971] fuse: Unknown parameter '0x0000000000000009'
[  780.719672][   T10] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  780.983542][   T10] usb 1-1: device descriptor read/64, error -71
[  781.349502][   T10] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  781.676886][   T10] usb 1-1: device descriptor read/64, error -71
[  781.885371][   T10] usb usb1-port1: attempt power cycle
[  782.149056][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'.
[  782.352868][   T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd
[  782.544313][   T10] usb 1-1: device descriptor read/8, error -71
[  783.012759][   T10] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[  783.508058][   T10] usb 1-1: device descriptor read/8, error -71
[  783.645191][   T10] usb usb1-port1: unable to enumerate USB device
[  784.525989][T14021] fuse: Unknown parameter '0x0000000000000009'
[  786.079217][ T5951] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  786.508776][ T5951] usb 1-1: Using ep0 maxpacket: 32
[  786.543229][ T5951] usb 1-1: config 0 has an invalid interface number: 66 but max is 0
[  786.588571][ T5951] usb 1-1: config 0 has no interface number 0
[  786.637821][ T5951] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  786.729826][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.746412][ T5951] usb 1-1: Product: syz
[  786.752475][ T5951] usb 1-1: Manufacturer: syz
[  786.758731][ T5951] usb 1-1: SerialNumber: syz
[  786.815620][ T5951] usb 1-1: config 0 descriptor??
[  786.837578][ T5951] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  786.936907][ T5951] dvb-usb: bulk message failed: -22 (2/0)
[  787.016921][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  787.035055][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.044808][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.063303][ T5934] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  787.080554][ T5951] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  787.125414][T14034] dvb-usb: bulk message failed: -22 (3/0)
[  787.129272][ T5951] usb 1-1: media controller created
[  787.140262][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.170668][T14065] dvb-usb: bulk message failed: -22 (3/0)
[  787.206641][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  787.267800][ T5934] usb 4-1: device descriptor read/64, error -71
[  787.278015][T14066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.320730][ T5951] cxusb: set interface failed
[  787.326410][ T5951] dvb-usb: bulk message failed: -22 (1/0)
[  787.333916][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.391506][T14066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.609260][ T5934] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  787.662536][ T5951] DVB: Unable to find symbol lgdt330x_attach()
[  787.668838][ T5951] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  787.793418][ T5951] rc_core: IR keymap rc-dvico-portable not found
[  787.804590][ T5951] Registered IR keymap rc-empty
[  787.815808][ T5951] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  787.854468][ T5934] usb 4-1: device descriptor read/64, error -71
[  787.979477][ T5934] usb usb4-port1: attempt power cycle
[  788.039347][ T5951] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input25
[  788.116549][ T5951] dvb-usb: schedule remote query interval to 100 msecs.
[  788.243762][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  788.334018][ T5951] usb 1-1: USB disconnect, device number 65
[  788.349093][ T5934] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  788.469590][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  788.499732][ T5934] usb 4-1: device descriptor read/8, error -71
[  788.829884][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  788.842855][ T5934] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  788.991075][T14081] fuse: Unknown parameter 'fd0x0000000000000009'
[  789.089094][ T5936] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  789.261805][ T5936] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  789.364720][ T5936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  789.403311][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  789.447028][ T5936] usb 5-1: Product: syz
[  789.451426][ T5936] usb 5-1: Manufacturer: syz
[  789.457315][ T5936] usb 5-1: SerialNumber: syz
[  789.801323][T14095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.828667][T14095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.911328][T14077] ALSA: seq fatal error: cannot create timer (-19)
[  790.149244][ T5936] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  790.353606][ T5934] usb 4-1: device descriptor read/8, error -71
[  790.499709][ T5934] usb usb4-port1: unable to enumerate USB device
[  791.833393][ T5934] usb 5-1: USB disconnect, device number 62
[  791.842540][ T5934] usblp0: removed
[  792.290139][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2020'.
[  794.362947][T14136] fuse: Unknown parameter 'fd0x0000000000000009'
[  795.479248][ T5934] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  795.649909][ T5934] usb 5-1: device descriptor read/64, error -71
[  795.989027][ T5934] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  796.199156][ T5934] usb 5-1: device descriptor read/64, error -71
[  796.760507][ T5934] usb usb5-port1: attempt power cycle
[  797.219056][ T5934] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  797.495452][ T5934] usb 5-1: device descriptor read/8, error -71
[  797.799162][ T5934] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  797.809430][T14181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  797.894120][T14177] syzkaller0: entered promiscuous mode
[  797.904765][T14177] syzkaller0: entered allmulticast mode
[  797.938628][T14177] tipc: Resetting bearer <eth:syzkaller0>
[  798.153230][T14176] tipc: Resetting bearer <eth:syzkaller0>
[  798.259698][T14176] tipc: Disabling bearer <eth:syzkaller0>
[  798.712836][ T5934] usb 5-1: device descriptor read/8, error -71
[  798.869752][ T5934] usb usb5-port1: unable to enumerate USB device
[  799.159126][ T5934] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  799.296858][T14194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  799.308645][T14194] syzkaller0: entered promiscuous mode
[  799.314892][T14194] syzkaller0: entered allmulticast mode
[  799.323517][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  799.343291][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  799.358682][ T5934] usb 5-1: can't read configurations, error -61
[  799.402383][T14194] tipc: Resetting bearer <eth:syzkaller0>
[  799.421606][T14193] tipc: Resetting bearer <eth:syzkaller0>
[  799.454170][T14193] tipc: Disabling bearer <eth:syzkaller0>
[  799.543582][ T5934] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  799.578500][T14202] fuse: Unknown parameter 'fd0x0000000000000009'
[  799.736347][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  799.809116][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  799.817003][ T5934] usb 5-1: can't read configurations, error -61
[  799.826256][ T5934] usb usb5-port1: attempt power cycle
[  800.659231][ T5934] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  800.702310][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  800.710305][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  800.718074][ T5934] usb 5-1: can't read configurations, error -61
[  800.859144][ T5934] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  800.904927][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  800.936300][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -61
[  800.959629][ T5934] usb 5-1: can't read configurations, error -61
[  800.996696][ T5934] usb usb5-port1: unable to enumerate USB device
[  802.423330][    T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  803.209052][    T9] usb 1-1: device descriptor read/64, error -71
[  803.460339][    T9] usb 1-1: new full-speed USB device number 67 using dummy_hcd
[  803.609187][    T9] usb 1-1: device descriptor read/64, error -71
[  803.732055][    T9] usb usb1-port1: attempt power cycle
[  804.154318][    T9] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  804.610733][    T9] usb 1-1: device descriptor read/8, error -71
[  805.846887][T14277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2061'.
[  806.090382][T14277] bond0: entered promiscuous mode
[  806.129188][T14277] bond_slave_0: entered promiscuous mode
[  806.166234][T14277] bond_slave_1: entered promiscuous mode
[  806.195156][T14277] bond0: left promiscuous mode
[  806.219891][T14277] bond_slave_0: left promiscuous mode
[  806.242492][T14277] bond_slave_1: left promiscuous mode
[  806.442543][ T5869] Bluetooth: hci0: unexpected event for opcode 0x0402
[  808.159185][ T5927] usb 5-1: new full-speed USB device number 71 using dummy_hcd
[  808.586412][ T5927] usb 5-1: device descriptor read/64, error -71
[  808.829066][ T5927] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[  809.109168][ T5927] usb 5-1: device descriptor read/64, error -71
[  809.229342][ T5927] usb usb5-port1: attempt power cycle
[  809.789353][ T5927] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[  809.849146][ T5927] usb 5-1: device descriptor read/8, error -71
[  810.219385][ T5927] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  810.242509][ T5927] usb 5-1: device descriptor read/8, error -71
[  810.363549][ T5927] usb usb5-port1: unable to enumerate USB device
[  813.654301][T14358] netlink: 'syz.4.2081': attribute type 5 has an invalid length.
[  813.683687][T14358] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2081'.
[  814.154302][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  814.160848][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  815.969231][ T5927] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  816.245990][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'.
[  816.338776][ T5927] usb 2-1: device descriptor read/64, error -71
[  816.659105][ T5927] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[  816.809073][ T5927] usb 2-1: device descriptor read/64, error -71
[  816.964287][ T5927] usb usb2-port1: attempt power cycle
[  819.274797][T14430] FAULT_INJECTION: forcing a failure.
[  819.274797][T14430] name failslab, interval 1, probability 0, space 0, times 0
[  819.339173][T14430] CPU: 1 UID: 0 PID: 14430 Comm: syz.2.2098 Not tainted syzkaller #0 PREEMPT(full) 
[  819.339203][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  819.339217][T14430] Call Trace:
[  819.339225][T14430]  <TASK>
[  819.339236][T14430]  dump_stack_lvl+0x189/0x250
[  819.339259][T14430]  ? __pfx____ratelimit+0x10/0x10
[  819.339275][T14430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  819.339292][T14430]  ? __pfx__printk+0x10/0x10
[  819.339317][T14430]  ? __pfx___might_resched+0x10/0x10
[  819.339330][T14430]  ? fs_reclaim_acquire+0x7d/0x100
[  819.339356][T14430]  should_fail_ex+0x414/0x560
[  819.339385][T14430]  should_failslab+0xa8/0x100
[  819.339408][T14430]  kmem_cache_alloc_noprof+0x73/0x3c0
[  819.339427][T14430]  ? _sctp_make_chunk+0x14e/0x430
[  819.339446][T14430]  _sctp_make_chunk+0x14e/0x430
[  819.339464][T14430]  sctp_make_datafrag_empty+0x122/0x230
[  819.339490][T14430]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[  819.339516][T14430]  ? sctp_user_addto_chunk+0xa8/0x240
[  819.339534][T14430]  sctp_datamsg_from_user+0x729/0xef0
[  819.339570][T14430]  sctp_sendmsg_to_asoc+0x1003/0x1810
[  819.339587][T14430]  ? __asan_memcpy+0x40/0x70
[  819.339618][T14430]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  819.339646][T14430]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  819.339663][T14430]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  819.339681][T14430]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  819.339698][T14430]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  819.339714][T14430]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  819.339732][T14430]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  819.339750][T14430]  ? security_sctp_bind_connect+0x7e/0x2e0
[  819.339773][T14430]  sctp_sendmsg+0x1941/0x2810
[  819.339798][T14430]  ? __pfx_sctp_sendmsg+0x10/0x10
[  819.339817][T14430]  ? aa_sk_perm+0x81e/0x950
[  819.339843][T14430]  ? __pfx_aa_sk_perm+0x10/0x10
[  819.339868][T14430]  ? sock_rps_record_flow+0x19/0x410
[  819.339891][T14430]  ? inet_sendmsg+0x2f4/0x370
[  819.339911][T14430]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  819.339929][T14430]  __sock_sendmsg+0x19c/0x270
[  819.339954][T14430]  __sys_sendto+0x3bd/0x520
[  819.339972][T14430]  ? __pfx___sys_sendto+0x10/0x10
[  819.339986][T14430]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  819.340030][T14430]  ? __fget_files+0x3a0/0x420
[  819.340052][T14430]  ? ksys_write+0x22a/0x250
[  819.340079][T14430]  __ia32_sys_sendto+0xdd/0x100
[  819.340098][T14430]  __do_fast_syscall_32+0xb6/0x2b0
[  819.340120][T14430]  do_fast_syscall_32+0x34/0x80
[  819.340136][T14430]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  819.340154][T14430] RIP: 0023:0xf707e539
[  819.340168][T14430] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  819.340181][T14430] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  819.340198][T14430] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080847fff
[  819.340208][T14430] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4
[  819.340218][T14430] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[  819.340226][T14430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  819.340235][T14430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  819.340256][T14430]  </TASK>
[  819.668393][    C1] vkms_vblank_simulate: vblank timer overrun
[  820.329037][   T30] audit: type=1326 audit(1757233268.359:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  820.449669][   T30] audit: type=1326 audit(1757233268.359:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  820.555793][   T30] audit: type=1326 audit(1757233268.369:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf704e539 code=0x7ffc0000
[  820.687362][   T30] audit: type=1326 audit(1757233268.439:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  820.849290][   T30] audit: type=1326 audit(1757233268.439:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  821.325437][   T30] audit: type=1326 audit(1757233268.449:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e539 code=0x7ffc0000
[  821.877583][   T30] audit: type=1326 audit(1757233268.449:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  821.966030][   T30] audit: type=1326 audit(1757233268.449:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704e539 code=0x7ffc0000
[  822.166276][   T30] audit: type=1326 audit(1757233268.449:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  822.277453][   T30] audit: type=1326 audit(1757233268.449:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.2101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf704e539 code=0x7ffc0000
[  823.149056][ T5950] usb 3-1: new full-speed USB device number 106 using dummy_hcd
[  823.449140][ T5950] usb 3-1: device descriptor read/64, error -71
[  823.526080][T14482] netlink: 'syz.4.2111': attribute type 1 has an invalid length.
[  824.050555][ T5950] usb 3-1: new full-speed USB device number 107 using dummy_hcd
[  824.072668][T14482] 8021q: adding VLAN 0 to HW filter on device bond2
[  824.322515][T14488] vlan2: entered allmulticast mode
[  824.327786][ T5950] usb 3-1: device descriptor read/64, error -71
[  824.366688][T14488] bond2: (slave vlan2): Opening slave failed
[  824.474343][ T5950] usb usb3-port1: attempt power cycle
[  824.959083][ T5950] usb 3-1: new full-speed USB device number 108 using dummy_hcd
[  824.984510][ T5950] usb 3-1: device descriptor read/8, error -71
[  825.250823][ T5950] usb 3-1: new full-speed USB device number 109 using dummy_hcd
[  825.281465][ T5950] usb 3-1: device descriptor read/8, error -71
[  825.505272][ T5950] usb usb3-port1: unable to enumerate USB device
[  826.350678][T14518] netlink: 'syz.4.2115': attribute type 5 has an invalid length.
[  826.365099][T14518] ip6erspan0: entered promiscuous mode
[  828.285013][T14534] ptrace attach of "./syz-executor exec"[5876] was attempted by "./syz-executor exec"[14534]
[  829.899121][    T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  830.009186][   T10] usb 2-1: new full-speed USB device number 99 using dummy_hcd
[  830.216996][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  830.227473][    T9] usb 4-1: config 2 has an invalid interface number: 114 but max is 0
[  830.235982][    T9] usb 4-1: config 2 has no interface number 0
[  830.242265][    T9] usb 4-1: config 2 interface 114 altsetting 244 has an invalid descriptor for endpoint zero, skipping
[  830.253459][    T9] usb 4-1: config 2 interface 114 has no altsetting 0
[  830.269789][   T10] usb 2-1: device descriptor read/64, error -71
[  830.305434][    T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=da.8c
[  830.317462][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.328866][    T9] usb 4-1: Product: syz
[  830.334925][    T9] usb 4-1: Manufacturer: syz
[  830.345965][    T9] usb 4-1: SerialNumber: syz
[  830.519304][   T10] usb 2-1: new full-speed USB device number 100 using dummy_hcd
[  830.608739][    T9] usb 4-1: USB disconnect, device number 71
[  830.728448][   T10] usb 2-1: device descriptor read/64, error -71
[  830.900525][   T10] usb usb2-port1: attempt power cycle
[  831.249188][   T10] usb 2-1: new full-speed USB device number 101 using dummy_hcd
[  831.429651][   T10] usb 2-1: device descriptor read/8, error -71
[  831.690707][   T10] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[  831.740358][   T10] usb 2-1: device descriptor read/8, error -71
[  831.864667][   T10] usb usb2-port1: unable to enumerate USB device
[  832.305889][T14587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  832.313198][T14587] IPv6: NLM_F_CREATE should be set when creating new route
[  832.320502][T14587] IPv6: NLM_F_CREATE should be set when creating new route
[  832.546337][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'.
[  832.702585][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'.
[  834.893637][T14627] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2144'.
[  834.967386][T14627] net_ratelimit: 33 callbacks suppressed
[  834.967407][T14627] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  834.969061][ T5956] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  837.500536][T14650] netlink: 195000 bytes leftover after parsing attributes in process `syz.2.2148'.
[  837.512361][T14650] netlink: zone id is out of range
[  837.529571][T14650] netlink: zone id is out of range
[  837.534750][T14650] netlink: zone id is out of range
[  837.567099][T14650] netlink: zone id is out of range
[  837.573903][T14650] netlink: zone id is out of range
[  837.579182][T14650] netlink: zone id is out of range
[  837.584350][T14650] netlink: zone id is out of range
[  837.589785][T14650] netlink: zone id is out of range
[  837.594951][T14650] netlink: zone id is out of range
[  838.359576][   T10] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[  838.519689][   T10] usb 3-1: device descriptor read/64, error -71
[  838.785506][   T10] usb 3-1: new full-speed USB device number 111 using dummy_hcd
[  838.939003][   T10] usb 3-1: device descriptor read/64, error -71
[  838.965485][T14678] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2155'.
[  839.002582][T14678] netlink: 'syz.4.2155': attribute type 11 has an invalid length.
[  839.013693][T14678] netlink: 'syz.4.2155': attribute type 1 has an invalid length.
[  839.025001][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'.
[  839.045107][T14678] bond0: option mode: unable to set because the bond device has slaves
[  839.081485][   T10] usb usb3-port1: attempt power cycle
[  839.499226][   T10] usb 3-1: new full-speed USB device number 112 using dummy_hcd
[  839.638703][   T10] usb 3-1: device descriptor read/8, error -71
[  839.954975][   T10] usb 3-1: new full-speed USB device number 113 using dummy_hcd
[  840.022518][   T10] usb 3-1: device descriptor read/8, error -71
[  840.141000][   T10] usb usb3-port1: unable to enumerate USB device
[  847.879149][ T5950] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  848.198144][ T5950] usb 4-1: device descriptor read/64, error -71
[  848.214048][    T9] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  848.699160][ T5950] usb 4-1: new full-speed USB device number 73 using dummy_hcd
[  849.619538][    T9] usb 5-1: config 0 has no interfaces?
[  849.676030][    T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  849.697985][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.716559][    T9] usb 5-1: Product: syz
[  849.719483][ T5950] usb 4-1: device descriptor read/64, error -71
[  849.737395][    T9] usb 5-1: Manufacturer: syz
[  849.753585][    T9] usb 5-1: SerialNumber: syz
[  849.778860][    T9] usb 5-1: config 0 descriptor??
[  849.869487][ T5950] usb usb4-port1: attempt power cycle
[  850.217968][T14782] program syz.4.2177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  850.309151][ T5950] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  850.318074][T14782] vivid-008: disconnect
[  852.023494][ T5950] usb 4-1: device descriptor read/8, error -71
[  852.218720][T14779] vivid-008: reconnect
[  852.265564][ T5956] usb 5-1: USB disconnect, device number 75
[  853.429222][ T5934] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[  854.187142][ T5934] usb 2-1: device descriptor read/64, error -71
[  854.639173][ T5934] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[  855.341106][ T5934] usb 2-1: device descriptor read/64, error -71
[  855.471106][ T5934] usb usb2-port1: attempt power cycle
[  855.835578][ T5934] usb 2-1: new full-speed USB device number 105 using dummy_hcd
[  857.316653][ T5934] usb 2-1: device descriptor read/8, error -71
[  857.715771][ T5956] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  857.989133][ T5956] usb 1-1: device descriptor read/64, error -71
[  857.989167][ T5934] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[  858.339060][ T5956] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  858.480937][ T5934] usb 2-1: device descriptor read/8, error -71
[  858.539660][ T5956] usb 1-1: device descriptor read/64, error -71
[  858.601647][ T5934] usb usb2-port1: unable to enumerate USB device
[  858.651001][ T5956] usb usb1-port1: attempt power cycle
[  858.989029][ T5956] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  859.011900][ T5956] usb 1-1: device descriptor read/8, error -71
[  859.495493][ T5956] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  859.627581][ T5956] usb 1-1: device descriptor read/8, error -71
[  859.754747][ T5956] usb usb1-port1: unable to enumerate USB device
[  864.354272][ T5934] usb 3-1: new full-speed USB device number 114 using dummy_hcd
[  864.819849][ T5934] usb 3-1: device descriptor read/64, error -71
[  865.123294][ T5934] usb 3-1: new full-speed USB device number 115 using dummy_hcd
[  865.629419][ T5934] usb 3-1: device descriptor read/64, error -71
[  865.769344][ T5934] usb usb3-port1: attempt power cycle
[  866.183367][ T5934] usb 3-1: new full-speed USB device number 116 using dummy_hcd
[  866.213452][ T5934] usb 3-1: device descriptor read/8, error -71
[  866.455079][ T5951] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  866.519103][ T5934] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  867.349073][ T5951] usb 1-1: device descriptor read/64, error -71
[  867.589582][ T5951] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  867.729203][ T5951] usb 1-1: device descriptor read/64, error -71
[  867.858533][ T5951] usb usb1-port1: attempt power cycle
[  868.101622][ T5934] usb 3-1: device descriptor read/8, error -71
[  868.209225][ T5934] usb usb3-port1: unable to enumerate USB device
[  868.219003][ T5951] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[  868.400286][ T5951] usb 1-1: device descriptor read/8, error -71
[  868.720838][ T5951] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  868.762633][ T5951] usb 1-1: device descriptor read/8, error -71
[  868.879333][ T5951] usb usb1-port1: unable to enumerate USB device
[  869.756791][   T10] usb 2-1: new full-speed USB device number 107 using dummy_hcd
[  870.129293][   T10] usb 2-1: device descriptor read/64, error -71
[  870.599189][   T10] usb 2-1: new full-speed USB device number 108 using dummy_hcd
[  870.959116][   T10] usb 2-1: device descriptor read/64, error -71
[  871.090313][   T10] usb usb2-port1: attempt power cycle
[  871.389665][T14991] net_ratelimit: 3 callbacks suppressed
[  871.389688][T14991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  871.491759][T14996] macsec2: entered allmulticast mode
[  871.499717][T14996] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  871.649447][   T10] usb 2-1: new full-speed USB device number 109 using dummy_hcd
[  871.730754][T14996] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  872.717032][   T10] usb 2-1: device descriptor read/8, error -71
[  872.929032][ T5951] usb 3-1: new full-speed USB device number 118 using dummy_hcd
[  875.179078][ T5951] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  875.409159][   T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  875.509088][ T5951] usb 5-1: device descriptor read/64, error -71
[  875.569041][   T10] usb 3-1: Using ep0 maxpacket: 32
[  875.596057][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  875.597180][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.603833][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  875.723317][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.840093][ T5951] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  876.011128][ T5951] usb 5-1: device descriptor read/64, error -71
[  876.060459][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  876.129221][ T5951] usb usb5-port1: attempt power cycle
[  876.249742][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.283674][   T10] usb 3-1: config 0 descriptor??
[  876.314016][   T10] hub 3-1:0.0: USB hub found
[  876.473324][T15059] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2236'.
[  876.522227][   T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[  876.571976][ T5951] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  876.607237][ T5951] usb 5-1: device descriptor read/8, error -71
[  876.731770][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  876.737808][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  876.782304][   T10] usb 3-1: USB disconnect, device number 119
[  876.867493][ T5951] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  876.891659][ T5927] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  876.945306][ T5951] usb 5-1: device descriptor read/8, error -71
[  877.049049][ T5927] usb 1-1: Using ep0 maxpacket: 32
[  877.058881][ T5927] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  877.059631][ T5951] usb usb5-port1: unable to enumerate USB device
[  877.231315][ T5927] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  877.242827][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  877.252087][ T5927] usb 1-1: Product: syz
[  877.258511][ T5927] usb 1-1: Manufacturer: syz
[  877.450385][ T5927] usb 1-1: SerialNumber: syz
[  877.468556][ T5927] usb 1-1: config 0 descriptor??
[  877.528155][T15063] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  879.050798][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'.
[  879.753208][    T9] usb 1-1: USB disconnect, device number 79
[  879.922607][   T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  880.009867][T15113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2249'.
[  880.029307][T15113] netlink: 'syz.4.2249': attribute type 5 has an invalid length.
[  880.037268][T15113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2249'.
[  880.479018][   T10] usb 2-1: Using ep0 maxpacket: 16
[  880.499892][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 228, changing to 11
[  880.499942][   T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  880.499971][   T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  880.589019][ T5927] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  880.732090][ T5927] usb 1-1: device descriptor read/64, error -71
[  880.815387][T15127] pim6reg1: entered promiscuous mode
[  880.815414][T15127] pim6reg1: entered allmulticast mode
[  880.969238][ T5927] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  881.117201][ T5927] usb 1-1: device descriptor read/64, error -71
[  881.270042][ T5927] usb usb1-port1: attempt power cycle
[  881.789058][ T5927] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  882.052149][ T5927] usb 1-1: device descriptor read/8, error -71
[  882.329507][ T5927] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[  882.384672][ T5927] usb 1-1: device descriptor read/8, error -71
[  882.511124][ T5927] usb usb1-port1: unable to enumerate USB device
[  882.599186][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  882.608620][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.809207][   T10] usb 2-1: can't set config #1, error -71
[  882.839198][   T10] usb 2-1: USB disconnect, device number 111
[  884.863831][T15184] netlink: 'syz.1.2266': attribute type 1 has an invalid length.
[  885.086036][T15184] 8021q: adding VLAN 0 to HW filter on device bond4
[  886.999003][    T9] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  887.464496][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'.
[  887.529547][    T9] usb 3-1: device descriptor read/64, error -71
[  887.728075][T15218] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  887.819122][    T9] usb 3-1: new full-speed USB device number 121 using dummy_hcd
[  887.874247][   T56] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  887.932344][   T56] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  887.965552][   T56] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  887.990536][   T56] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  888.011398][    T9] usb 3-1: device descriptor read/64, error -71
[  888.173862][    T9] usb usb3-port1: attempt power cycle
[  888.705467][    T9] usb 3-1: new full-speed USB device number 122 using dummy_hcd
[  888.866970][    T9] usb 3-1: device descriptor read/8, error -71
[  889.129681][    T9] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[  889.186180][    T9] usb 3-1: device descriptor read/8, error -71
[  889.217137][T15237] netlink: 'syz.4.2279': attribute type 1 has an invalid length.
[  889.299227][    T9] usb usb3-port1: unable to enumerate USB device
[  889.601914][T15237] 8021q: adding VLAN 0 to HW filter on device bond3
[  890.002533][T15242] bond3: (slave gretap1): making interface the new active one
[  890.074195][T15242] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  892.630263][T15286] syzkaller1: entered promiscuous mode
[  892.636053][T15286] syzkaller1: entered allmulticast mode
[  893.239819][T15296] netlink: 'syz.3.2294': attribute type 1 has an invalid length.
[  893.542713][T15296] 8021q: adding VLAN 0 to HW filter on device bond2
[  893.789219][ T5956] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  893.939120][ T5956] usb 1-1: device descriptor read/64, error -71
[  894.269004][ T5956] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  894.421508][ T5956] usb 1-1: device descriptor read/64, error -71
[  894.839022][ T5956] usb usb1-port1: attempt power cycle
[  895.219620][T15328] xt_l2tp: invalid flags combination: 8
[  895.295531][ T5956] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  895.374685][ T5956] usb 1-1: device descriptor read/8, error -71
[  895.629089][ T5956] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  895.700806][    T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  895.712589][ T5956] usb 1-1: device descriptor read/8, error -71
[  895.837387][ T5956] usb usb1-port1: unable to enumerate USB device
[  895.888411][    T9] usb 3-1: Using ep0 maxpacket: 32
[  895.895346][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  895.940007][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  896.003007][T15342] netlink: 'syz.3.2306': attribute type 21 has an invalid length.
[  896.028257][T15342] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2306'.
[  896.073674][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26
[  896.143306][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  896.158383][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  896.197812][    T9] usb 3-1: SerialNumber: syz
[  896.218549][T15330] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  896.226720][T15330] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  896.249658][    T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  896.274599][    T9] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  896.303841][    T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  896.518093][    T9] usb 3-1: USB disconnect, device number 124
[  897.604354][T15356] FAULT_INJECTION: forcing a failure.
[  897.604354][T15356] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  897.679043][T15356] CPU: 0 UID: 0 PID: 15356 Comm: syz.3.2309 Not tainted syzkaller #0 PREEMPT(full) 
[  897.679072][T15356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  897.679085][T15356] Call Trace:
[  897.679093][T15356]  <TASK>
[  897.679101][T15356]  dump_stack_lvl+0x189/0x250
[  897.679132][T15356]  ? __pfx____ratelimit+0x10/0x10
[  897.679153][T15356]  ? __pfx_dump_stack_lvl+0x10/0x10
[  897.679176][T15356]  ? __pfx__printk+0x10/0x10
[  897.679204][T15356]  ? __might_fault+0xb0/0x130
[  897.679244][T15356]  should_fail_ex+0x414/0x560
[  897.679279][T15356]  _copy_from_user+0x2d/0xb0
[  897.679307][T15356]  __sys_bpf+0x1ed/0x870
[  897.679335][T15356]  ? __pfx___sys_bpf+0x10/0x10
[  897.679372][T15356]  ? ksys_write+0x22a/0x250
[  897.679415][T15356]  __ia32_sys_bpf+0x7c/0x90
[  897.679440][T15356]  __do_fast_syscall_32+0xb6/0x2b0
[  897.679462][T15356]  ? lockdep_hardirqs_on+0x9c/0x150
[  897.679486][T15356]  do_fast_syscall_32+0x34/0x80
[  897.679507][T15356]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  897.679546][T15356] RIP: 0023:0xf7f44539
[  897.679565][T15356] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  897.679583][T15356] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  897.679605][T15356] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000080000100
[  897.679619][T15356] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  897.679631][T15356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  897.679643][T15356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  897.679655][T15356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  897.679686][T15356]  </TASK>
[  899.444797][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'.
[  900.192150][T15391] FAULT_INJECTION: forcing a failure.
[  900.192150][T15391] name failslab, interval 1, probability 0, space 0, times 0
[  900.229256][T15391] CPU: 1 UID: 0 PID: 15391 Comm: syz.3.2318 Not tainted syzkaller #0 PREEMPT(full) 
[  900.229287][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  900.229300][T15391] Call Trace:
[  900.229308][T15391]  <TASK>
[  900.229317][T15391]  dump_stack_lvl+0x189/0x250
[  900.229346][T15391]  ? __pfx____ratelimit+0x10/0x10
[  900.229366][T15391]  ? __pfx_dump_stack_lvl+0x10/0x10
[  900.229384][T15391]  ? __pfx__printk+0x10/0x10
[  900.229408][T15391]  ? __pfx___might_resched+0x10/0x10
[  900.229422][T15391]  ? fs_reclaim_acquire+0x7d/0x100
[  900.229448][T15391]  should_fail_ex+0x414/0x560
[  900.229475][T15391]  should_failslab+0xa8/0x100
[  900.229500][T15391]  kmem_cache_alloc_noprof+0x73/0x3c0
[  900.229519][T15391]  ? fuse_get_req+0x7b9/0x10b0
[  900.229538][T15391]  fuse_get_req+0x7b9/0x10b0
[  900.229551][T15391]  ? stack_depot_save_flags+0x40/0x860
[  900.229581][T15391]  ? __pfx_fuse_get_req+0x10/0x10
[  900.229594][T15391]  ? fuse_lookup_name+0x1b5/0x860
[  900.229617][T15391]  ? __pfx_autoremove_wake_function+0x10/0x10
[  900.229641][T15391]  ? __se_sys_openat2+0x226/0x2c0
[  900.229662][T15391]  ? __do_fast_syscall_32+0xb6/0x2b0
[  900.229683][T15391]  ? do_fast_syscall_32+0x34/0x80
[  900.229703][T15391]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  900.229737][T15391]  __fuse_simple_request+0x2aa/0x18d0
[  900.229768][T15391]  ? __pfx___fuse_simple_request+0x10/0x10
[  900.229810][T15391]  ? __kasan_kmalloc+0x93/0xb0
[  900.229838][T15391]  fuse_lookup_name+0x34c/0x860
[  900.229866][T15391]  ? __pfx_fuse_lookup_name+0x10/0x10
[  900.229885][T15391]  ? fuse_lock_inode+0xd3/0x120
[  900.229925][T15391]  fuse_lookup+0x1e9/0x640
[  900.229949][T15391]  ? __pfx_fuse_lookup+0x10/0x10
[  900.229978][T15391]  ? __pfx_d_alloc_parallel+0x10/0x10
[  900.230001][T15391]  fuse_atomic_open+0x173/0x440
[  900.230024][T15391]  ? __pfx_fuse_atomic_open+0x10/0x10
[  900.230046][T15391]  path_openat+0xf66/0x3830
[  900.230062][T15391]  ? arch_stack_walk+0xfc/0x150
[  900.230106][T15391]  ? __pfx_path_openat+0x10/0x10
[  900.230121][T15391]  ? do_fast_syscall_32+0x34/0x80
[  900.230152][T15391]  do_filp_open+0x1fa/0x410
[  900.230168][T15391]  ? __lock_acquire+0xab9/0xd20
[  900.230191][T15391]  ? __pfx_do_filp_open+0x10/0x10
[  900.230226][T15391]  ? _raw_spin_unlock+0x28/0x50
[  900.230253][T15391]  ? alloc_fd+0x64c/0x6c0
[  900.230283][T15391]  do_sys_openat2+0x121/0x1c0
[  900.230301][T15391]  ? __pfx_do_sys_openat2+0x10/0x10
[  900.230328][T15391]  __se_sys_openat2+0x226/0x2c0
[  900.230346][T15391]  ? __pfx___se_sys_openat2+0x10/0x10
[  900.230368][T15391]  ? lockdep_hardirqs_on+0x9c/0x150
[  900.230385][T15391]  __do_fast_syscall_32+0xb6/0x2b0
[  900.230402][T15391]  ? lockdep_hardirqs_on+0x9c/0x150
[  900.230419][T15391]  do_fast_syscall_32+0x34/0x80
[  900.230435][T15391]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  900.230452][T15391] RIP: 0023:0xf7f44539
[  900.230466][T15391] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  900.230479][T15391] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 00000000000001b5
[  900.230496][T15391] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000
[  900.230506][T15391] RDX: 0000000080000100 RSI: 0000000000000018 RDI: 0000000000000000
[  900.230515][T15391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  900.230523][T15391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  900.230532][T15391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  900.230553][T15391]  </TASK>
[  900.583326][    C1] vkms_vblank_simulate: vblank timer overrun
[  902.337968][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'.
[  903.389145][ T5968] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  903.430885][ T5869] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  903.440633][ T5869] Bluetooth: hci2: Injecting HCI hardware error event
[  903.449321][ T5869] Bluetooth: hci2: hardware error 0x00
[  903.528109][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  903.528129][   T30] audit: type=1326 audit(1757233351.589:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.4.2332" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0
[  903.556159][ T5956] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  903.589797][ T5968] usb 4-1: Using ep0 maxpacket: 8
[  903.598109][T15442] netlink: 'syz.2.2331': attribute type 1 has an invalid length.
[  903.606279][T15442] netlink: 'syz.2.2331': attribute type 2 has an invalid length.
[  903.625466][ T5968] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  903.635114][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.644685][ T5968] usb 4-1: Product: syz
[  903.649349][ T5968] usb 4-1: Manufacturer: syz
[  903.657193][ T5968] usb 4-1: SerialNumber: syz
[  903.664754][ T5968] usb 4-1: config 0 descriptor??
[  903.803925][ T5956] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  903.835037][ T5956] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  903.845190][ T5956] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  903.857891][ T5968] gspca_main: sq930x-2.14.0 probing 2770:930c
[  903.879432][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.762633][T15454] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2334'.
[  904.847806][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2329'.
[  905.099169][ T5968] gspca_sq930x: ucbus_write failed -110
[  905.104998][ T5968] sq930x 4-1:0.0: probe with driver sq930x failed with error -110
[  905.179634][ T5927] usb 4-1: USB disconnect, device number 76
[  905.515970][ T5869] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  905.629773][T15462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2336'.
[  906.282410][T15478] =======================================================
[  906.282410][T15478] WARNING: The mand mount option has been deprecated and
[  906.282410][T15478]          and is ignored by this kernel. Remove the mand
[  906.282410][T15478]          option from the mount to silence this warning.
[  906.282410][T15478] =======================================================
[  906.321163][T15478] fuse: Unknown parameter '00000000000000000072r�גb�`�])�ڏ�&6�-�Z.���Ԅ|��-�d3����'
[  906.637448][ T5968] usb 2-1: USB disconnect, device number 112
[  907.799186][ T5968] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  907.980406][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  908.009005][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  908.143894][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  908.378657][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  908.548163][ T5968] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  908.566504][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.870982][ T5968] usb 3-1: config 0 descriptor??
[  909.536142][ T5968] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  910.344386][T15529] veth0_macvtap: mtu greater than device maximum
[  910.382110][T15528] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2344'.
[  910.459114][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2344'.
[  911.519700][ T5968] usb 3-1: reset high-speed USB device number 125 using dummy_hcd
[  912.304886][T15551] netlink: 'syz.0.2361': attribute type 1 has an invalid length.
[  912.326749][T15551] netlink: 'syz.0.2361': attribute type 2 has an invalid length.
[  912.562703][ T5956] usb 3-1: USB disconnect, device number 125
[  914.309525][T15544] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  914.317944][T15437] Bluetooth: hci0: command 0x0406 tx timeout
[  914.324170][T15437] Bluetooth: hci1: command 0x0406 tx timeout
[  914.735000][T15544] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  914.753004][T15544] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  914.982765][T15544] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  914.998721][T15544] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  915.391157][T15600] fuse: Unknown parameter '00000000000000000072r�גb�`�])�ڏ�&6�-�Z.���Ԅ|��-�d3����'
[  916.390110][T15579] Bluetooth: hci3: command 0x0406 tx timeout
[  916.474221][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2376'.
[  916.652693][T15616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  916.672789][T15616] syzkaller0: entered promiscuous mode
[  916.687589][T15616] syzkaller0: entered allmulticast mode
[  916.806872][T15579] Bluetooth: hci4: command 0x0406 tx timeout
[  916.982091][T15616] tipc: Resetting bearer <eth:syzkaller0>
[  917.031897][T15579] Bluetooth: hci1: command 0x0406 tx timeout
[  917.083108][T15615] tipc: Resetting bearer <eth:syzkaller0>
[  917.177895][T15615] tipc: Disabling bearer <eth:syzkaller0>
[  918.476991][T15641] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  918.504914][T15641] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  918.568097][T15641] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  918.611069][T15641] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  920.549378][T15579] Bluetooth: hci3: command 0x0406 tx timeout
[  920.549403][ T5188] Bluetooth: hci0: command 0x0406 tx timeout
[  920.629073][ T5188] Bluetooth: hci4: command 0x0406 tx timeout
[  920.629613][T15579] Bluetooth: hci1: command 0x0406 tx timeout
[  920.967402][T15687] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2395'.
[  921.138375][T15692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.168781][T15692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  921.379068][ T5934] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  921.844076][T15700] netlink: 'syz.3.2396': attribute type 20 has an invalid length.
[  921.849035][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  921.867605][ T5934] usb 5-1: config 1 descriptor has 1 excess byte, ignoring
[  921.881831][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  921.936971][ T5934] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  921.962355][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.981202][ T5934] usb 5-1: Product: syz
[  922.001548][ T5934] usb 5-1: Manufacturer: syz
[  922.022263][ T5934] usb 5-1: SerialNumber: syz
[  922.034690][   T30] audit: type=1326 audit(1757233370.099:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15703 comm="syz.0.2398" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0
[  922.338578][ T5934] usb 5-1: 0:2 : does not exist
[  922.358137][ T5934] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  922.568974][ T5956] usb 1-1: new full-speed USB device number 88 using dummy_hcd
[  922.641837][ T5934] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  922.684101][ T5934] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  922.709407][T15579] Bluetooth: hci1: command 0x0406 tx timeout
[  922.710988][T15717] FAULT_INJECTION: forcing a failure.
[  922.710988][T15717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  922.730912][T15717] CPU: 1 UID: 0 PID: 15717 Comm: syz.2.2402 Not tainted syzkaller #0 PREEMPT(full) 
[  922.730941][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  922.730959][T15717] Call Trace:
[  922.730968][T15717]  <TASK>
[  922.730977][T15717]  dump_stack_lvl+0x189/0x250
[  922.731007][T15717]  ? __pfx____ratelimit+0x10/0x10
[  922.731028][T15717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  922.731053][T15717]  ? __pfx__printk+0x10/0x10
[  922.731081][T15717]  ? __might_fault+0xb0/0x130
[  922.731122][T15717]  should_fail_ex+0x414/0x560
[  922.731159][T15717]  _copy_from_user+0x2d/0xb0
[  922.731187][T15717]  get_compat_msghdr+0xad/0x4a0
[  922.731219][T15717]  ? __pfx_get_compat_msghdr+0x10/0x10
[  922.731257][T15717]  ___sys_sendmsg+0x193/0x2a0
[  922.731287][T15717]  ? __pfx____sys_sendmsg+0x10/0x10
[  922.731359][T15717]  ? __fget_files+0x2a/0x420
[  922.731378][T15717]  ? __fget_files+0x3a0/0x420
[  922.731408][T15717]  __sys_sendmsg+0x164/0x220
[  922.731437][T15717]  ? __pfx___sys_sendmsg+0x10/0x10
[  922.731480][T15717]  ? lockdep_hardirqs_on+0x9c/0x150
[  922.731506][T15717]  __do_fast_syscall_32+0xb6/0x2b0
[  922.731530][T15717]  ? lockdep_hardirqs_on+0x9c/0x150
[  922.731555][T15717]  do_fast_syscall_32+0x34/0x80
[  922.731578][T15717]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  922.731604][T15717] RIP: 0023:0xf707e539
[  922.731622][T15717] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  922.731640][T15717] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  922.731663][T15717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[  922.731678][T15717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  922.731690][T15717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  922.731703][T15717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  922.731716][T15717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  922.731746][T15717]  </TASK>
[  922.732440][ T5934] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  922.805814][ T5956] usb 1-1: config 0 has an invalid interface number: 139 but max is 0
[  922.821510][ T5934] usb 5-1: USB disconnect, device number 80
[  922.846021][ T5956] usb 1-1: config 0 has no interface number 0
[  923.005078][ T5956] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  923.017170][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.027617][ T5956] usb 1-1: Product: syz
[  923.035440][ T5956] usb 1-1: Manufacturer: syz
[  923.051410][ T5956] usb 1-1: SerialNumber: syz
[  923.060454][ T5956] usb 1-1: config 0 descriptor??
[  923.853251][T15579] Bluetooth: hci3: unexpected event for opcode 0x0402
[  924.988759][ T5956] mct_u232 1-1:0.139: MCT U232 converter detected
[  924.998433][ T5956] mct_u232 ttyUSB0: expected endpoint missing
[  925.029554][ T5956] usb 1-1: USB disconnect, device number 88
[  925.041590][ T5956] mct_u232 1-1:0.139: device disconnected
[  925.330216][T15755] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[15755]
[  925.375910][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'.
[  925.408806][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'.
[  927.663677][T15790] netlink: zone id is out of range
[  927.673422][T15790] netlink: zone id is out of range
[  927.678589][T15790] netlink: zone id is out of range
[  927.740394][T15792] openvswitch: netlink: Multiple metadata blocks provided
[  927.747713][T15790] netlink: zone id is out of range
[  927.753508][T15790] netlink: zone id is out of range
[  927.766371][T15790] netlink: del zone limit has 4 unknown bytes
[  928.030633][T15805] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[15805]
[  930.919051][ T5968] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[  931.079112][ T5968] usb 5-1: device descriptor read/64, error -71
[  931.542100][ T5968] usb 5-1: new full-speed USB device number 82 using dummy_hcd
[  931.941498][ T5934] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  932.000573][ T5968] usb 5-1: device descriptor read/64, error -71
[  932.107920][ T5934] usb 4-1: device descriptor read/64, error -71
[  932.121765][ T5968] usb usb5-port1: attempt power cycle
[  932.469038][ T5968] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[  932.508452][ T5968] usb 5-1: device descriptor read/8, error -71
[  932.519613][ T5934] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  932.709345][ T5934] usb 4-1: device descriptor read/64, error -71
[  932.824579][ T5934] usb usb4-port1: attempt power cycle
[  932.839779][ T5968] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[  932.969384][ T5968] usb 5-1: device descriptor read/8, error -71
[  933.389101][ T5934] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  933.464853][ T5934] usb 4-1: device descriptor read/8, error -71
[  933.509099][ T5968] usb usb5-port1: unable to enumerate USB device
[  933.751592][ T5934] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  934.124063][ T5934] usb 4-1: device descriptor read/8, error -71
[  934.279334][ T5934] usb usb4-port1: unable to enumerate USB device
[  934.391962][T15857] ptrace attach of "./syz-executor exec"[7724] was attempted by "./syz-executor exec"[15857]
[  935.850542][   T30] audit: type=1326 audit(1757233383.889:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15865 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7fc00000
[  936.650745][T15890] tipc: Invalid UDP bearer configuration
[  936.650790][T15890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  936.843348][T15906] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  937.034549][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  937.041081][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  937.079333][ T5968] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  937.209049][ T5956] usb 3-1: new full-speed USB device number 126 using dummy_hcd
[  937.242794][ T5968] usb 5-1: config 0 has no interfaces?
[  937.305214][ T5968] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  937.327951][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.464590][ T5956] usb 3-1: device descriptor read/64, error -71
[  937.525450][ T5968] usb 5-1: Product: syz
[  937.537297][ T5968] usb 5-1: Manufacturer: syz
[  937.559656][ T5968] usb 5-1: SerialNumber: syz
[  937.591739][ T5968] usb 5-1: config 0 descriptor??
[  937.719619][ T5956] usb 3-1: new full-speed USB device number 127 using dummy_hcd
[  937.835470][T15903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  937.851906][T15903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  937.946052][ T5956] usb 3-1: device descriptor read/64, error -71
[  938.126258][ T5956] usb usb3-port1: attempt power cycle
[  938.312080][T15921] ptrace attach of "./syz-executor exec"[7724] was attempted by "./syz-executor exec"[15921]
[  938.505588][ T5956] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  938.573822][ T5956] usb 3-1: device descriptor read/8, error -71
[  938.865993][ T5956] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  938.915656][ T5956] usb 3-1: device descriptor read/8, error -71
[  939.045574][ T5956] usb usb3-port1: unable to enumerate USB device
[  939.849551][ T5956] usb 5-1: USB disconnect, device number 85
[  940.123434][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2457'.
[  940.132893][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2457'.
[  940.149904][T15940] team0: entered promiscuous mode
[  940.159383][T15940] team_slave_0: entered promiscuous mode
[  940.165832][T15940] team_slave_1: entered promiscuous mode
[  940.184827][T15940] bond0: entered promiscuous mode
[  940.209151][T15940] bond_slave_0: entered promiscuous mode
[  940.262922][T15940] bond_slave_1: entered promiscuous mode
[  940.284118][T15940] debugfs: 'hsr1' already exists in 'hsr'
[  940.302082][T15940] Cannot create hsr debugfs directory
[  940.349740][T15940] 8021q: adding VLAN 0 to HW filter on device hsr1
[  940.660542][T15946] netlink: 'syz.1.2458': attribute type 10 has an invalid length.
[  940.695885][T15946] netlink: 'syz.1.2458': attribute type 10 has an invalid length.
[  940.707333][T15946] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  940.762242][T15946] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  940.781173][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2460'.
[  940.794398][T15946] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  942.429031][ T5934] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[  942.449077][ T5951] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[  942.600041][ T5934] usb 2-1: device descriptor read/64, error -71
[  942.621919][T15980] wg1: entered promiscuous mode
[  942.626901][T15980] wg1: entered allmulticast mode
[  943.014296][T15981] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[15981]
[  943.063250][ T5934] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  943.129965][ T5951] usb 5-1: device descriptor read/64, error -71
[  943.229160][ T5934] usb 2-1: device descriptor read/64, error -71
[  943.341111][ T5934] usb usb2-port1: attempt power cycle
[  943.391258][ T5951] usb 5-1: new full-speed USB device number 87 using dummy_hcd
[  943.548969][ T5951] usb 5-1: device descriptor read/64, error -71
[  943.679248][ T5951] usb usb5-port1: attempt power cycle
[  943.709146][ T5934] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[  943.730867][ T5934] usb 2-1: device descriptor read/8, error -71
[  943.990863][ T5934] usb 2-1: new full-speed USB device number 116 using dummy_hcd
[  944.031564][ T5934] usb 2-1: device descriptor read/8, error -71
[  944.129020][ T5951] usb 5-1: new full-speed USB device number 88 using dummy_hcd
[  944.149936][ T5934] usb usb2-port1: unable to enumerate USB device
[  944.170703][ T5951] usb 5-1: device descriptor read/8, error -71
[  944.339646][T15991] binder: 15990:15991 ioctl 4018620d 0 returned -22
[  944.357800][T15991] binder: 15990:15991 ioctl c0306201 0 returned -14
[  944.409443][ T5951] usb 5-1: new full-speed USB device number 89 using dummy_hcd
[  944.441884][ T5951] usb 5-1: device descriptor read/8, error -71
[  944.551391][ T5951] usb usb5-port1: unable to enumerate USB device
[  944.839084][ T5936] usb 4-1: new full-speed USB device number 81 using dummy_hcd
[  944.949999][T16002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.958205][T16000] tipc: Invalid UDP bearer configuration
[  944.963403][T16000] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  945.002425][ T5936] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  945.014120][ T5936] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  945.025681][ T5936] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  945.074468][ T5936] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  945.098939][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.109588][T16000] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  945.141634][ T5936] usb 4-1: Product: syz
[  945.160634][ T5936] usb 4-1: Manufacturer: syz
[  945.183235][ T5936] usb 4-1: SerialNumber: syz
[  945.373052][T16016] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[16016]
[  945.637675][ T5936] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  945.826634][T16027] sctp: [Deprecated]: syz.2.2481 (pid 16027) Use of int in max_burst socket option.
[  945.826634][T16027] Use struct sctp_assoc_value instead
[  946.046628][ T5936] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82
[  946.091111][ T5934] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  946.143567][ T5936] usb 4-1: USB disconnect, device number 81
[  946.321139][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short
[  946.332154][ T5934] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[  946.345217][ T5934] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[  946.359354][ T5934] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  946.371832][ T5934] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  946.381310][ T5934] usb 3-1: config 129 has no interface number 0
[  946.391023][ T5934] usb 3-1: config 129 has no interface number 1
[  946.397407][ T5934] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  946.412940][ T5934] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  946.425918][ T5934] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  946.469090][ T5934] usb 3-1: config 129 interface 135 has no altsetting 0
[  946.486356][ T5934] usb 3-1: config 129 interface 5 has no altsetting 0
[  946.507144][ T5934] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  946.540647][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.548713][ T5934] usb 3-1: SerialNumber: Е
[  946.600422][T16029] udevd[16029]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  946.935569][ T5934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  947.035244][ T5934] usb 3-1: MIDIStreaming interface descriptor not found
[  947.285528][ T5934] usb 3-1: USB disconnect, device number 4
[  947.749081][ T5956] usb 4-1: new full-speed USB device number 82 using dummy_hcd
[  947.852713][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'.
[  948.031148][   T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  948.168989][ T5956] usb 4-1: device descriptor read/64, error -71
[  948.213010][   T10] usb 2-1: Using ep0 maxpacket: 16
[  948.227503][   T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  948.244111][   T10] usb 2-1: config 0 has no interface number 0
[  948.271302][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  948.347837][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024
[  948.377311][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  948.387005][ T5968] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  948.401876][   T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  948.435870][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'.
[  948.449050][ T5956] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  948.555491][   T10] usb 2-1: Product: syz
[  948.566893][   T10] usb 2-1: SerialNumber: syz
[  948.572358][ T5968] usb 1-1: device descriptor read/64, error -71
[  948.679033][ T5956] usb 4-1: device descriptor read/64, error -71
[  948.701593][   T10] usb 2-1: config 0 descriptor??
[  948.719301][   T10] cm109 2-1:0.8: invalid payload size 1024, expected 4
[  948.734764][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input29
[  948.809129][ T5968] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[  948.824195][ T5956] usb usb4-port1: attempt power cycle
[  948.919983][    C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[  948.920661][    C0] ------------[ cut here ]------------
[  948.920724][    C0] URB ffff888032456700 submitted while active
[  948.921696][    C0] WARNING: CPU: 0 PID: 15 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830
[  948.950332][    C0] Modules linked in:
[  948.950411][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  948.950433][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  948.950445][    C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830
[  948.950470][    C0] Code: 44 89 f2 e8 71 82 00 fa e9 13 fc ff ff e8 17 9c 93 fa c6 05 27 82 61 08 01 90 48 c7 c7 20 00 35 8c 48 89 de e8 c0 37 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 f1 9b 93 fa eb 11 e8 ea 9b 93 fa bd
[  948.950485][    C0] RSP: 0018:ffffc90000147588 EFLAGS: 00010046
[  948.950501][    C0] RAX: 0afee596fe644900 RBX: ffff888032456700 RCX: 0000000000040000
[  948.950514][    C0] RDX: ffffc90002171000 RSI: 0000000000000528 RDI: 0000000000000529
[  948.950526][    C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a
[  948.950539][    C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000
[  948.950552][    C0] R13: ffff888033627830 R14: ffff888032456708 R15: 0000000000000820
[  948.950565][    C0] FS:  0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000
[  948.950578][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  948.950590][    C0] CR2: 0000000080050018 CR3: 0000000077894000 CR4: 00000000003526f0
[  948.950606][    C0] Call Trace:
[  948.950614][    C0]  <TASK>
[  948.950623][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  948.950654][    C0]  ? kcov_remote_start+0x97/0x7f0
[  948.950680][    C0]  cm109_urb_irq_callback+0x709/0xca0
[  948.950704][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  948.950725][    C0]  dummy_timer+0x862/0x4550
[  948.950762][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  948.950805][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  948.950824][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  948.950839][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  948.950854][    C0]  __hrtimer_run_queues+0x529/0xc60
[  948.950885][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  948.950900][    C0]  ? read_tsc+0x9/0x20
[  948.950924][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  948.950948][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  948.950970][    C0]  handle_softirqs+0x283/0x870
[  948.950990][    C0]  ? run_ksoftirqd+0x9b/0x100
[  948.951013][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  948.951032][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  948.951051][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  948.951067][    C0]  run_ksoftirqd+0x9b/0x100
[  948.951085][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  948.951110][    C0]  smpboot_thread_fn+0x53f/0xa60
[  948.951128][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  948.951151][    C0]  kthread+0x70e/0x8a0
[  948.951175][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  948.951191][    C0]  ? __pfx_kthread+0x10/0x10
[  948.951223][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  948.951248][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  948.951263][    C0]  ? __pfx_kthread+0x10/0x10
[  948.951284][    C0]  ret_from_fork+0x3fc/0x770
[  948.951304][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  948.951325][    C0]  ? __switch_to_asm+0x39/0x70
[  948.951347][    C0]  ? __switch_to_asm+0x33/0x70
[  948.951368][    C0]  ? __pfx_kthread+0x10/0x10
[  948.951390][    C0]  ret_from_fork_asm+0x1a/0x30
[  948.951426][    C0]  </TASK>
[  948.951439][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  948.951455][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  948.951482][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  948.951497][    C0] Call Trace:
[  948.951508][    C0]  <TASK>
[  948.951519][    C0]  dump_stack_lvl+0x99/0x250
[  948.951540][    C0]  ? __asan_memcpy+0x40/0x70
[  948.951560][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  948.951580][    C0]  ? __pfx__printk+0x10/0x10
[  948.951613][    C0]  vpanic+0x281/0x750
[  948.951632][    C0]  ? __pfx__printk+0x10/0x10
[  948.951654][    C0]  ? __pfx_vpanic+0x10/0x10
[  948.951673][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  948.951706][    C0]  panic+0xb9/0xc0
[  948.951724][    C0]  ? __pfx_panic+0x10/0x10
[  948.951754][    C0]  __warn+0x31b/0x4b0
[  948.951772][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  948.951793][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  948.951813][    C0]  report_bug+0x2be/0x4f0
[  948.951828][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  948.951847][    C0]  ? usb_submit_urb+0xfc1/0x1830
[  948.951866][    C0]  ? usb_submit_urb+0xfc3/0x1830
[  948.951886][    C0]  handle_bug+0x84/0x160
[  948.951906][    C0]  exc_invalid_op+0x1a/0x50
[  948.951925][    C0]  asm_exc_invalid_op+0x1a/0x20
[  948.951941][    C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830
[  948.951963][    C0] Code: 44 89 f2 e8 71 82 00 fa e9 13 fc ff ff e8 17 9c 93 fa c6 05 27 82 61 08 01 90 48 c7 c7 20 00 35 8c 48 89 de e8 c0 37 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 f1 9b 93 fa eb 11 e8 ea 9b 93 fa bd
[  948.951978][    C0] RSP: 0018:ffffc90000147588 EFLAGS: 00010046
[  948.951993][    C0] RAX: 0afee596fe644900 RBX: ffff888032456700 RCX: 0000000000040000
[  948.952006][    C0] RDX: ffffc90002171000 RSI: 0000000000000528 RDI: 0000000000000529
[  948.952018][    C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a
[  948.952030][    C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000
[  948.952043][    C0] R13: ffff888033627830 R14: ffff888032456708 R15: 0000000000000820
[  948.952067][    C0]  ? usb_submit_urb+0xfc0/0x1830
[  948.952086][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  948.952123][    C0]  ? kcov_remote_start+0x97/0x7f0
[  948.952159][    C0]  cm109_urb_irq_callback+0x709/0xca0
[  948.952185][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  948.952212][    C0]  dummy_timer+0x862/0x4550
[  948.952249][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  948.952292][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  948.952310][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  948.952326][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  948.952340][    C0]  __hrtimer_run_queues+0x529/0xc60
[  948.952371][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  948.952386][    C0]  ? read_tsc+0x9/0x20
[  948.952411][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  948.952433][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  948.952465][    C0]  handle_softirqs+0x283/0x870
[  948.952484][    C0]  ? run_ksoftirqd+0x9b/0x100
[  948.952525][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  948.952547][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  948.952575][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  948.952598][    C0]  run_ksoftirqd+0x9b/0x100
[  948.952626][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  948.952652][    C0]  smpboot_thread_fn+0x53f/0xa60
[  948.952670][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  948.952693][    C0]  kthread+0x70e/0x8a0
[  948.952716][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  948.952732][    C0]  ? __pfx_kthread+0x10/0x10
[  948.952754][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  948.952779][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  948.952794][    C0]  ? __pfx_kthread+0x10/0x10
[  948.952815][    C0]  ret_from_fork+0x3fc/0x770
[  948.952834][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  948.952856][    C0]  ? __switch_to_asm+0x39/0x70
[  948.952877][    C0]  ? __switch_to_asm+0x33/0x70
[  948.952898][    C0]  ? __pfx_kthread+0x10/0x10
[  948.952921][    C0]  ret_from_fork_asm+0x1a/0x30
[  948.952957][    C0]  </TASK>
[  948.953342][    C0] Kernel Offset: disabled