last executing test programs:

1m30.096829547s ago: executing program 0 (id=1788):
write$smackfs_cipso(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c5c254a2c9c252030303030303030303030"], 0xc6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff])
setgroups(0x0, 0x0)
keyctl$setperm(0x5, r1, 0x2008)
keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0)

1m30.027394034s ago: executing program 0 (id=1789):
syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e8048968680d"], 0x0)

1m28.516622998s ago: executing program 0 (id=1800):
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04224c05ff"], 0x4f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000012c0)=0x2)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

1m26.168740107s ago: executing program 0 (id=1813):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b09b, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x240)

1m26.085321076s ago: executing program 0 (id=1814):
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000030000000000000004000003"], 0x0, 0x43, 0x0, 0x1, 0x3}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20)
syz_emit_ethernet(0x56, &(0x7f0000000480)={@local, @empty, @void, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x3a, 0x1, 0x0, 0x0, "2675fff519e189457ae5d2df1ade7f4e51485f8da0cc633333f1a8eb0b6323da5864251ba7a02c2f232d868215dd0234a269ac7ba4ee89feb8d02cfd1a515ae5"}}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
unshare(0x2c020400)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYRESOCT=0x0], 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2c, 0x6e})
r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_buf(r9, 0x1, 0x1c, 0xfffffffffffffffc, &(0x7f0000000000)=0x9)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000000080)={0x80000017})
syz_usb_connect$uac1(0x5, 0x9a, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x6, 0x10, 0x73, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1a00, 0x2, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0x40, "9b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x9, 0x4b, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x0, 0x5, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0xd, 0x3, {0x7, 0x25, 0x1, 0x8, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x65, 0xd, {0x7, 0x25, 0x1, 0x18, 0x9, 0x6}}}}}}}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x12b, &(0x7f00000005c0)={0x5, 0xf, 0x12b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "af0c78aa17f0da0ca20208e9b9629379"}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x4, 0xff0f, 0x1, [0xf, 0x0, 0x3f, 0xcf, 0xff3f]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x7, 0x6}, @generic={0x7a, 0x10, 0x1, "78c4bdaaf251a387ca2cf12ded98150bac52150f58737e0ed677cd9416785cd2addaf5f4f5650b7f794a7a8a66d337b798e5ea166217d389ce5a65af343c1417f8eb2e08b36eb7642988fce10fcd14834719807c17300595480df6ac0b1b2b752b7304d03ceabc2bea52d51447441c0ef0a71df5ac66ef"}, @generic={0x71, 0x10, 0xb, "b0cf963be8cc4f0e24c1c2f3d844abfbf14c5985a2f5b1ea1c1ed05d0204b6c569eb1af31416443b20e74fcc4b37d208a1b4c318a47be9ca10a22bc696e881c60d602c39ffd1602b0af83ba44dd83bbcaca0f1e2db9cd9f330e1811502c7311f2cf7b980a9d02d5240a178ee2f93"}]}, 0x4, [{0xa8, &(0x7f00000007c0)=@string={0xa8, 0x3, "5671e21463e6410dbe883474a1507fb5408427b20ce47afc4a334956aa8690bec60c465300a926c758e7c57cfa22ce79db8952b5f38640aba72bdce055e78ec7c5a374a70ad0e8303f256b3d8d592bbbc99d2b730e0c4456b2d0a861ab84729c8a9766805fa4ba9fc9b9cf0adebfb5efec2dd6dcadbd7cf67793efc15e62e20d97cf075be18f46681d3805c99cb3be3be291759d810c752b227e7b0dbbf558d847c7fbd7c257"}}, {0xd9, &(0x7f0000000880)=@string={0xd9, 0x3, "30521b9743cfa2bc28dfed483f6a6cd8d4ef2d718ad696782900f539c9cec5f690f9228420399c0db516dd85bcffe7dac754207004ba1d9752c62280d7a87bc087f05648b40ae35d2de154690cd07994fe3506af58dc18b78f621503f927a20df2b303e24a249f7fd8c06e026d82e9fc3845dd3a3ce12bd7fcc75329960a3bdb674b56ec808d9302c579a17d0c134a45d42053fc70d0cac253c2d07ddc51c53553f1dd028d43b6c0b26c5bfb1d2491b9426565972d43a87e19477d62daf058b20f84ffbe32228ee3daa0ba11c3a796a7782f40a96435ff"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x405}}, {0xd7, &(0x7f00000009c0)=@string={0xd7, 0x3, "9edea87c3322e51e42b9308b110dad8e0508d810f40a1930a9434939289af57235548278feefac8dbfc3e7fc5854743bb8ffde8d472d9ae82fa414b16ad1c14b79eb46d5a6521223445d6ce9c0620511f01b88dbbc645b65e673c1a5cb36e8eb15e263ddffc89243127b057a9e2caaa30f26a6b60f992396cc6f5d20e7bdcf1f1c557ba314ebbf3116d81c9ea28cd702552fa8e10c2046e5209a3c6d544927433d19de8ab96793a868450c71a715cf972dd7028354c521f1715afeb6e3779715c1cbeb9f634bc889a774d8d0c3fc2105376c59fe25"}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, &(0x7f0000000c00)=ANY=[@ANYBLOB="3f105d0000005d31115f"], 0x0, 0x0, 0x0}, 0x0)

1m24.999173495s ago: executing program 0 (id=1825):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0xd69, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0xd, 0x6, 0x4, 0x25cd, 0x5, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0xff, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc65, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x3, 0x809, 0x4, 0x20000a7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x4008000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x1, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x40, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x4, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x6, 0x3, 0x200006, 0x80008000, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x9d83, 0x0, 0x8008, 0x7fff, 0xffffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0xffff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000003c0)={0x4c50, 0xe, [{0x0, 0x1}, {0x79, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x7}, {0x0, 0x1}, {0x9, 0x1}, {0xa, 0x1}, {0xa, 0x1}, {0x1}, {0x6, 0x1}, {0xc}]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffbfe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m24.33582811s ago: executing program 32 (id=1825):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0xd69, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0xd, 0x6, 0x4, 0x25cd, 0x5, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0xff, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc65, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x3, 0x809, 0x4, 0x20000a7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x4008000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x1, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x40, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x4, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x6, 0x3, 0x200006, 0x80008000, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x9d83, 0x0, 0x8008, 0x7fff, 0xffffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0xffff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000003c0)={0x4c50, 0xe, [{0x0, 0x1}, {0x79, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x7}, {0x0, 0x1}, {0x9, 0x1}, {0xa, 0x1}, {0xa, 0x1}, {0x1}, {0x6, 0x1}, {0xc}]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffbfe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10.470909044s ago: executing program 2 (id=2181):
ftruncate(0xffffffffffffffff, 0x5)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10.322762896s ago: executing program 2 (id=2182):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x91, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x12, 0x8, 0x0, 0x0}}, 0x10)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
r4 = fsopen(&(0x7f0000000200)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x5)
fchdir(r5)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffdf, 0x10}, 0xc)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
statx(r7, &(0x7f0000000000)='./file0\x00', 0x2000, 0xffff4a9c0080ffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{r0, <r8=>0xffffffffffffffff}, 0x0, &(0x7f0000001540)='%pK    \x00'}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)={{0x1, 0x1, 0x18, <r9=>r0, {0x1}}, './file0\x00'})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], 0x0, 0xffff8001, 0x0, 0x0, 0x41100, 0x2, '\x00', r1, 0x19, r3, 0x8, &(0x7f0000001440)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0x3, 0x2, 0x5}, 0x10, 0xcc15, r0, 0x8, &(0x7f0000001680)=[r5, r6, r7, r8, r9, r10, r0], &(0x7f00000016c0)=[{0x2, 0x3, 0xa, 0x8}, {0x4, 0x1, 0x6, 0x9}, {0x5, 0x2, 0xe, 0x6}, {0x5, 0x4, 0x2, 0xa}, {0x1, 0x2, 0x0, 0x6}, {0x4, 0x3, 0x2, 0x2}, {0x1, 0x4, 0xe, 0xb}, {0x0, 0x2, 0x9, 0x3}], 0x10, 0x8}, 0x94)

10.202088441s ago: executing program 2 (id=2183):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x2, 0x6, 0x6, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xbfe81060897b5600)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = msgget$private(0x0, 0x5c0)
msgsnd(r3, 0x0, 0x0, 0x0)
msgsnd(r3, 0x0, 0x6d, 0x0)
chown(0x0, 0x0, 0xee01)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="20030900fe"], 0x0, 0x0, 0x0}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, 0x0)

9.220393619s ago: executing program 5 (id=2186):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aefd", 0x2}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000006311bc00000000008510000002000000850000000500000095000000000000009520a505000000007127ba313654e019d335f6b37089023b6ff74203c64c4c79b70324929307da6c86d67a2927b66d12c3aea048f8852196d6b59e555cef320f76c69234c5f7d63569ced26765c14a6e66"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x3}, 0x94)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2a020400)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

9.139125745s ago: executing program 5 (id=2187):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r1})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x17, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

8.783165897s ago: executing program 5 (id=2188):
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
r0 = syz_clone(0x1114611, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040f204211400000000000109022400010000e80b0904000001030002000921fd77000122761a"], 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x822b01)
r2 = dup(r1)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid(0x0, r0, &(0x7f0000000040), 0x21000002, 0x0)

8.745584346s ago: executing program 2 (id=2189):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, 0x0, 0x800)

8.455209838s ago: executing program 2 (id=2190):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

7.701305008s ago: executing program 3 (id=2192):
ftruncate(0xffffffffffffffff, 0x5)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.616297216s ago: executing program 2 (id=2193):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030429bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="08001f00f40c0000"], 0x40}}, 0x4000)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x130)
mkdirat(r4, &(0x7f0000000380)='./file1\x00', 0x1c3)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r6 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x85, 0x0, &(0x7f00000010c0))
close(r5)
clock_gettime(0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d2)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

7.410751774s ago: executing program 3 (id=2194):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_setup(0x7106, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, <r2=>0x0})
socket$can_bcm(0x1d, 0x2, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000040)={0x46, 0xa, r2})

6.701850595s ago: executing program 4 (id=2195):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

6.696330917s ago: executing program 3 (id=2196):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0xa, "8ac0"}, @main=@item_012={0x1, 0x0, 0xc, '%'}]}}, 0x0}, 0x0)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x3})
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
syz_io_uring_setup(0x4575, &(0x7f0000000080)={0x0, 0xa397, 0x40, 0xfffffffe, 0xfb}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f00000006c0), 0x0)

6.372650343s ago: executing program 1 (id=2198):
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00')
ioctl$F2FS_IOC_GET_FEATURES(r0, 0xb701, 0x0)

6.293261458s ago: executing program 1 (id=2199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x44000, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r4 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], &(0x7f0000001540)=[0x2]}, 0x20) (fail_nth: 3)

4.986905148s ago: executing program 5 (id=2200):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x44, 0xc, "90ae2ca414792977b7cb60c30e7d24cf63e5b1791322f2ef78b8f80748e773b7f8b65fb491cf49754907cdbbd58822868da08ec54df3cc7f3de71d021c254949"}]}, @NFT_MSG_DELRULE={0x190, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xd4, 0x7, 0x1, 0x0, "021716790f33c5bb650d9f14ee47e10cb237dbaa2dc4505629e6dde88bf545fa477fb385b6d70858975d03c261a622c8629c9331352882f9eb42837beffbcda8f67c85d5b9b7a227c377bb190e934d1c3e08c7cd55e7c0a9782102305a4d2043f1c55d041ba2a790cacbbb72f882de2f3d4e35f7161b56f618d9db47ca041fb7ffa975f158559a432fde76c2b964c31ba48352f9a65fd7d237e5e903dee4030de6c720fd6919afd9e1c8d906d0d7fad48ab143aa4f5786d5396215a676dcae60e6ae0040b4d6eb32a09af15280d63327"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x10000000}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_DYNSET_OP={0x8}]}}}]}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x300, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0xc3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x764, 0x3, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "a87aa9f9a23f71c9763524b85836dc53b780f38dfcef1858dbdc36a6f3a05c4626564f5638af9236bc3af5809590f84ba8ade242adbece9c62284dbb215c27f0d7b2380ef2b31ac8fe35f4094bd8374d3944cbdfde83fdbbd7a4c4c0a6ebaf7f551323d30a760e1a92989746e8bc71d06b6cd38090c8d45f9c422dcbfb952b7fc82ceebea78388"}, @NFTA_SET_ELEM_KEY={0x210, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "f239df6b76dce1c77d5f9cdfbd01a9e4ab9678d40768d03f143282d9e606061317b494827838e3161b10724ded666302beaf8cf76215ff0579e6801bfc961f6788719c916b14638cda59092918d644a2b049159b4c2315a5f0"}, @NFTA_DATA_VALUE={0x53, 0x1, "a53ab3c7d0ae1aa10a8cc391998420756904ce0aa71767c35a4153ac343fc13a9138a7fe7654a8f441a8382c9529561010827fff936ae54558dc226f6d5d13794539e7d23d9b079083a772724e032d"}, @NFTA_DATA_VALUE={0xe6, 0x1, "506001bf02237d1473bd101681217d75ed112cf8145be6945fa39df6284f7d3207d166bb3a14ddabac67a3bc3597ecfa61e7130114933e09317762da6cf4cf32d8c269c73cdc87ac1250d0003e74b608d6185f1d9f109ad51684c7c8062d6573f80654f62ea0680904913108d29c8ab25040f9d48292ad8fe3565b3b38d3710caa7c3d16f7369415d70ecb82d8ac181fb393bf912d587662870092406d19a0ae6e12dbc3804425b27d623eab3c0e8ec406c81ba3a4788de7f30b12cc54d32922cfc127cab5b9b28ee3d606432d222a50ce220c1f2919a4f3fc207573cbb46b9dfe33"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "2ee108882b394897fa60c7a818ced8f5f2d48759e97f935fde21a1863b9dae1dd303d6c26b7956f4abf0a39860a36dfd5b0f5a85794d85178a50da58221c24e2b32646e941b4e3952cd60730d6265274eefa1f2980e955a25bb3d842db27069ff547d8c4f3b9198d65cd288606a935a0891c88fee46746d6b261c0fdc1a5fa2a24498384019fc6c5c5e8819f5c154eaa96f4dfa2e58efd24e8cebeeb2ff1779c8665c978769a1c8e6a553dd711a62ce3d5dffe4060c2dbb8d328fc57c84df7405e019616f3a9f4c7552b7a7686609c7c3cfd29eec5d33d13d20ee2495d19275712761a1cd8b872183aaaa7e01fdee8962d7a"}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "a38d5845613a3907382de07127f3df5d3c9c8adebcf6afd29e3d201733a97e0e62db3c56d70a6c54aef44db8b16c2248e8de63c34ac06da403143621812d0c0b0d42a8fb78838223d760b2dfc17e1ede4608f98b252873e42f1986cc6633d626ab89c283b535cb4a3557fdf2f5001f99c9d078703cddadc0c9b1710bd8cc21245f55df7c0cbda11c5cf6178515b5e98d254042e658788c63f4bf939063cc8de18c2518e9fd42b6a8c034750eb0cce6109873a4e2805a738ca9f69aa1eaeab1767466f1b69929044a52c9f5cb60d9ebf68f9928da9bfb2132b921426d4bc7a304e60876612940b6a32ff01b3aa26ac6317a4227767f17b7861faa914ebb"}]}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "8632b4448de070262b6852d884076d0f8390e3c586b3cc569decb8fe8054481943d4540a7c6d5a52ce6361949ecec3579b78a70952a41ed69152d321c120056d268d0fe18483342ac7ff84bdc4bdbff94c7a67ccfba1d6449d9d9f05c3e5485c66c80b9fd34d367476258fa29411624b6b5eec3cd5d2411dcab10c7fbf52749aab8175a24c519cafb32f50b8d9fd7b10275623458c4837303ba2123babf4503f2304c045a5b7bbc0083210b025a4421dc50c"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "045375737baab6c1ea6b5822dce74f420680e455f62ecd04fbe064279b1d602ede2f3e59ad0dc1507b1160b370becaebfeb3933e7d91cb163a1dde27d5"}, @NFTA_DATA_VALUE={0x91, 0x1, "728678e26ff67a0a1a2fa5e5fbb847f1d788fd741c099f83c8b8e7fab4e499b956acf40c8fcb0765ba71cffc8ba45b54b5051bbb7e4cccdfd4828f3cf0ceedd302daaafbb54e1ed4e500a12936712dd03413cad0a5498fcbe5d7892f366bfdc2a788805075172fdcf71ce4f740a28360bd46f08ba061eb3637979c912339654b4b24d5c0f23c4abd2c1b07c368"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4bc, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x36c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x340, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "7855039e95288b0743983a37e785d53b6505ef46936d0d289cd1e4c1274c678051679a4aaec28705743959f6fba70194f711d3c372ab356d277797c83a2f10e7fbcee062b52bb877de702c8173880fa21ff705e56031e0a76f1fd4f7f6be1036546148e8e4bed0df94220cf45f187b574b44283451e77fad16d77dd76cc5d757c3363322f652ab7253193c4cbc74d00bfa6b6fc1210a83a53e98caeca9c13638e64c55c47aee285b9b0ab8d2ae6df2815049a2"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x90, 0x1, "5ffb03f6324917b5d96d9b4f4e73f7d47eb49b091c97929af86e0f564e362ecc191663431b657ecb2d3c930a524372b36d6d69c673d88496c9b43db4c60b6bfa50a5e1ae94ba2b6af63d5e08cfa769afccb7f669977642cba67f4617bcb9b341988c3458fc09fa0947c69161dce3145e04d0d937199e8fd0327bdfd43ae7a5a26d553ef0f0c771132b663b95"}, @NFTA_DATA_VALUE={0xa3, 0x1, "d32300e318c6ee7df053ed7853e0d4e035be78af65feca518d2351a3b442108193e2ce99ceadfb8659c00fabfcd25a42f33697028fc3fe227ba049db20babb5fd753e90fec931749f1fc47eed31dd69c4a2e89a3c6ec4a27aea77578a4d0ba2ab3acbd4438ecd07116d58b6b11f1009a4c1535422981a0a78eabb88ed4d06eb06f63498553122205f62fa30e57b7d44b4532413381deef8ef04ec70028d18a"}, @NFTA_DATA_VALUE={0x8b, 0x1, "27a2c7f6f03492e5d8efab07edd7e948e23e74311744ca6cf2e23c38a6fd91ac9e5261f217a8f73111bc0acc2840c09eb4505872299083b70e268edcba0245a7faac832b02d1b5a585127c25ddd6afc61ad775141a0b226c7aded35a2d3683347f3bc7381f56beb997a7a7076d6dafa5a0cc62b6494ae81f5475cbf10881ea5b9a6cf2c824eb8b"}, @NFTA_DATA_VALUE={0x78, 0x1, "4484c58624d9f7854282340c747939f81bf834706b6d424f983f9930f110c0203bcdcebd72ac6bfef0a7064e7421e17263da8b469a60ff2c7fe23e7b277d60e6cfb396e45e248b532247e0e2fcfa05bcd7574dac27de3f5898624f0a0954fcc527c3737c6ebd0fae02527c4a382494e8292dba28"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x24, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xfbc}}, 0x800)

4.986522468s ago: executing program 1 (id=2201):
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xb3e, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0xd69, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0xd, 0x6, 0x4, 0x25cd, 0x5, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0xff, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc65, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x3, 0x809, 0x4, 0x20000a7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x4008000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x1, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x40, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x4, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x6, 0x3, 0x200006, 0x80008000, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x9d83, 0x0, 0x8008, 0x7fff, 0xffffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0xffff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000003c0)={0x4c50, 0xf, [{0x0, 0x1}, {0x79, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x7}, {0x0, 0x1}, {0xe, 0x1}, {0x9, 0x1}, {0xa, 0x1}, {0xa, 0x1}, {0x1}, {0x6, 0x1}, {0xe, 0x1}]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffbfe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x7, 'wg0\x00', {0x2ea3}, 0xb17})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.966655546s ago: executing program 3 (id=2202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2001c015}, 0x4008054)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)

4.718838533s ago: executing program 5 (id=2203):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

4.302530328s ago: executing program 4 (id=2204):
ftruncate(0xffffffffffffffff, 0x5)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.198184807s ago: executing program 4 (id=2205):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="42f7"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

3.717732815s ago: executing program 1 (id=2206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14)

3.374882673s ago: executing program 1 (id=2207):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007b103000000000007b0a005a83be11009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpgid(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4})
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000034c0)={r2})
sendmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f00000008c0)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000003340)="050b68f157adb945277e2144ff5628d9c27b472d88e1f2a7b8ef0c3d5dadf8148d29a11f8914849b307b2cf2b715035a1acca4b6bddbfb41d7ac50f97a0aab9fe6d7152a559cbf7220745a5bbd7c865d5c1c28d77a17e0c48fdb9836f32ff50a9999f351aae556c40ae5afa8d103a2b4fcd348e7ec10688bb6466e7bf1d76dbc2cd8a676804d3b53cd346be5eddfa29f85dc4a729ffe551659027664ee6612", 0x9f}, {&(0x7f00000035c0)="2522642821d3dc1e094cc1", 0xb}], 0x3, &(0x7f0000001980)=[{0x40, 0x6, 0x5, "2bd53fc084c72785b5c5b7fb17902f42d8fa654610f7a9b1b846f16ae9618d46962c37ad6af72cc697"}, {0x28, 0x1, 0x800, "6313e21126e8059b86d34cdb7f5257fccd666d"}, {0x108, 0x10f, 0x200, "e2ab203533548500dc74455db9b49a7517c1e743fa93489cedda690afdd0ffde9fd4869923160b19b0fedd9501d4cdf04f7f872396c66ef3c9668e3756a2e38fc097b6fb81a03919fd7b02802464686b5792d36253c41bbd2640f94bc6516a7c1338c41ce447c1db7959f97e9c5c45a90327309277a519488fd34184a5534e4674bd9258d742366d23424c3d4bb86a9035e3baf0e1f6222180d08e6a9b994b71af3eeb1c6fdc77661d818b8c678499a202b2c731a8ce12edf92164826ec227e335246e66771074488f58a233e964b4bd0ea13fc384d9ac1213cea345b8981fb532a5540b7b1da55a704284249e1cf80438e15b4c"}, {0xb0, 0x3a, 0x0, "553f912923a4abad25c25b3851a668d62468b6541f2ec0970bb862b49c1150e18106fb80027fedc85ad0a2f67bde98611f7d49723b6e96c4552137dfb257e587aba84ec45955deadf6b5c31f6a639a620823cbf37895a02ac14da7be87775e2bd970cd275834b7205d7a6e28ade591886247ddc74827629733d686e8d1d73ddf28274d9723ad3674c1c01b03a003e9cc647ddc7ee1ca1c6f046f"}], 0x220}}, {{&(0x7f0000001bc0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c40)="03e799df415889ab0de6d8525168dc894f3f4974445a9b5fc669e07c5a716cf225aa5775fd2b5b56b29ace4de247142514a137ab9830aacdce8871b722ff8b8733c511e39e41f3e061aade300395b1291baea2fa824e4f1309bbae43b6b3da7adfc172f4be518a41f85bd907b8aed96a63a83d538a7b2aa0cd1d355f5f05d875b101f419f0fa333e888fecfd27469a11efd00935ea1cbf7bb26d32e15d544c947fc9f0a80a2c8ed738dea875b432", 0xae}, {&(0x7f0000001d00)="166c9520ae6866fa57ebceeb29ace9262b9dc1ec1b402cf8a1f1", 0x1a}, {&(0x7f0000001d40)="52c8ffbd4b54d832abb69166021b64616b3d6db0e4d5647ed2ac0bcf78a6d4bbba74a5688b26aa3af6a6cc5c2414937a636b568901ea9c81680366468f55840cab1bcac10ed9d98d1eda156e4c244a2ab9a36dc2f6f8a5706d08acede8110b6e7a2bb782d1afa400000000", 0x6b}, {&(0x7f0000001dc0)="e03b1f565b81c47af7d67b62385fbd547113e181a95446e17109dc8c2cd25a1c1b1f058da182cb23850fb5d3adabbd600be75ba98dcdbb935940c04c68db90fd761f26eadeab3895f6bd648e548b2bd69f238ab222c415c2bd35b3cb5e3ec1925233c1b8b749404bb90fbadb74b7a6133ca99172d784b2170776e4292c776fd19958de2917dd71a4e6c6163f", 0x8c}, {&(0x7f0000001e80)="3fee1ae943f5de8d515dfe6c22", 0xd}, {&(0x7f0000001ec0)="713434581b22cf6041d0b6cb0cd50eb07457d2f72f928fe7c387bc635a58b31e3d002a99676a5a2caa900dd559aff027188d281a8e2ca330bf7214e094ddd613b7aeb8c3cc7944303687be1fa63d5d68c1593ed0e45720b0a17544ffd621ccbe052b5a235cd3cc8a3dcbba6b9e1321d58d6eab578e5aca1bc6be97d3569afc0f68acc8c2e46943338739fbb4ea730425ab85f8a954cdeaf6107e216e7c", 0x9d}, {&(0x7f0000001f80)="18d177d98154e542b9bfb49672e7372972458a443a8b1656d1c6a08b3316c5424ed62aaabd7833a7", 0x28}], 0x7, &(0x7f0000002040)=[{0xf0, 0x114, 0x8, "675943c39a0823c49722fb5cc7172471344978706992b7dd84067e287f72c241d15430fc1f1067e45cc0c36d45c7909b45e9f77d4c903cf5b29afcc4b7cf4647eb2c054a5e8f317d7a08f00dc9a46777f98237f2f016939c390028d26f7c1cb37ed6ef4d58f974d0b09bbf13413a1240b9ca641cdbb240d935ce08c8220180c389c49908693374b00d3f79cc22c47c3e943cf5152047f00aa69a7392c0e5cec8c55ef23578c16138fa37366907d116ae185cb5b848279b399c2952947457e38ca6771c0c1557d5ca756d143c19d21cf37f868e63d2741913ecab95d405"}, {0x80, 0x29, 0x80000001, "f6c30aae64e09fbb50904ea74203c492d419b462b7ac5412be1419bde03d41e7d0598ae42d91fe5f337dc9d24fdcd0705482064322c0b13ef0ddd2b129df20b81404f448a55ca0ec0aea27ba849fbc6f88976290cf79b35f5bacb5b3005c9b33732c4ef87987fd912b77be"}, {0x70, 0x101, 0x0, "163efbab9a3f68d53fc013a9d1c12b4da53390f07bd6146f390033bddaae2e2b7e081e471bc11b48d4eed8d2403dfc7a1ca393e90669bf34404abfbdb3d09f1af40ece7b007dd184a249bec4d773bd5a4d3823f10883434d1a11"}, {0x38, 0x101, 0xffffffff, "cc28bc790fb0e0004c38245cd1d7aea3cb34fe1227de2f6d7beab674142f2803a8d24b3bdfaab0"}, {0x88, 0x10c, 0x381, "5c418432b506f33b6ad7174ee67a999ec0a23cc67c249c159745464e1472cbb0450d7bdf828d815fe95643fbea41cc195d986c537d1da3159781a99c86479bc657e287497f8ce0e8b642dbb0c846b8b581b2d66d8c3b8df2e6060fb065c915d1d7a13854525456ef56d5ef12c77cdd02c8307ce344dacb"}, {0x68, 0x104, 0x0, "573d8788d597f70c42c107cf983464f8f0b1ba52afca7c740692ed91066ef0946520db49e79746f0d90ecc0f123e617db81dcbace83592fea462190db565f8d90d02f14818780301cdfbad216adf17d740e5"}, {0xc0, 0x113, 0x1, "0a45494b99ddf1d5533d71a6fef1dbbaa4af449d16de29af93aa8b03ccb40b971f8f5f7681b436c81236b11e60b1428db4525ba5ea3c411e5a4994b19e8101e577b915700454b8c4f36d710d060393a3a87be42ceb8207bd1aec35ae5f2c9b39479182f2cc0a4b8a9b66382539909fb0fb20cd91a30afda2312b1d81e453b622d39ec262a34c4e574a36c005058c093b6546cd2db0406ad9cb871af7918f7a8171e9a7208637c31e5858bbefef71251f"}, {0x80, 0x1, 0x80000000, "9440533346578d7d6396e6db6edc81d78b458e992c45d7c5d42534841aa8c394950c9fbc8ae852d0b7b85088869663bd7cac816129778040aefbdac48855757d1d708e9727d39e4b178aa5c805714a6d2605f7c6b18816cdede29bb6adc7fbccf43715cdc328f392b827074b00573cad"}], 0x448}}, {{&(0x7f00000024c0)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002540)="42bd82193b581d90a4fc641f4ec8c47f681395310e7a62e8bb3f346375b49d9a2362b50d7084308b5b62df48414da13ca19a9673509677fd8b6acbeec762e35dc14e28e4f649353f5d53500a1d11aeab03433c0d65cf88032ebdaae6c39eb3dda81a248be401cd15c977974c601506a7d77946bd5d22b1edd83cb975f5c6e5f77ce1582c2e4f31427e80ca13330976e4c784962822591e0a5b665f165751215ba2d6cd02b53016f77798edc6576cddb1220c9460a926cfce244d7946b3a60c2283409e972792c9d87e3584af5c7f62b83f243f27cb8bcc8ffdd1dd559381e651ff1497fd35a11c7bed", 0xe9}, {&(0x7f0000002640)="4ef4b7d4dac046270b25a5abaf83d3ef819256e0107d1dbab9ac20698a2442dc5fac1450e5f0deecf9522f5e76af4e05caa0fbbba7b3c4a07657c5fbc5ad1588a0e65b9b8cfe1d59bdb521476a841273f3cd506ef0ad32b503af0cf8b1c132de257880430e04dcdd3752ef1f7b9f72ab54b2c34d2c0429b3c77b408c58e6819d5435", 0x82}, {&(0x7f0000002700)="3cbecc06c92eb897d034b23996c365d373b38d4fdf147df824c655dc2eeb1e871b92544cfbe1d44d7c22fc3f518a5a377ea66ac6e4bbc257a9bdaa4d175726e8ac113248825dc637e271b84d71636e409d8d064a50465606e76cd29f6e96fb94a95f3d63a0fb78cbef3039d3ecf0f7f89257867e59083026e4ac4b32145871968dadc3420c66f1a1214e462b11884ce1797cd1105ef65c63ff0c5a86e44fd28d91de473239eccf6565e9ca32d52932c0748705bf989e46e81b785377150e21c19e7a75288c25b3dd6164c34f9bb34fd2a1cbe182b147da6f71d012cb2f7bb47e", 0xe0}, {&(0x7f0000002800)="fc5f383ef376a7dbf2a862c300901e173555e3931ce0bec07418312b60c235372e2963fccc8c4af751f1d0cf1d96492e503754891b771975ffdbd365006ae60323c6dd9fe8c4128eb8bf8cad6cb000889d813b3f289e86400dedfc8e9d748b0b3a4fe7e97f0190814801f5ff400c37f6331698273dcf2fd2ce54183ae8865beb28fb3d1e92bf5d6298846513ddedd58d8d95e379f8960264424ad1b77b8fbb7adf9c63639685fb049d5370fb48639063f45803de8a8ee8a5b208c3ab5876da25f7e02c1aaadd46bf019207d3122b2906dafb116a04e915454a948d6957ff9b53908c279b17c6", 0xe6}], 0x4, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x1a0}}, {{&(0x7f0000002b00)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-generic\x00'}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002b80)="d687c3d86c852e297514ebe9a711e781433cf7ba55959f3771a8dc61fa55e7cdf81d310f9d2ff8dfa4c4ae92ce7c5ba02fb25a437dc12d34d14683dfbc9dd5784911f4bb66de50caef7e795d0aefcf158a2e515f8ba4d1a520b35cc9f35f79486a93aa6c895200f6228a4f6c735c9a643303f20615b72965b60ffd53d37ac8aff6912917612b471136bf5bc0391c70021888ebabc9e1b3e2bb63172e9d3d299f793ec707c94616bdde06e9f0183d924a196a1b90ba588e74c9d7a4c262e6c793bb067ec7f01408b0cf41c7240b6dc25c6af71e0c79c77122991522aa319130e4d74d49356369cfab3913aed1e858107f", 0xf0}, {&(0x7f0000002c80)="b0e1a8e8cc27401764277d27be2dc8fddcc04c738e49a012208ae105d79d64e491135c8d129bf4d3f917921e2ad18d000bed757f526731373d7d9c8dee06fbb8e2582b68d36c457b8c2e18574d716adaed0aa413b4aeac8654e15b828c6c04e830ba3f1c102bbeae71cf8c5738a7451afffa9f4f9ce299e99f2208990acc0d81d9dbcb7589648cba4588069e4f31d90c28280f3988ff16ca0aa703c3e5a370ead071f7042d6356fa1bbc815387188f8d3492", 0xb2}, {&(0x7f0000002d40)="1ff29619464d24573707da447932d4bd9352e343263a26c484a5f0173f40713a0d85252487748ae7c1", 0x29}, {&(0x7f0000002d80)="ab0df2c42d05ebfbef5b7d879cbc4a259964a2a71f1dd51914", 0x19}, {&(0x7f0000002dc0)="d9ccea6645474cc4292442d71ee9dced31d5946eebc5e598d5d2dc8d1fe5dac72ebe5f75355ad7ac42f1a29c2f2f458c6899c4e22b2fce463ee7e203d957485be8d554b9200691c93ed5e43c4674316e5803fee4b2baeef5918d02122a8ad64b716e05c5b509fa", 0x67}, {&(0x7f0000002e40)="54536eda4c591330dd54b5e868922417a85582b70d9b759f00709499d7c044befbe3f50ad6", 0x25}, {&(0x7f0000002e80)="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", 0xfd}, {&(0x7f0000002f80)="aaede613ec3ef27cfc788082f8dd8de0df764a71a7175fca9f4ea21a311837dc79262dfd0af1b755d7d7e12a09e711dec7e690cbd2edb2594e829161c43e23d068e8b82700cdc0c71bde9112ca619c6cbc4f2f0d038c830228475c3d10d033d49fd41508f1a53e141580fc6135c6f163ba145d4a20", 0x75}, {&(0x7f0000003000)="a483a66ce776249dbbfa590d75654fa05092bf7b95a5f980e54ce58118987cad563c953a74b79b4864a58e39b44734969e1cb3fecf3920d2c5325d7c0338acd90505088778286ccdac3fa14c447185307ba6e30d7116ec939950ff6fb4dbef1fc4c5b6714425a2dc799e9272335be7133611106a1977c273e38020e9d6d9", 0x7e}], 0x9}}, {{&(0x7f0000003140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x80, &(0x7f00000032c0)=[{&(0x7f00000031c0)="207f8a3aeb69fbea1731fdcab47d2fcbf478dc2a14d6b843edb2f050e08cc49230386739a562ddcad87865a2873da12e2f288ca9160ba846b12e841d18ee337dcef85df6045aafd0399efd3ade2341fd8290e8458cbbab10e868a4f35eb98bc524da26519fa38bea2a030b125c4f5d882a5812c028349abdfd776e2c5e1db469d61f3ecc603283ae0f3c4a9cdf13b6935f453353e20a29ca52550a80876de47dc60e785f7b3b03f5fc34943c2e474e330e3461fe520d8f3d6cd67f4824c2380b257ca586c173fe1e65651d89afd4e1b38ce7a94fa8d2a3d2e451ff17b7c04647ab04997eee057ad976e9689c72", 0xed}], 0x1, &(0x7f0000003300)=ANY=[@ANYRESDEC], 0xd0}}, {{&(0x7f0000003400)=@generic={0xf, "cd1c633c00d9a013678e8c9fa29d71abdfd696554600240466f6a48a4cdb42266acf3ac0024df9eff965624e7af7f9979c0c2cc9c39d162b44411014eba103e4d6aeb979cd27563a739905a9c7c220b9e97a20e9c1643c9de95087e0dfc395514c6961d1cee36d161724609e656a3e38960f35c16f8132d9dd825abedf06"}, 0xce, &(0x7f0000005500)=[{&(0x7f0000003480)="c4611236b019a99dd835983eedf552249d2ea1", 0x13}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="f4c799859b1ba29af9e44e617cc7f78e269abd0d1d4e42e54abd49480d20c2319e837bbf9e466031e96e79cf0a836905f6dbfe7bb1a9a0bc21ac768c0c00d2af49c964f5c166750d13249a0a5a6c95a5137e86112ef78312fcaa7cde536f7280c8710742b26e019da5d04c9912514d181a50fee36dea788bb90fa68504ea34de09fbbe88bd0c28aa12b3f93b807048227edf8138a55131b34bca315c218f5bb82d1fa40af99568eefdac333e67b6c37a040528cd0bb5b2d1158c858d5847438651584b10e98cd24b092fea17d1d388445c28be522f255f032b6d", 0xda}, {&(0x7f0000005100)="1f99db63ba7e13891ed62313945ea37ffb608a8e4ccc3596b6b554fae223985ae3b8e297cb1c0cae53c8e9ff154c111938dd0e4b794e2b3cbbabae16cc25c05b109ea78ddc11effefe23a9959bced688c2d2b86c014589996c2b0331965304e8cb76b5210af75dbd34be5c8fa696d408d24fd7597e522e6698f4d1a7540abb36058a578f6735d63e25b7ebf8b9a37ddc361eed6b7cd98be5aa9475570be4c73fadc8f57e1f8eed4ceb39e51fbafdac2453950a7518fa0905040c8d0426428fb83135548901e161191adf944655dcd326c2c15e7a8ab26b517ac141", 0xdb}, {&(0x7f0000005200)="6c75c9105074fed2b264e7bfa069923d41083b8ec64c73dbce31e65635221d0fbe8a4f199e", 0x25}, {&(0x7f0000005240)="d7f34a768db59aaf84d04e34ab841b34364cddff12d796d07c5f2511bd2b733bad41eca3d198a9bd783c627025ee2ce5acc6238b376da3ec98b344f15a4519994024d0864a831c07b32c601b36c56f5087194f87b3f8d1cde2dece0a2307258d15731601c83419ed498e859f48ed38f87af18efe9f5157401c6f2475e9d13eccb3aa2d9082f7411117d9844770a14c7f66fa8b3f0b29692653139d6b15b1ae2798ff018894e427eab597c95ab9ced0c9221676eaaa48cf69024f6a9b4fa3dccc40aff596877497a1f1c2b8d10accd13f9fb2eafd3334c28204f3e9d2a179cd6d9cf75c2263f9ac3009d9", 0xea}, {&(0x7f0000005340)="0984a557b74e1c9ea96451c5ff146338d8006d164fa22f78b4019f4864dc81cde9ddb247f9e398f8cbc76ee6132c0662ca28262dccb5cbfdbe0ad5373222a016c254414763f3beb95e1e3615bf80e9c27d3a3dce38996f946657babe6b3b894e82036cc96584d4b2b77eede3d2c53c7ff14383daa6ef729b4756754dde3f58996fd45b23cc296afcaa58b1472d466837130a44a7ceba78feb59e68", 0x9b}, {&(0x7f0000005400)="32c0621f69096e55dba64e1d026d28772cd54db23c7d641e34d5a7f83faf16e555d816f737c0052b05ba2a372bd3810e7e7cc3c52e8757d5d37951dfa472d59e42f5cef50b32d8a3c73edc7f53", 0x4d}, {&(0x7f0000005480)="0f6140eabeab1c8b75e2ddc838d90fd7b1124e42c2ebbc864a6e4e33924fc3d70d66ef9f8e1b70b25821a2b6f155ec41a41b6a0e55f618310348939496e69d40afa890ab3c2dd1ab4eea728c08", 0x4d}], 0x9}}], 0x6, 0xe4d15617aa16c47a)
io_submit(0x0, 0x8, &(0x7f0000006780)=[&(0x7f0000003680)={0x0, 0x0, 0x0, 0xe, 0x7, 0xffffffffffffffff, &(0x7f0000003640)="02d9d748de", 0x5, 0x1, 0x0, 0x1}, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x8, 0x81, r4, &(0x7f00000036c0)="0919abd921fbf36746b3794f5ebfc3359ddda5f98706225debcdbf090a0cd0f1cb04964e03038db98ba47368cf7fc93e8f18e0010220402300b24faed11c9ab6fa7147f5b01d67a7fb5ac7499f94307118a0fd3775", 0x55, 0x3ff, 0x0, 0x0, r4}, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000037c0)="3ce75e083b", 0x5, 0x81, 0x0, 0x1}, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x4, 0x4, 0xffffffffffffffff, &(0x7f0000003840)="1ea962b29c18ae6f41a8b93aa8f7c6995f95c6b5459e263ad818fc00c96ff6b5eb165d713ba756971e244cf99ba35401", 0x30, 0xffff, 0x0, 0x1}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000003900)="7bf39596f47cd251f686bcbf088bccd51c8394d2996a6a234f2ec2f45d32cccb9c19904b12da98032a7712795d101db68da1f33f2b379039c4b2a34040550807be86c60f4e58b445572b18bf5b673f27a21aa69d7635266a3ef2bf6708b34c4d6e4d3e829ca2318c9e4789a9b18b21acf738cc9f10", 0x75, 0x8000000000000000, 0x0, 0x2}, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000039c0)="deabe806860bae91f3cb3d18305da2557997b0d24c06c548e2f0e4278d48005f1c838a7683c894db8252443c5edae323635a15e2cdbd6a518c4efc512e1f48c4c99ae4c5ef3e2fd7016b6f4a79b08b880bda556c3b20c92520f15274f7c0f22946a31470ab790f2e3b2ccc57a7dd545efdd205", 0x73, 0xc000000000000000, 0x0, 0x6, r4}, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f0000003a80)="e895ce3ef73bc650fd6fa32eb64ab27b8ff7bf483073083d5e1897e930206e7468a3745afcdf206fd420c625c9f6e751db0dbfea1f97151feb3a90bc475d13c4295a5fa68eea48dac8375488f2fb7b7e0bf638a57d9ab0540ea42331180f4cf92cbfd8f45b3db3237c279b2ba11c4163cffdf024296340b29b08006a3b05bddd12467157ea13b3ed622221430d9a42a976e3394dd593b07cb8fddb14b43eeb15ff9d61f07e0342db8c889ec59eb6b00e71b389a3850ca4c462f00bdf82922cfaca8fdf17753f3fb8c5ac5e30a843ebc93c93e5b1546f036a98c8c3f4e457da", 0xdf, 0x4, 0x0, 0x2}, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x5, 0x9, r4, &(0x7f0000005740)="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", 0x1000, 0x8000000000000000, 0x0, 0x1}])

3.154819305s ago: executing program 4 (id=2208):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aefd", 0x2}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000006311bc00000000008510000002000000850000000500000095000000000000009520a505000000007127ba313654e019d335f6b37089023b6ff74203c64c4c79b70324929307da6c86d67a2927b66d12c3aea048f8852196d6b59e555cef320f76c69234c5f7d63569ced26765c14a6e66"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x3}, 0x94)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2a020400)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

2.750480026s ago: executing program 4 (id=2209):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0xac, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_U32_SEL={0x64, 0x5, {0xc, 0x80, 0x4, 0x401, 0x1f, 0x3, 0x9, 0x0, [{0x3, 0x7, 0x4, 0xffffffff}, {0x40, 0x370d, 0x1ff, 0x6}, {0x1, 0x6, 0x7, 0x1}, {0xa, 0x4, 0x4}, {0x9, 0x2, 0x6, 0xcc}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000)

2.157727129s ago: executing program 1 (id=2210):
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x2, &(0x7f0000000040))
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000440)={0x8d8, 0x4a8d9f63})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
pselect6(0x40, &(0x7f00000000c0)={0x17, 0x9, 0x300000, 0x7, 0xc, 0xb3a, 0xffffffff, 0x1}, &(0x7f0000000300)={0x400, 0x4, 0x1, 0x7, 0x7, 0x0, 0x705e, 0x9}, &(0x7f0000000340)={0x4, 0x1ff, 0x2fca61bd, 0x7, 0x6c00000000000, 0x7, 0x3, 0x7}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x101]}, 0x8})
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r8, @ANYRESDEC=r4], 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)

232.453175ms ago: executing program 4 (id=2211):
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee01, &(0x7f0000000140))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)

229.750776ms ago: executing program 5 (id=2212):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0xa, "8ac0"}, @main=@item_012={0x1, 0x0, 0xc, '%'}]}}, 0x0}, 0x0)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x3})
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
syz_io_uring_setup(0x4575, &(0x7f0000000080)={0x0, 0xa397, 0x40, 0xfffffffe, 0xfb}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f00000006c0), 0x0)

166.903006ms ago: executing program 3 (id=2213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000005200)={0x0, 0x0, 0x0}, 0x800)

0s ago: executing program 3 (id=2214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

[T10000] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1403'.
[  442.066368][T10008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  442.066389][T10008] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  442.066412][T10008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  444.109698][T10030] FAULT_INJECTION: forcing a failure.
[  444.109698][T10030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  444.109740][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.2.1414 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  444.109770][T10030] Tainted: [L]=SOFTLOCKUP
[  444.109777][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  444.109790][T10030] Call Trace:
[  444.109798][T10030]  <TASK>
[  444.109808][T10030]  dump_stack_lvl+0xe8/0x150
[  444.109846][T10030]  should_fail_ex+0x46b/0x600
[  444.109883][T10030]  _copy_from_user+0x2d/0xb0
[  444.109907][T10030]  kvm_vm_ioctl+0x85a/0xd50
[  444.109943][T10030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  444.109998][T10030]  ? kasan_quarantine_put+0xbb/0x1f0
[  444.110041][T10030]  ? tomoyo_path_number_perm+0x219/0x630
[  444.110072][T10030]  ? do_vfs_ioctl+0x117b/0x1540
[  444.110099][T10030]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  444.110142][T10030]  ? __asan_memset+0x22/0x50
[  444.110172][T10030]  ? smack_file_ioctl+0x331/0x360
[  444.110209][T10030]  ? __pfx_smack_file_ioctl+0x10/0x10
[  444.110255][T10030]  ? __fget_files+0x2a/0x420
[  444.110283][T10030]  ? __fget_files+0x3a6/0x420
[  444.110320][T10030]  ? __fget_files+0x2a/0x420
[  444.110353][T10030]  ? bpf_lsm_file_ioctl+0x9/0x20
[  444.110377][T10030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  444.110410][T10030]  __se_sys_ioctl+0xff/0x170
[  444.110436][T10030]  do_syscall_64+0x14d/0xf80
[  444.110461][T10030]  ? trace_irq_disable+0x3b/0x150
[  444.110487][T10030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.110511][T10030]  ? clear_bhb_loop+0x40/0x90
[  444.110538][T10030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.110560][T10030] RIP: 0033:0x7f05a9b7c819
[  444.110581][T10030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.110599][T10030] RSP: 002b:00007f05a7dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  444.110628][T10030] RAX: ffffffffffffffda RBX: 00007f05a9df5fa0 RCX: 00007f05a9b7c819
[  444.110645][T10030] RDX: 0000200000000040 RSI: 000000004010ae42 RDI: 0000000000000004
[  444.110660][T10030] RBP: 00007f05a7dce090 R08: 0000000000000000 R09: 0000000000000000
[  444.110674][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.110688][T10030] R13: 00007f05a9df6038 R14: 00007f05a9df5fa0 R15: 00007ffe1e578298
[  444.110722][T10030]  </TASK>
[  444.397848][T10038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  444.397879][T10038] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  444.397920][T10038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  445.178710][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'.
[  445.178730][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1420'.
[  445.178740][T10051] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1420'.
[  446.033251][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'.
[  446.033349][T10061] openvswitch: netlink: Tunnel attr 112 out of range max 16
[  446.095477][T10061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1424'.
[  446.095497][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'.
[  446.095508][T10061] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1424'.
[  446.095518][T10061] netlink: 'syz.0.1424': attribute type 2 has an invalid length.
[  446.095526][T10061] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1424'.
[  447.923735][T10081] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1431'.
[  447.959565][T10083] loop4: detected capacity change from 0 to 7
[  448.006566][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  448.017129][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  448.017357][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.091568][T10083] FAULT_INJECTION: forcing a failure.
[  448.091568][T10083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.091609][T10083] CPU: 1 UID: 0 PID: 10083 Comm: syz.0.1430 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  448.091640][T10083] Tainted: [L]=SOFTLOCKUP
[  448.091647][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  448.091660][T10083] Call Trace:
[  448.091669][T10083]  <TASK>
[  448.091678][T10083]  dump_stack_lvl+0xe8/0x150
[  448.091714][T10083]  should_fail_ex+0x46b/0x600
[  448.091751][T10083]  _copy_to_user+0x31/0xb0
[  448.091775][T10083]  simple_read_from_buffer+0xe1/0x170
[  448.091809][T10083]  proc_fail_nth_read+0x1be/0x230
[  448.091841][T10083]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  448.091872][T10083]  ? rw_verify_area+0x2ac/0x4e0
[  448.091904][T10083]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  448.091934][T10083]  vfs_read+0x212/0xa80
[  448.091976][T10083]  ? __pfx_vfs_read+0x10/0x10
[  448.092008][T10083]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  448.092032][T10083]  ? lockdep_hardirqs_on+0x7a/0x110
[  448.092054][T10083]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  448.092077][T10083]  ? mutex_lock_nested+0x152/0x1d0
[  448.092122][T10083]  ? fdget_pos+0x252/0x320
[  448.092155][T10083]  ksys_read+0x156/0x270
[  448.092187][T10083]  ? __pfx_ksys_read+0x10/0x10
[  448.092229][T10083]  do_syscall_64+0x14d/0xf80
[  448.092254][T10083]  ? trace_irq_disable+0x3b/0x150
[  448.092281][T10083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.092304][T10083]  ? clear_bhb_loop+0x40/0x90
[  448.092331][T10083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.092352][T10083] RIP: 0033:0x7fcd2c71d04e
[  448.092373][T10083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  448.092392][T10083] RSP: 002b:00007fcd2a9b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  448.092415][T10083] RAX: ffffffffffffffda RBX: 00007fcd2a9b66c0 RCX: 00007fcd2c71d04e
[  448.092429][T10083] RDX: 000000000000000f RSI: 00007fcd2a9b60a0 RDI: 0000000000000005
[  448.092442][T10083] RBP: 00007fcd2a9b6090 R08: 0000000000000000 R09: 0000000000000000
[  448.092461][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.092474][T10083] R13: 00007fcd2c9d6038 R14: 00007fcd2c9d5fa0 R15: 00007ffcb5ee2a78
[  448.092508][T10083]  </TASK>
[  448.100784][ T5860] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.105374][ T5860] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.105920][ T5860] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.106478][ T5860] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.351017][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'.
[  448.558812][T10100] FAULT_INJECTION: forcing a failure.
[  448.558812][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.558838][T10100] CPU: 1 UID: 0 PID: 10100 Comm: syz.2.1438 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  448.558856][T10100] Tainted: [L]=SOFTLOCKUP
[  448.558861][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  448.558870][T10100] Call Trace:
[  448.558875][T10100]  <TASK>
[  448.558880][T10100]  dump_stack_lvl+0xe8/0x150
[  448.558903][T10100]  should_fail_ex+0x46b/0x600
[  448.558924][T10100]  _copy_from_user+0x2d/0xb0
[  448.558937][T10100]  bpf_ctx_init+0x13a/0x1c0
[  448.558957][T10100]  bpf_prog_test_run_skb+0x2ba/0x1c90
[  448.558981][T10100]  ? __fget_files+0x2a/0x420
[  448.558997][T10100]  ? __fget_files+0x3a6/0x420
[  448.559011][T10100]  ? __fget_files+0x2a/0x420
[  448.559039][T10100]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  448.559057][T10100]  bpf_prog_test_run+0x2cd/0x340
[  448.559077][T10100]  __sys_bpf+0x643/0x950
[  448.559093][T10100]  ? __pfx___sys_bpf+0x10/0x10
[  448.559106][T10100]  ? rt_mutex_slowunlock+0x1cb/0x300
[  448.559134][T10100]  ? ksys_write+0x248/0x270
[  448.559154][T10100]  ? __pfx_ksys_write+0x10/0x10
[  448.559176][T10100]  __x64_sys_bpf+0x7c/0x90
[  448.559191][T10100]  do_syscall_64+0x14d/0xf80
[  448.559204][T10100]  ? trace_irq_disable+0x3b/0x150
[  448.559227][T10100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.559248][T10100]  ? clear_bhb_loop+0x40/0x90
[  448.559336][T10100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.559372][T10100] RIP: 0033:0x7f05a9b7c819
[  448.559394][T10100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.559413][T10100] RSP: 002b:00007f05a7dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  448.559438][T10100] RAX: ffffffffffffffda RBX: 00007f05a9df5fa0 RCX: 00007f05a9b7c819
[  448.559454][T10100] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a
[  448.559467][T10100] RBP: 00007f05a7dce090 R08: 0000000000000000 R09: 0000000000000000
[  448.559480][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.559493][T10100] R13: 00007f05a9df6038 R14: 00007f05a9df5fa0 R15: 00007ffe1e578298
[  448.559524][T10100]  </TASK>
[  448.896906][T10110] loop4: detected capacity change from 0 to 7
[  448.917738][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  448.985547][ T5917] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.994797][ T5917] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.995384][ T5917] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.995859][ T5917] Buffer I/O error on dev loop4, logical block 0, async page read
[  448.996401][ T5917] Buffer I/O error on dev loop4, logical block 0, async page read
[  449.708949][ T5786] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  450.056629][ T5786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.056669][ T5786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.056711][ T5786] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  450.056735][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.068820][ T5786] usb 1-1: config 0 descriptor??
[  450.163770][T10131] netlink: 'syz.4.1451': attribute type 1 has an invalid length.
[  450.163815][T10131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.183689][T10132] netlink: 'syz.4.1451': attribute type 1 has an invalid length.
[  450.184305][T10132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.529560][ T5786] hid-led 0003:27B8:01ED.0014: collection stack underflow
[  450.529583][ T5786] hid-led 0003:27B8:01ED.0014: item 0 1 0 12 parsing failed
[  450.541598][ T5786] hid-led 0003:27B8:01ED.0014: probe with driver hid-led failed with error -22
[  451.725800][    T9] usb 1-1: USB disconnect, device number 32
[  452.891763][   T36] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  453.070598][   T36] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  453.070635][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.070656][   T36] usb 2-1: Product: syz
[  453.070675][   T36] usb 2-1: Manufacturer: syz
[  453.070690][   T36] usb 2-1: SerialNumber: syz
[  453.118300][   T36] usb 2-1: config 0 descriptor??
[  453.126529][   T36] hub 2-1:0.0: bad descriptor, ignoring hub
[  453.126573][   T36] hub 2-1:0.0: probe with driver hub failed with error -5
[  453.166612][T10168] overlayfs: failed to clone upperpath
[  453.504947][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.509569][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.573324][T10176] bridge0: port 3(syz_tun) entered blocking state
[  453.578442][T10176] bridge0: port 3(syz_tun) entered disabled state
[  453.579579][T10176] syz_tun: entered allmulticast mode
[  453.596391][T10176] syz_tun: entered promiscuous mode
[  453.624482][T10176] netlink: 'syz.1.1457': attribute type 10 has an invalid length.
[  453.966075][ T5868] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  454.600183][T10174] netlink: 'syz.3.1467': attribute type 3 has an invalid length.
[  454.600212][T10174] netlink: 'syz.3.1467': attribute type 3 has an invalid length.
[  454.600915][T10174] __nla_validate_parse: 3 callbacks suppressed
[  454.600925][T10174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1467'.
[  454.679751][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.680468][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.681197][ T5868] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  454.681875][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.743838][ T5868] usb 1-1: config 0 descriptor??
[  454.918039][T10184] FAULT_INJECTION: forcing a failure.
[  454.918039][T10184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.918079][T10184] CPU: 0 UID: 0 PID: 10184 Comm: syz.2.1469 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  454.918107][T10184] Tainted: [L]=SOFTLOCKUP
[  454.918114][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  454.918125][T10184] Call Trace:
[  454.918133][T10184]  <TASK>
[  454.918143][T10184]  dump_stack_lvl+0xe8/0x150
[  454.918180][T10184]  should_fail_ex+0x46b/0x600
[  454.918216][T10184]  _copy_from_user+0x2d/0xb0
[  454.918239][T10184]  ___sys_sendmsg+0x1c6/0x360
[  454.918281][T10184]  ? __pfx____sys_sendmsg+0x10/0x10
[  454.918342][T10184]  ? __fget_files+0x2a/0x420
[  454.918370][T10184]  ? __fget_files+0x3a6/0x420
[  454.918407][T10184]  __x64_sys_sendmsg+0x1c3/0x2a0
[  454.918435][T10184]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  454.918473][T10184]  ? __pfx_ksys_write+0x10/0x10
[  454.918518][T10184]  do_syscall_64+0x14d/0xf80
[  454.918542][T10184]  ? trace_irq_disable+0x3b/0x150
[  454.918567][T10184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.918588][T10184]  ? clear_bhb_loop+0x40/0x90
[  454.918614][T10184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.918635][T10184] RIP: 0033:0x7f05a9b7c819
[  454.918654][T10184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.918673][T10184] RSP: 002b:00007f05a7dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.918697][T10184] RAX: ffffffffffffffda RBX: 00007f05a9df5fa0 RCX: 00007f05a9b7c819
[  454.918713][T10184] RDX: 0000000000048014 RSI: 0000200000003ac0 RDI: 0000000000000004
[  454.918727][T10184] RBP: 00007f05a7dce090 R08: 0000000000000000 R09: 0000000000000000
[  454.918740][T10184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.918751][T10184] R13: 00007f05a9df6038 R14: 00007f05a9df5fa0 R15: 00007ffe1e578298
[  454.918785][T10184]  </TASK>
[  455.936703][ T5868] hid-led 0003:27B8:01ED.0015: collection stack underflow
[  455.936746][ T5868] hid-led 0003:27B8:01ED.0015: item 0 1 0 12 parsing failed
[  455.944620][ T5868] hid-led 0003:27B8:01ED.0015: probe with driver hid-led failed with error -22
[  456.011045][ T5868] usb 1-1: USB disconnect, device number 33
[  456.049740][   T36] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  456.069553][   T36] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  456.069625][   T36] dib0700: firmware download failed at 7 with -22
[  456.131301][   T36] usb 2-1: USB disconnect, device number 38
[  458.877986][T10223] netlink: 'syz.1.1480': attribute type 3 has an invalid length.
[  458.878015][T10223] netlink: 'syz.1.1480': attribute type 3 has an invalid length.
[  458.879236][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1480'.
[  458.939908][T10219] sctp: [Deprecated]: syz.2.1482 (pid 10219) Use of struct sctp_assoc_value in delayed_ack socket option.
[  458.939908][T10219] Use struct sctp_sack_info instead
[  459.608872][ T5810] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  459.776004][ T5810] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  459.776026][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.776038][ T5810] usb 5-1: Product: syz
[  459.776046][ T5810] usb 5-1: Manufacturer: syz
[  459.776061][ T5810] usb 5-1: SerialNumber: syz
[  459.792113][ T5810] usb 5-1: config 0 descriptor??
[  459.822985][ T5810] hub 5-1:0.0: bad descriptor, ignoring hub
[  459.823011][ T5810] hub 5-1:0.0: probe with driver hub failed with error -5
[  460.185024][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.187414][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.244382][T10235] netlink: 'syz.4.1484': attribute type 10 has an invalid length.
[  461.560851][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  461.560905][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  462.774116][ T5810] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  462.788126][ T5810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  462.788174][ T5810] dib0700: firmware download failed at 7 with -22
[  462.825346][ T5810] usb 5-1: USB disconnect, device number 51
[  462.922286][   T36] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  463.100303][   T36] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  463.100339][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.100360][   T36] usb 3-1: Product: syz
[  463.100376][   T36] usb 3-1: Manufacturer: syz
[  463.100391][   T36] usb 3-1: SerialNumber: syz
[  463.150511][   T36] usb 3-1: config 0 descriptor??
[  463.178622][   T36] hub 3-1:0.0: bad descriptor, ignoring hub
[  463.178665][   T36] hub 3-1:0.0: probe with driver hub failed with error -5
[  463.389348][ T5810] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  463.535970][T10260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.539300][T10260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.424427][  T810] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  464.520720][ T5810] usb 1-1: device descriptor read/64, error -71
[  464.682704][  T810] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  464.682739][  T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.682759][  T810] usb 5-1: Product: syz
[  464.682774][  T810] usb 5-1: Manufacturer: syz
[  464.682789][  T810] usb 5-1: SerialNumber: syz
[  464.703580][  T810] usb 5-1: config 0 descriptor??
[  464.732053][  T810] hub 5-1:0.0: bad descriptor, ignoring hub
[  464.732098][  T810] hub 5-1:0.0: probe with driver hub failed with error -5
[  464.774370][ T5810] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  464.916949][ T5810] usb 1-1: device descriptor read/64, error -71
[  465.145028][T10271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.151559][T10271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.576163][T10271] netlink: 'syz.4.1491': attribute type 10 has an invalid length.
[  465.978168][ T5810] usb usb1-port1: attempt power cycle
[  466.518285][   T36] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  466.522504][   T36] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  466.527507][   T36] dib0700: firmware download failed at 7 with -22
[  466.595018][   T36] usb 3-1: USB disconnect, device number 36
[  466.745483][ T5810] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  466.775498][ T5810] usb 1-1: device descriptor read/8, error -71
[  467.259007][  T809] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  467.437567][  T809] usb 2-1: Using ep0 maxpacket: 32
[  467.457911][  T809] usb 2-1: unable to get BOS descriptor or descriptor too short
[  467.459992][  T809] usb 2-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config
[  467.460071][  T809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 17, changing to 8
[  467.460111][  T809] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  467.511216][  T809] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[  467.511250][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.511272][  T809] usb 2-1: Product: 
[  467.511287][  T809] usb 2-1: Manufacturer: 涿뿞ᏼ挜ᛉ﮲仺羋⌱㝛⾒⫒唲얍傗ᓺ
[  467.511306][  T809] usb 2-1: SerialNumber: ՜淇㪀஋뉄ᶛ毩ﻋ혱뿹멫漁嫨崦篬봚仄钆쿼첵ꢀ䋺깵Ⲋ枸簈꽝簯厚裄뙙耈㶙Ꙧ沩笏᳗⪽趏ￒ΂׊膚栫レႳ뛍﬩韛쮾킁ც逊黪扴⪏ᯡ㺒◆줜儹篆첚뚱䘨遘㥓嘷뷰嬁藫恎㉔㾇ᴪ۬覎
[  467.727158][  T810] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  467.740927][  T810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  467.740977][  T810] dib0700: firmware download failed at 7 with -22
[  467.818105][  T810] usb 5-1: USB disconnect, device number 52
[  467.874159][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.882094][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.505691][  T809] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  468.505757][  T809] usb 2-1: MIDIStreaming interface descriptor not found
[  468.647895][  T809] usb 2-1: USB disconnect, device number 39
[  468.796563][T10294] comedi comedi0: Minor 2147483647 is invalid!
[  469.385165][ T7621] udevd[7621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  469.667253][T10303] netlink: 'syz.1.1505': attribute type 8 has an invalid length.
[  469.854187][ T5868] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  470.018867][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  470.018897][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.018919][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  470.018947][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  470.018970][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  470.021297][ T5868] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  470.021326][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.021347][ T5868] usb 5-1: Product: syz
[  470.021362][ T5868] usb 5-1: Manufacturer: syz
[  470.021377][ T5868] usb 5-1: SerialNumber: syz
[  470.025755][ T5868] usb 5-1: config 0 descriptor??
[  470.027901][T10299] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  470.061060][  T809] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  470.159120][ T5868] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27
[  470.222510][  T809] usb 2-1: device descriptor read/64, error -71
[  470.528638][  T809] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  470.938403][  T809] usb 2-1: device descriptor read/64, error -71
[  471.090401][  T809] usb usb2-port1: attempt power cycle
[  471.430165][ T5868] usb 5-1: USB disconnect, device number 53
[  471.489811][  T809] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  471.512369][  T809] usb 2-1: device descriptor read/8, error -71
[  471.814862][  T809] usb 2-1: new low-speed USB device number 43 using dummy_hcd
[  471.885264][  T809] usb 2-1: device descriptor read/8, error -71
[  472.005027][  T809] usb usb2-port1: unable to enumerate USB device
[  472.551803][T10342] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1520'.
[  472.632447][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'.
[  472.632477][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1519'.
[  472.632494][T10345] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1519'.
[  473.087023][  T992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  473.110408][T10347] FAULT_INJECTION: forcing a failure.
[  473.110408][T10347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.110435][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.2.1521 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  473.110453][T10347] Tainted: [L]=SOFTLOCKUP
[  473.110457][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  473.110465][T10347] Call Trace:
[  473.110470][T10347]  <TASK>
[  473.110476][T10347]  dump_stack_lvl+0xe8/0x150
[  473.110499][T10347]  should_fail_ex+0x46b/0x600
[  473.110520][T10347]  _copy_from_user+0x2d/0xb0
[  473.110533][T10347]  comedi_unlocked_ioctl+0x603/0x1b00
[  473.110560][T10347]  ? kasan_quarantine_put+0xbb/0x1f0
[  473.110578][T10347]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  473.110602][T10347]  ? do_vfs_ioctl+0x117b/0x1540
[  473.110617][T10347]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  473.110628][T10347]  ? __pfx_smack_log+0x10/0x10
[  473.110645][T10347]  ? smk_access+0x14c/0x4e0
[  473.110666][T10347]  ? smk_tskacc+0x311/0x3a0
[  473.110684][T10347]  ? smack_file_ioctl+0x263/0x360
[  473.110705][T10347]  ? __pfx_smack_file_ioctl+0x10/0x10
[  473.110729][T10347]  ? __fget_files+0x2a/0x420
[  473.110743][T10347]  ? __fget_files+0x3a6/0x420
[  473.110758][T10347]  ? __fget_files+0x2a/0x420
[  473.110775][T10347]  ? bpf_lsm_file_ioctl+0x9/0x20
[  473.110788][T10347]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  473.110807][T10347]  __se_sys_ioctl+0xff/0x170
[  473.110820][T10347]  do_syscall_64+0x14d/0xf80
[  473.110834][T10347]  ? trace_irq_disable+0x3b/0x150
[  473.110848][T10347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.110861][T10347]  ? clear_bhb_loop+0x40/0x90
[  473.110875][T10347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.110887][T10347] RIP: 0033:0x7f05a9b7c819
[  473.110900][T10347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.110911][T10347] RSP: 002b:00007f05a7dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  473.110925][T10347] RAX: ffffffffffffffda RBX: 00007f05a9df5fa0 RCX: 00007f05a9b7c819
[  473.110934][T10347] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[  473.110942][T10347] RBP: 00007f05a7dce090 R08: 0000000000000000 R09: 0000000000000000
[  473.110950][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.110957][T10347] R13: 00007f05a9df6038 R14: 00007f05a9df5fa0 R15: 00007ffe1e578298
[  473.110976][T10347]  </TASK>
[  473.299914][T10350] netlink: 'syz.1.1505': attribute type 21 has an invalid length.
[  473.300027][T10350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1505'.
[  474.382454][T10356] [U] 
[  475.964096][T10379] bond1: entered promiscuous mode
[  475.969910][T10379] netlink: 'syz.1.1532': attribute type 2 has an invalid length.
[  476.650377][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'.
[  476.650410][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1535'.
[  476.650420][T10393] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1535'.
[  477.485538][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'.
[  477.635032][T10410] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1543'.
[  478.411344][  T810] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  478.599652][T10416] comedi comedi0: Minor 2147483647 is invalid!
[  478.643168][  T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.643192][  T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.643217][  T810] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  478.643231][  T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.652350][T10422] netlink: 'syz.3.1547': attribute type 3 has an invalid length.
[  478.652370][T10422] netlink: 'syz.3.1547': attribute type 3 has an invalid length.
[  478.652959][T10422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1547'.
[  478.663043][  T810] usb 3-1: config 0 descriptor??
[  478.971028][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'.
[  479.116931][  T810] hid-led 0003:27B8:01ED.0016: collection stack underflow
[  479.116963][  T810] hid-led 0003:27B8:01ED.0016: item 0 1 0 12 parsing failed
[  479.117681][  T810] hid-led 0003:27B8:01ED.0016: probe with driver hid-led failed with error -22
[  479.747022][ T5868] usb 3-1: USB disconnect, device number 37
[  480.049389][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'.
[  480.430263][T10444] netlink: 'syz.0.1556': attribute type 6 has an invalid length.
[  480.430343][T10444] IPv6: NLM_F_CREATE should be specified when creating new route
[  485.109832][T10498] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  485.224925][  T809] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  485.413830][  T809] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  485.413863][  T809] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  485.413883][  T809] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  485.413903][  T809] usb 5-1: config 220 has no interface number 2
[  485.413979][  T809] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  485.414009][  T809] usb 5-1: config 220 interface 0 has no altsetting 0
[  485.414030][  T809] usb 5-1: config 220 interface 76 has no altsetting 0
[  485.414049][  T809] usb 5-1: config 220 interface 1 has no altsetting 0
[  485.417540][  T809] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  485.417573][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.417595][  T809] usb 5-1: Product: syz
[  485.417610][  T809] usb 5-1: Manufacturer: syz
[  485.417626][  T809] usb 5-1: SerialNumber: syz
[  485.560516][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'.
[  485.560542][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'.
[  485.596844][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'.
[  485.596877][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'.
[  485.596943][ T3509] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  485.600907][ T3509] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  485.600968][ T3509] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  485.601007][ T3509] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  485.778433][  T809] usb 5-1: selecting invalid altsetting 0
[  485.780627][  T809] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  485.780662][  T809] uvcvideo 5-1:220.0: No valid video chain found.
[  485.860134][  T809] usb 5-1: selecting invalid altsetting 0
[  485.860199][  T809] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  485.889696][  T809] usb 5-1: USB disconnect, device number 54
[  486.228387][T10521] netlink: 'syz.2.1586': attribute type 46 has an invalid length.
[  486.432127][T10525] input: syz0 as /devices/virtual/input/input28
[  486.998988][T10543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1595'.
[  487.018379][T10543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1595'.
[  487.747350][ T5786] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  487.796233][ T5786] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  487.965141][ T5810] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  488.134234][ T5810] usb 3-1: unable to read config index 0 descriptor/start: -61
[  488.134276][ T5810] usb 3-1: can't read configurations, error -61
[  488.268429][ T5810] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  488.434547][ T5810] usb 3-1: unable to read config index 0 descriptor/start: -61
[  488.434609][ T5810] usb 3-1: can't read configurations, error -61
[  488.435077][ T5810] usb usb3-port1: attempt power cycle
[  488.603143][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  488.820829][ T5810] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  488.854120][ T5810] usb 3-1: unable to read config index 0 descriptor/start: -61
[  488.854166][ T5810] usb 3-1: can't read configurations, error -61
[  488.994125][ T5810] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  489.022517][ T5810] usb 3-1: unable to read config index 0 descriptor/start: -61
[  489.022560][ T5810] usb 3-1: can't read configurations, error -61
[  489.022978][ T5810] usb usb3-port1: unable to enumerate USB device
[  490.775833][T10643] syzkaller1: entered promiscuous mode
[  490.775853][T10643] syzkaller1: entered allmulticast mode
[  490.846518][ T5810] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  490.988567][ T5810] usb 2-1: device descriptor read/64, error -71
[  491.249857][ T5810] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  491.328230][T10656] input: syz0 as /devices/virtual/input/input29
[  491.353044][ T5868] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  491.388126][ T5810] usb 2-1: device descriptor read/64, error -71
[  491.507471][ T5810] usb usb2-port1: attempt power cycle
[  491.510004][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  491.510070][ T5868] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  491.511226][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  491.511249][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  491.511261][ T5868] usb 3-1: SerialNumber: syz
[  491.537389][ T5868] cdc_ether 3-1:1.0: invalid descriptor buffer length
[  491.537702][ T5868] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  491.555898][T10655] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  491.750281][ T5786] usb 3-1: USB disconnect, device number 42
[  491.800526][   T37] kauditd_printk_skb: 14 callbacks suppressed
[  491.800556][   T37] audit: type=1326 audit(1775892213.493:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10669 comm="syz.0.1648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2c75c819 code=0x0
[  491.897276][ T5810] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  491.919414][ T5810] usb 2-1: device descriptor read/8, error -71
[  492.178732][ T5810] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  492.201340][ T5810] usb 2-1: device descriptor read/8, error -71
[  492.320165][ T5810] usb usb2-port1: unable to enumerate USB device
[  492.715362][T10706] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1661'.
[  492.865479][T10713] input: syz0 as /devices/virtual/input/input30
[  493.266185][ T5810] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  493.397172][T10734] input: syz0 as /devices/virtual/input/input31
[  493.435200][ T5810] usb 5-1: Using ep0 maxpacket: 32
[  493.439113][ T5810] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.439150][ T5810] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.441532][ T5810] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  493.441571][ T5810] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  493.441592][ T5810] usb 5-1: Product: syz
[  493.441607][ T5810] usb 5-1: Manufacturer: syz
[  493.509339][ T5810] hub 5-1:4.0: USB hub found
[  493.779181][ T5810] hub 5-1:4.0: 2 ports detected
[  493.864159][T10739] input: syz0 as /devices/virtual/input/input32
[  494.239950][ T5810] hub 5-1:4.0: set hub depth failed
[  494.336411][ T5810] usb 5-1: USB disconnect, device number 55
[  494.962437][ T5868] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  495.127683][ T5868] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  495.127720][ T5868] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  495.127762][ T5868] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  495.127785][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.135298][T10766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  495.165269][ T5868] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  495.277713][  T809] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  495.516554][  T809] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  495.516619][  T809] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  495.516645][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  495.561496][  T809] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  495.561527][  T809] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  495.561546][  T809] usb 5-1: Product: syz
[  495.561559][  T809] usb 5-1: Manufacturer: syz
[  495.561572][  T809] usb 5-1: SerialNumber: syz
[  495.649088][  T809] usb 5-1: config 0 descriptor??
[  495.731625][  T809] hub 5-1:0.0: bad descriptor, ignoring hub
[  495.731671][  T809] hub 5-1:0.0: probe with driver hub failed with error -5
[  495.965770][  T809] usb 5-1: selecting invalid altsetting 0
[  495.998181][ T5868] usb 3-1: USB disconnect, device number 43
[  496.241943][  T809] usb 5-1: USB disconnect, device number 56
[  496.355381][ T7621] udevd[7621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  496.790071][  T810] kernel read not supported for file /905/net/if_inet6 (pid: 810 comm: kworker/0:2)
[  497.009781][ T5868] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  497.237177][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  497.247092][ T5868] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  497.247124][ T5868] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  497.247147][ T5868] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  497.247168][ T5868] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  497.247187][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  497.247210][ T5868] usb 3-1: config 0 has no interface number 0
[  497.247261][ T5868] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  497.247291][ T5868] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  497.247316][ T5868] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  497.247355][ T5868] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  497.247385][ T5868] usb 3-1: config 0 interface 125 has no altsetting 0
[  497.247404][ T5868] usb 3-1: config 0 interface 125 has no altsetting 2
[  497.256183][ T5868] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  497.256214][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.256233][ T5868] usb 3-1: Product: syz
[  497.256246][ T5868] usb 3-1: Manufacturer: syz
[  497.256259][ T5868] usb 3-1: SerialNumber: syz
[  497.271929][ T5868] usb 3-1: config 0 descriptor??
[  497.437530][ T5868] usb 3-1: selecting invalid altsetting 2
[  498.147103][  T810] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  498.168582][    C1] usb 3-1: async_complete: urb error -71
[  498.172147][ T5868] get_1284_register: usb error -71
[  498.197890][ T5868] usb 3-1: USB disconnect, device number 44
[  498.309627][  T810] usb 2-1: Using ep0 maxpacket: 16
[  498.312627][  T810] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  498.312657][  T810] usb 2-1: config 0 has no interface number 0
[  498.317870][  T810] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  498.317904][  T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.317927][  T810] usb 2-1: Product: syz
[  498.317943][  T810] usb 2-1: Manufacturer: syz
[  498.317959][  T810] usb 2-1: SerialNumber: syz
[  498.383860][  T810] usb 2-1: config 0 descriptor??
[  498.393884][  T810] hub 2-1:0.132: bad descriptor, ignoring hub
[  498.393927][  T810] hub 2-1:0.132: probe with driver hub failed with error -5
[  498.416831][  T810] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input33
[  498.621587][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.622196][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.649914][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.650539][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.877359][ T5810] kernel read not supported for file /943/net/if_inet6 (pid: 5810 comm: kworker/0:4)
[  499.614525][ T5155] usb 2-1: reset high-speed USB device number 48 using dummy_hcd
[  499.624716][ T5918] kernel read not supported for file /927/net/if_inet6 (pid: 5918 comm: kworker/1:6)
[  500.325316][ T5155] usb 2-1: device firmware changed
[  500.340402][  T809] usb 2-1: USB disconnect, device number 48
[  500.547814][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'.
[  500.547844][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1730'.
[  500.547861][T10864] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1730'.
[  500.670868][  T809] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  500.844241][  T809] usb 2-1: Using ep0 maxpacket: 16
[  500.847300][  T809] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.847332][  T809] usb 2-1: config 0 interface 0 has no altsetting 0
[  500.847368][  T809] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  500.848969][  T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.913129][  T809] usb 2-1: config 0 descriptor??
[  500.930196][  T809] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  501.312393][  T809] usb 2-1: USB disconnect, device number 49
[  501.963117][  T810] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  501.986118][T10912] netlink: 'syz.3.1753': attribute type 3 has an invalid length.
[  501.986138][T10912] netlink: 'syz.3.1753': attribute type 3 has an invalid length.
[  501.986817][T10912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1753'.
[  502.122522][ T5810] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  502.124140][  T810] usb 1-1: Using ep0 maxpacket: 8
[  502.131288][  T810] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68
[  502.131320][  T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.131342][  T810] usb 1-1: Product: syz
[  502.131357][  T810] usb 1-1: Manufacturer: syz
[  502.131372][  T810] usb 1-1: SerialNumber: syz
[  502.155736][T10914] bond2: option arp_interval: invalid value (18446744072715211142)
[  502.155763][T10914] bond2: option arp_interval: allowed values 0 - 2147483647
[  502.212274][T10914] bond2 (unregistering): Released all slaves
[  502.292695][ T5810] usb 5-1: unable to get BOS descriptor or descriptor too short
[  502.294620][ T5810] usb 5-1: not running at top speed; connect to a high speed hub
[  502.311557][ T5810] usb 5-1: config 1 has an invalid interface number: 171 but max is 0
[  502.311588][ T5810] usb 5-1: config 1 has no interface number 0
[  502.311637][ T5810] usb 5-1: config 1 interface 171 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64
[  502.311741][ T5810] usb 5-1: config 1 interface 171 has no altsetting 0
[  502.315595][ T5810] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=d0.5e
[  502.315704][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.315726][ T5810] usb 5-1: Product: syz
[  502.315740][ T5810] usb 5-1: Manufacturer: syz
[  502.315753][ T5810] usb 5-1: SerialNumber: syz
[  502.456254][  T810] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71
[  502.470783][  T810] kalmia 1-1:1.0: probe with driver kalmia failed with error -71
[  502.520382][  T810] usb 1-1: USB disconnect, device number 38
[  502.625834][ T5810] rndis_host 5-1:1.171: skipping garbage
[  502.625860][ T5810] usb 5-1: bad CDC descriptors
[  502.627770][ T5810] cdc_acm 5-1:1.171: skipping garbage
[  502.662589][ T5810] usb 5-1: USB disconnect, device number 57
[  502.703191][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'.
[  502.703220][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'.
[  502.703233][T10926] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1757'.
[  502.739796][  T809] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  502.904437][  T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.904469][  T809] usb 2-1: config 0 has no interfaces?
[  502.904500][  T809] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  502.904523][  T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.909548][  T809] usb 2-1: config 0 descriptor??
[  503.415653][   T37] audit: type=1326 audit(1775892224.211:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10936 comm="syz.0.1761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2c75c819 code=0x0
[  503.802303][ T5810] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  503.942142][ T5810] usb 3-1: device descriptor read/64, error -71
[  504.202560][ T5810] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  504.342948][ T5810] usb 3-1: device descriptor read/64, error -71
[  504.462577][ T5810] usb usb3-port1: attempt power cycle
[  504.616649][T10964] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1772'.
[  504.616667][T10964] netlink: 'syz.0.1772': attribute type 2 has an invalid length.
[  504.786963][ T5786] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  504.832384][ T5810] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  504.852609][ T5810] usb 3-1: device descriptor read/8, error -71
[  504.949479][ T5786] usb 5-1: Using ep0 maxpacket: 8
[  504.957440][ T5786] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68
[  504.957462][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.957473][ T5786] usb 5-1: Product: syz
[  504.957482][ T5786] usb 5-1: Manufacturer: syz
[  504.957490][ T5786] usb 5-1: SerialNumber: syz
[  505.048957][T10975] netlink: 'syz.0.1773': attribute type 3 has an invalid length.
[  505.048984][T10975] netlink: 'syz.0.1773': attribute type 3 has an invalid length.
[  505.052286][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1773'.
[  505.161006][ T5810] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  505.179868][ T5810] usb 3-1: device descriptor read/8, error -71
[  505.240020][ T5786] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71
[  505.240224][ T5786] kalmia 5-1:1.0: probe with driver kalmia failed with error -71
[  505.272353][ T5786] usb 5-1: USB disconnect, device number 58
[  505.296494][ T5810] usb usb3-port1: unable to enumerate USB device
[  505.737558][ T5786] usb 2-1: USB disconnect, device number 50
[  505.912758][   T37] audit: type=1326 audit(1775892226.510:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10981 comm="syz.3.1780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0aad1c819 code=0x0
[  506.479267][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'.
[  506.693423][ T5786] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  506.855902][ T5786] usb 5-1: Using ep0 maxpacket: 32
[  506.865846][ T5786] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.865883][ T5786] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  506.877676][ T5810] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  506.912342][ T5786] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  506.912377][ T5786] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  506.912399][ T5786] usb 5-1: Product: syz
[  506.912414][ T5786] usb 5-1: Manufacturer: syz
[  506.949884][  T114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  506.952365][ T5786] hub 5-1:4.0: USB hub found
[  506.975091][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  507.061733][ T5810] usb 2-1: Using ep0 maxpacket: 16
[  507.064966][ T5810] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  507.064997][ T5810] usb 2-1: config 0 has no interface number 0
[  507.068205][ T5810] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  507.068297][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.068319][ T5810] usb 2-1: Product: syz
[  507.068333][ T5810] usb 2-1: Manufacturer: syz
[  507.068348][ T5810] usb 2-1: SerialNumber: syz
[  507.137546][    T9] usb 1-1: Using ep0 maxpacket: 8
[  507.147425][    T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68
[  507.147459][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.147480][    T9] usb 1-1: Product: syz
[  507.147496][    T9] usb 1-1: Manufacturer: syz
[  507.147511][    T9] usb 1-1: SerialNumber: syz
[  507.190367][ T5810] usb 2-1: config 0 descriptor??
[  507.190752][ T5786] hub 5-1:4.0: 2 ports detected
[  507.208676][ T5810] hub 2-1:0.132: bad descriptor, ignoring hub
[  507.208960][ T5810] hub 2-1:0.132: probe with driver hub failed with error -5
[  507.265553][ T5810] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input34
[  507.455135][    T9] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71
[  507.456106][    T9] kalmia 1-1:1.0: probe with driver kalmia failed with error -71
[  507.500018][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.500668][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.559334][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.561750][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.601286][    T9] usb 1-1: USB disconnect, device number 39
[  507.642396][ T5786] hub 5-1:4.0: set hub depth failed
[  507.659496][ T5786] usb 5-1: USB disconnect, device number 59
[  508.253925][ T5868] usb 2-1: USB disconnect, device number 51
[  508.576198][T11045] netlink: 'syz.1.1801': attribute type 10 has an invalid length.
[  508.601622][T11045] 8021q: adding VLAN 0 to HW filter on device team0
[  508.606284][T11045] bond0: (slave team0): Enslaving as an active interface with an up link
[  510.192096][    T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  510.357134][    T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  510.357174][    T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  510.357216][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  510.357241][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.364968][T11062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  510.425748][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  510.986615][ T5868] usb 2-1: USB disconnect, device number 52
[  511.417580][ T5800] syz_tun (unregistering): left allmulticast mode
[  511.417611][ T5800] syz_tun (unregistering): left promiscuous mode
[  511.417733][ T5800] bridge0: port 3(syz_tun) entered disabled state
[  511.600258][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  511.765275][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.765307][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  511.765356][    T9] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  511.765382][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.772341][    T9] usb 3-1: config 0 descriptor??
[  512.733735][ T3509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.733777][ T3509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.992417][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  513.005726][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  513.008081][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  513.014142][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  513.014922][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  513.229738][ T3509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.229778][ T3509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.429336][ T3509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  514.429438][ T3509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.860737][  T810] usb 3-1: USB disconnect, device number 49
[  515.122997][ T3509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  515.123036][ T3509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.307768][ T5811] Bluetooth: hci0: command tx timeout
[  515.933642][ T5868] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  516.130143][ T5868] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  516.130178][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.130200][ T5868] usb 3-1: Product: syz
[  516.130216][ T5868] usb 3-1: Manufacturer: syz
[  516.130232][ T5868] usb 3-1: SerialNumber: syz
[  516.162378][ T5868] usb 3-1: config 0 descriptor??
[  516.172122][ T5868] hub 3-1:0.0: bad descriptor, ignoring hub
[  516.172164][ T5868] hub 3-1:0.0: probe with driver hub failed with error -5
[  516.650297][T11171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.653918][T11171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.849819][T11171] netlink: 'syz.2.1851': attribute type 10 has an invalid length.
[  517.503215][T11108] chnl_net:caif_netlink_parms(): no params data found
[  517.546973][ T5811] Bluetooth: hci0: command tx timeout
[  517.628436][ T3509] bridge_slave_1: left allmulticast mode
[  517.628533][ T3509] bridge_slave_1: left promiscuous mode
[  517.631860][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.729393][ T3509] bridge_slave_0: left allmulticast mode
[  517.729428][ T3509] bridge_slave_0: left promiscuous mode
[  517.759921][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.324696][ T3509] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  519.601988][ T3509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.683530][ T3509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  519.727874][ T3509] bond0 (unregistering): Released all slaves
[  519.800095][ T5811] Bluetooth: hci0: command tx timeout
[  519.914217][ T5868] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  519.916305][ T5868] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  519.916358][ T5868] dib0700: firmware download failed at 7 with -22
[  519.977714][ T5868] usb 3-1: USB disconnect, device number 50
[  520.042190][ T3509] IPVS: stopping master sync thread 6264 ...
[  520.125020][  T809] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  520.344705][  T809] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  520.344747][  T809] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  520.344792][  T809] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  520.344817][  T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.461172][T11209] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  520.468241][  T809] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  520.767493][  T809] usb 2-1: USB disconnect, device number 53
[  522.064046][ T5811] Bluetooth: hci0: command tx timeout
[  522.727976][T11108] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.728199][T11108] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.728469][T11108] bridge_slave_0: entered allmulticast mode
[  522.757136][ T5786] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  522.757922][T11108] bridge_slave_0: entered promiscuous mode
[  522.767195][T11108] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.767351][T11108] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.767552][T11108] bridge_slave_1: entered allmulticast mode
[  522.814780][T11108] bridge_slave_1: entered promiscuous mode
[  522.925252][ T5786] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  522.925291][ T5786] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  522.925317][ T5786] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  522.925330][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.942380][T11278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  522.987837][ T5786] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  523.013729][T11108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.234215][ T5786] usb 2-1: USB disconnect, device number 54
[  523.291621][ T3509] hsr_slave_0: left promiscuous mode
[  523.861170][ T3509] hsr_slave_1: left promiscuous mode
[  523.867704][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.867728][ T3509] batadv0: mtu less than device minimum
[  523.939444][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  523.944205][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  523.991565][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  523.999745][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  524.071122][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  524.075871][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  524.118074][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  524.131524][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  524.194549][ T3509] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  524.319568][   T36] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  524.357710][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.382930][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.468515][  T809] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  524.490356][   T36] usb 3-1: Using ep0 maxpacket: 16
[  524.493951][   T36] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  524.493982][   T36] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  524.494003][   T36] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  524.494024][   T36] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  524.494044][   T36] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  524.494066][   T36] usb 3-1: config 0 has no interface number 0
[  524.494116][   T36] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  524.494145][   T36] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  524.494170][   T36] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  524.494206][   T36] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  524.494235][   T36] usb 3-1: config 0 interface 125 has no altsetting 0
[  524.494255][   T36] usb 3-1: config 0 interface 125 has no altsetting 2
[  524.499057][   T36] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  524.499087][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.499109][   T36] usb 3-1: Product: syz
[  524.499124][   T36] usb 3-1: Manufacturer: syz
[  524.499139][   T36] usb 3-1: SerialNumber: syz
[  524.582287][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.665745][ T3509] batman_adv: batadv0: Interface deactivated: dummy0
[  524.665777][ T3509] batman_adv: batadv0: Removing interface: dummy0
[  524.675226][   T36] usb 3-1: config 0 descriptor??
[  524.694216][  T809] usb 5-1: Using ep0 maxpacket: 16
[  524.714621][  T809] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.714656][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  524.714694][  T809] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  524.714719][  T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.753897][   T36] usb 3-1: selecting invalid altsetting 2
[  524.771845][  T809] usb 5-1: config 0 descriptor??
[  524.789977][  T809] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  524.881756][ T3509] veth1_macvtap: left promiscuous mode
[  524.882087][ T3509] veth0_macvtap: left promiscuous mode
[  524.882374][ T3509] veth1_vlan: left promiscuous mode
[  524.883987][ T3509] veth0_vlan: left promiscuous mode
[  524.935540][    C1] usb 3-1: async_complete: urb error -71
[  524.935657][    C1] usb 3-1: async_complete: urb error -71
[  524.935753][    C1] usb 3-1: async_complete: urb error -71
[  524.935847][    C1] usb 3-1: async_complete: urb error -71
[  524.935988][   T36] get_1284_register: usb error -71
[  524.976466][   T36] usb 3-1: USB disconnect, device number 51
[  525.153043][  T809] usb 5-1: USB disconnect, device number 60
[  525.342322][T11312] sg_write: data in/out 393192/500 bytes for SCSI command 0x0-- guessing data in;
[  525.342322][T11312]    program syz.1.1903 not setting count and/or reply_len properly
[  525.670913][  T810] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  525.838291][  T810] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  525.838323][  T810] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  525.838343][  T810] usb 2-1: config 220 has no interface number 2
[  525.838420][  T810] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  525.838457][  T810] usb 2-1: config 220 interface 0 has no altsetting 0
[  525.838475][  T810] usb 2-1: config 220 interface 76 has no altsetting 0
[  525.838493][  T810] usb 2-1: config 220 interface 1 has no altsetting 0
[  525.842342][  T810] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  525.842374][  T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.842395][  T810] usb 2-1: Product: syz
[  525.842410][  T810] usb 2-1: Manufacturer: syz
[  525.842436][  T810] usb 2-1: SerialNumber: syz
[  525.844274][ T5786] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  526.015353][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.015382][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.015448][ T5786] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  526.015463][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.036417][ T5786] usb 3-1: config 0 descriptor??
[  526.102426][  T810] usb 2-1: selecting invalid altsetting 0
[  526.146578][  T810] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  526.146683][  T810] uvcvideo 2-1:220.0: No valid video chain found.
[  526.160760][  T810] usb 2-1: selecting invalid altsetting 0
[  526.160799][  T810] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  526.186393][  T810] usb 2-1: USB disconnect, device number 55
[  526.422920][ T3509] team0 (unregistering): Port device team_slave_1 removed
[  526.543782][ T5786] hid-led 0003:27B8:01ED.0018: collection stack underflow
[  526.543819][ T5786] hid-led 0003:27B8:01ED.0018: item 0 1 0 12 parsing failed
[  526.544817][ T5786] hid-led 0003:27B8:01ED.0018: probe with driver hid-led failed with error -22
[  526.625102][ T3509] team0 (unregistering): Port device team_slave_0 removed
[  527.074716][ T5786] usb 3-1: USB disconnect, device number 52
[  527.193277][T11108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.398487][T11108] team0: Port device team_slave_0 added
[  527.428140][T11108] team0: Port device team_slave_1 added
[  527.511753][T11108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.511766][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.511781][T11108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.534661][T11108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.534680][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.534706][T11108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.699738][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  527.699952][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  527.807867][T11108] hsr_slave_0: entered promiscuous mode
[  527.808891][T11108] hsr_slave_1: entered promiscuous mode
[  528.933930][ T5786] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  529.094880][ T5786] usb 5-1: device descriptor read/64, error -71
[  529.301837][T11108] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  529.355323][ T5786] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  529.382474][T11108] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  529.458824][T11108] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  529.527297][ T5786] usb 5-1: device descriptor read/64, error -71
[  529.544693][T11108] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  529.649248][ T5786] usb usb5-port1: attempt power cycle
[  529.711364][  T810] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  529.817779][T11108] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.850495][T11108] 8021q: adding VLAN 0 to HW filter on device team0
[  529.882616][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.889455][  T810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.889509][  T810] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  529.889551][  T810] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  529.889573][  T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.900679][  T810] usb 2-1: config 0 descriptor??
[  529.941977][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  529.958170][  T810] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  529.987209][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.990993][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.014516][ T5786] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  530.058999][ T5786] usb 5-1: device descriptor read/8, error -71
[  530.317834][ T5786] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  530.343946][ T5786] usb 5-1: device descriptor read/8, error -71
[  530.467392][ T5786] usb usb5-port1: unable to enumerate USB device
[  530.731262][T11108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.490277][T11108] veth0_vlan: entered promiscuous mode
[  531.514930][T11457] fuse: Bad value for 'fd'
[  531.544475][T11108] veth1_vlan: entered promiscuous mode
[  531.716794][T11108] veth0_macvtap: entered promiscuous mode
[  531.745832][T11108] veth1_macvtap: entered promiscuous mode
[  531.800722][T11108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.847857][T11108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.878219][ T3561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.878470][ T3561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.878512][ T3561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.878549][ T3561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.357665][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.357689][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.461007][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.461031][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.824338][ T5918] usb 2-1: USB disconnect, device number 56
[  533.047432][  T810] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  533.241250][T11502] fuse: Bad value for 'fd'
[  533.274899][  T810] usb 6-1: Using ep0 maxpacket: 32
[  533.280721][  T810] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.280758][  T810] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.282658][  T810] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  533.282687][  T810] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  533.282710][  T810] usb 6-1: Product: syz
[  533.282725][  T810] usb 6-1: Manufacturer: syz
[  533.321749][  T810] hub 6-1:4.0: USB hub found
[  533.586029][  T810] hub 6-1:4.0: 2 ports detected
[  534.047032][  T810] hub 6-1:4.0: set hub depth failed
[  534.072579][  T810] usb 6-1: USB disconnect, device number 2
[  535.912710][T11560] netlink: 'syz.4.1974': attribute type 10 has an invalid length.
[  535.963837][T11560] 8021q: adding VLAN 0 to HW filter on device team0
[  537.553582][  T809] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  537.705086][  T809] usb 2-1: device descriptor read/64, error -71
[  537.947894][ T5918] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  538.008428][  T809] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  538.143413][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  538.143435][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.143447][ T5918] usb 3-1: Product: syz
[  538.143456][ T5918] usb 3-1: Manufacturer: syz
[  538.143464][ T5918] usb 3-1: SerialNumber: syz
[  538.170798][  T809] usb 2-1: device descriptor read/64, error -71
[  538.290801][  T809] usb usb2-port1: attempt power cycle
[  538.437632][ T5918] net_ratelimit: 30 callbacks suppressed
[  538.437662][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  538.437721][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  538.437742][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  538.487106][ T5918] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  538.516855][ T5918] usb 3-1: USB disconnect, device number 53
[  538.642857][   T37] audit: type=1326 audit(1775892256.735:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11607 comm="syz.5.1991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61f29ec819 code=0x0
[  538.673193][  T809] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  538.691812][  T809] usb 2-1: device descriptor read/8, error -71
[  538.950874][  T809] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  538.973228][  T809] usb 2-1: device descriptor read/8, error -71
[  539.092261][  T809] usb usb2-port1: unable to enumerate USB device
[  539.893300][  T810] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  540.058855][  T810] usb 6-1: Using ep0 maxpacket: 32
[  540.061015][  T810] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.061050][  T810] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.063091][  T810] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  540.063124][  T810] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  540.063137][  T810] usb 6-1: Product: syz
[  540.063146][  T810] usb 6-1: Manufacturer: syz
[  540.126147][  T810] hub 6-1:4.0: USB hub found
[  540.354591][  T810] hub 6-1:4.0: 2 ports detected
[  540.675385][ T1162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  540.797117][  T810] hub 6-1:4.0: set hub depth failed
[  540.835619][  T810] usb 6-1: USB disconnect, device number 3
[  540.900484][  T809] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  540.908396][T11645] netlink: 'syz.3.2005': attribute type 3 has an invalid length.
[  540.908414][T11645] netlink: 'syz.3.2005': attribute type 3 has an invalid length.
[  540.909044][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2005'.
[  541.066033][  T809] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  541.066067][  T809] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  541.066089][  T809] usb 2-1: config 220 has no interface number 2
[  541.066168][  T809] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  541.066198][  T809] usb 2-1: config 220 interface 0 has no altsetting 0
[  541.066217][  T809] usb 2-1: config 220 interface 76 has no altsetting 0
[  541.066237][  T809] usb 2-1: config 220 interface 1 has no altsetting 0
[  541.070419][  T809] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  541.070451][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.070472][  T809] usb 2-1: Product: syz
[  541.070487][  T809] usb 2-1: Manufacturer: syz
[  541.070502][  T809] usb 2-1: SerialNumber: syz
[  541.413757][  T809] usb 2-1: selecting invalid altsetting 0
[  541.414458][  T809] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  541.414490][  T809] uvcvideo 2-1:220.0: No valid video chain found.
[  541.452011][  T809] usb 2-1: selecting invalid altsetting 0
[  541.452057][  T809] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  541.478497][  T809] usb 2-1: USB disconnect, device number 61
[  541.508077][ T5918] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  541.669557][ T5918] usb 3-1: Using ep0 maxpacket: 32
[  541.672257][ T5918] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.672290][ T5918] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.706722][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  541.706755][ T5918] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  541.706777][ T5918] usb 3-1: Product: syz
[  541.706792][ T5918] usb 3-1: Manufacturer: syz
[  541.762808][ T5918] hub 3-1:4.0: USB hub found
[  541.968062][ T5918] hub 3-1:4.0: 2 ports detected
[  542.170295][  T810] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  542.379584][  T810] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  542.379617][  T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.379637][  T810] usb 5-1: Product: syz
[  542.379653][  T810] usb 5-1: Manufacturer: syz
[  542.379668][  T810] usb 5-1: SerialNumber: syz
[  542.399143][  T810] usb 5-1: config 0 descriptor??
[  542.426802][  T810] hub 5-1:0.0: bad descriptor, ignoring hub
[  542.426841][  T810] hub 5-1:0.0: probe with driver hub failed with error -5
[  542.448941][ T5918] hub 3-1:4.0: set hub depth failed
[  542.459911][ T5918] usb 3-1: USB disconnect, device number 54
[  542.784775][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.792146][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.948339][T11681] netlink: 'syz.4.2013': attribute type 10 has an invalid length.
[  544.778388][ T5786] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  545.200953][ T5786] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  545.200989][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.201011][ T5786] usb 3-1: Product: syz
[  545.201026][ T5786] usb 3-1: Manufacturer: syz
[  545.201041][ T5786] usb 3-1: SerialNumber: syz
[  545.389625][ T5786] usb 3-1: config 0 descriptor??
[  545.402305][ T5786] hub 3-1:0.0: bad descriptor, ignoring hub
[  545.402596][ T5786] hub 3-1:0.0: probe with driver hub failed with error -5
[  545.699367][  T810] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  545.846736][  T810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  545.846772][  T810] dib0700: firmware download failed at 7 with -22
[  546.251808][T11697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.252436][T11697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.264604][T11697] netlink: 'syz.2.2020': attribute type 10 has an invalid length.
[  547.136543][  T810] usb 5-1: USB disconnect, device number 65
[  549.132238][ T5786] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  549.135717][ T5786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  549.135766][ T5786] dib0700: firmware download failed at 7 with -22
[  549.230502][ T5786] usb 3-1: USB disconnect, device number 55
[  549.739517][ T5786] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  549.904074][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.904098][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  549.904122][ T5786] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  549.904136][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.943711][ T5786] usb 3-1: config 0 descriptor??
[  550.270257][  T810] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  550.422289][ T5786] hid-led 0003:27B8:01ED.0019: collection stack underflow
[  550.422326][ T5786] hid-led 0003:27B8:01ED.0019: item 0 1 0 12 parsing failed
[  550.423328][ T5786] hid-led 0003:27B8:01ED.0019: probe with driver hid-led failed with error -22
[  550.483057][  T810] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  550.483079][  T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.483090][  T810] usb 2-1: Product: syz
[  550.483098][  T810] usb 2-1: Manufacturer: syz
[  550.483107][  T810] usb 2-1: SerialNumber: syz
[  550.500545][  T810] usb 2-1: config 0 descriptor??
[  550.524968][  T810] hub 2-1:0.0: bad descriptor, ignoring hub
[  550.524995][  T810] hub 2-1:0.0: probe with driver hub failed with error -5
[  550.911667][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.915477][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.116281][T11731] netlink: 'syz.1.2027': attribute type 10 has an invalid length.
[  552.409641][ T5868] usb 3-1: USB disconnect, device number 56
[  553.238023][ T5868] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  554.048440][ T5868] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  554.048526][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  554.462288][  T810] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  554.504570][ T5868] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  554.504606][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  554.504628][ T5868] usb 5-1: Product: syz
[  554.504642][ T5868] usb 5-1: Manufacturer: syz
[  554.504656][ T5868] usb 5-1: SerialNumber: syz
[  554.510455][  T810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  554.516504][  T810] dib0700: firmware download failed at 7 with -22
[  554.565587][  T810] usb 2-1: USB disconnect, device number 62
[  554.784426][ T5868] usb 5-1: config 0 descriptor??
[  554.792823][ T5868] hub 5-1:0.0: bad descriptor, ignoring hub
[  554.792866][ T5868] hub 5-1:0.0: probe with driver hub failed with error -5
[  554.900504][ T5868] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  555.066873][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  555.154416][   T37] audit: type=1326 audit(1775892271.968:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11760 comm="syz.3.2037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0aad1c819 code=0x0
[  555.177922][  T810] usb 5-1: USB disconnect, device number 66
[  555.242056][ T5887] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  555.417347][ T5887] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  555.417381][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.417403][ T5887] usb 3-1: Product: syz
[  555.417418][ T5887] usb 3-1: Manufacturer: syz
[  555.417432][ T5887] usb 3-1: SerialNumber: syz
[  555.439488][ T5887] usb 3-1: config 0 descriptor??
[  555.464456][ T5887] hub 3-1:0.0: bad descriptor, ignoring hub
[  555.464500][ T5887] hub 3-1:0.0: probe with driver hub failed with error -5
[  555.740606][T11780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.741034][T11780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.751011][T11780] netlink: 'syz.2.2036': attribute type 10 has an invalid length.
[  557.300567][ T5868] kernel read not supported for file /1082/net/if_inet6 (pid: 5868 comm: kworker/1:4)
[  557.924517][T11805] 8021q: adding VLAN 0 to HW filter on device bond1
[  558.641364][T11815] binder: BINDER_SET_CONTEXT_MGR already set
[  558.641408][T11815] binder: 11802:11815 ioctl 4018620d 200000000040 returned -16
[  559.549072][ T5887] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  559.551908][ T5887] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  559.551963][ T5887] dib0700: firmware download failed at 7 with -22
[  559.652291][ T5887] usb 3-1: USB disconnect, device number 57
[  559.913558][  T809] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  559.997683][T11830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2055'.
[  560.077667][  T809] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  560.077701][  T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.077763][  T809] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  560.077791][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  560.093458][  T809] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  560.093488][  T809] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  560.093507][  T809] usb 5-1: Product: syz
[  560.093521][  T809] usb 5-1: Manufacturer: syz
[  560.093534][  T809] usb 5-1: SerialNumber: syz
[  560.112287][  T809] usb 5-1: config 0 descriptor??
[  560.150945][  T809] hub 5-1:0.0: bad descriptor, ignoring hub
[  560.150985][  T809] hub 5-1:0.0: probe with driver hub failed with error -5
[  560.391202][  T809] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  560.457581][  T809] usb 5-1: USB disconnect, device number 67
[  560.460347][ T5918] kernel read not supported for file /1053/net/if_inet6 (pid: 5918 comm: kworker/1:6)
[  560.483407][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'.
[  560.587718][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  560.733770][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  560.898593][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.898630][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.898671][ T5918] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  560.898696][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.906239][ T5918] usb 6-1: config 0 descriptor??
[  561.502124][ T5918] hid-led 0003:27B8:01ED.001A: collection stack underflow
[  561.502161][ T5918] hid-led 0003:27B8:01ED.001A: item 0 1 0 12 parsing failed
[  561.508201][ T5918] hid-led 0003:27B8:01ED.001A: probe with driver hid-led failed with error -22
[  562.168744][ T5918] usb 6-1: USB disconnect, device number 4
[  562.634313][   T37] audit: type=1326 audit(1775892278.883:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11880 comm="syz.4.2070" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0aaec819 code=0x0
[  563.517654][ T5868] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  564.269688][ T5868] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  564.269721][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  564.269782][ T5868] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  564.269811][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0
[  564.328652][ T5868] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  564.328687][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  564.328709][ T5868] usb 3-1: Product: syz
[  564.328724][ T5868] usb 3-1: Manufacturer: syz
[  564.328739][ T5868] usb 3-1: SerialNumber: syz
[  564.417196][ T5868] usb 3-1: config 0 descriptor??
[  564.440263][ T5868] hub 3-1:0.0: bad descriptor, ignoring hub
[  564.440312][ T5868] hub 3-1:0.0: probe with driver hub failed with error -5
[  564.675945][ T5868] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  564.744028][ T5868] usb 3-1: USB disconnect, device number 58
[  564.813103][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  565.261512][ T5868] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  565.418811][T11929] FAULT_INJECTION: forcing a failure.
[  565.418811][T11929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  565.418848][T11929] CPU: 1 UID: 0 PID: 11929 Comm: syz.1.2085 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  565.418878][T11929] Tainted: [L]=SOFTLOCKUP
[  565.418886][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  565.418898][T11929] Call Trace:
[  565.418908][T11929]  <TASK>
[  565.418916][T11929]  dump_stack_lvl+0xe8/0x150
[  565.418956][T11929]  should_fail_ex+0x46b/0x600
[  565.418993][T11929]  _copy_to_iter+0x404/0x17d0
[  565.419049][T11929]  ? __pfx__copy_to_iter+0x10/0x10
[  565.419079][T11929]  ? single_next+0xd/0x40
[  565.419100][T11929]  ? single_stop+0x9/0x10
[  565.419118][T11929]  ? traverse+0x544/0x580
[  565.419153][T11929]  seq_read_iter+0x2ea/0xe20
[  565.419185][T11929]  ? __asan_memset+0x22/0x50
[  565.419206][T11929]  seq_read+0x36a/0x490
[  565.419224][T11929]  ? __pfx_seq_read+0x10/0x10
[  565.419240][T11929]  ? __lock_acquire+0x6b5/0x2cf0
[  565.419259][T11929]  ? __pfx_seq_read+0x10/0x10
[  565.419269][T11929]  proc_reg_read+0x1f6/0x2f0
[  565.419286][T11929]  ? __pfx_proc_reg_read+0x10/0x10
[  565.419304][T11929]  vfs_read+0x212/0xa80
[  565.419327][T11929]  ? __pfx_vfs_read+0x10/0x10
[  565.419346][T11929]  ? __fget_files+0x2a/0x420
[  565.419363][T11929]  ? __fget_files+0x2a/0x420
[  565.419378][T11929]  ? __fget_files+0x3a6/0x420
[  565.419392][T11929]  ? __fget_files+0x2a/0x420
[  565.419413][T11929]  __x64_sys_pread64+0x19c/0x230
[  565.419434][T11929]  ? __pfx___x64_sys_pread64+0x10/0x10
[  565.419460][T11929]  do_syscall_64+0x14d/0xf80
[  565.419475][T11929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.419488][T11929]  ? clear_bhb_loop+0x40/0x90
[  565.419503][T11929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.419515][T11929] RIP: 0033:0x7efe7ce8c819
[  565.419528][T11929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.419538][T11929] RSP: 002b:00007efe7b0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  565.419553][T11929] RAX: ffffffffffffffda RBX: 00007efe7d105fa0 RCX: 00007efe7ce8c819
[  565.419562][T11929] RDX: 00000000000000fd RSI: 0000200000002380 RDI: 0000000000000003
[  565.419570][T11929] RBP: 00007efe7b0e6090 R08: 0000000000000000 R09: 0000000000000000
[  565.419577][T11929] R10: 00000000000004eb R11: 0000000000000246 R12: 0000000000000001
[  565.419584][T11929] R13: 00007efe7d106038 R14: 00007efe7d105fa0 R15: 00007fffec4ef7f8
[  565.419604][T11929]  </TASK>
[  565.573059][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.573112][ T5868] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  565.573126][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.725863][ T5868] usb 5-1: config 0 descriptor??
[  565.732785][ T5868] pwc: Askey VC010 type 2 USB webcam detected.
[  565.947268][T11936] netlink: 'syz.3.2088': attribute type 10 has an invalid length.
[  566.182540][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.187444][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.190643][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00
[  566.201630][ T5868] pwc: recv_control_msg error -32 req 02 val 2700
[  566.234147][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00
[  566.235229][ T5868] pwc: recv_control_msg error -32 req 04 val 1000
[  566.249603][ T5868] pwc: recv_control_msg error -32 req 04 val 1300
[  566.250896][ T5868] pwc: recv_control_msg error -32 req 04 val 1400
[  566.252384][ T5868] pwc: recv_control_msg error -32 req 02 val 2000
[  566.253735][ T5868] pwc: recv_control_msg error -32 req 02 val 2100
[  566.473108][ T5868] pwc: recv_control_msg error -71 req 02 val 2500
[  566.473809][ T5868] pwc: recv_control_msg error -71 req 02 val 2400
[  566.474331][ T5868] pwc: recv_control_msg error -71 req 02 val 2600
[  566.495765][ T5868] pwc: recv_control_msg error -71 req 02 val 2900
[  566.503100][ T5868] pwc: recv_control_msg error -71 req 02 val 2800
[  566.503599][ T5868] pwc: recv_control_msg error -71 req 04 val 1100
[  566.504212][ T5868] pwc: recv_control_msg error -71 req 04 val 1200
[  566.548102][ T5868] pwc: Registered as video103.
[  566.577912][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35
[  566.647527][ T5868] usb 5-1: USB disconnect, device number 68
[  567.492817][ T5868] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  567.660809][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short
[  567.661379][ T5868] usb 6-1: not running at top speed; connect to a high speed hub
[  567.662707][ T5868] usb 6-1: config 1 has an invalid interface number: 171 but max is 0
[  567.662734][ T5868] usb 6-1: config 1 has no interface number 0
[  567.662784][ T5868] usb 6-1: config 1 interface 171 has no altsetting 0
[  567.665378][ T5868] usb 6-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=d0.5e
[  567.665404][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.665423][ T5868] usb 6-1: Product: syz
[  567.665432][ T5868] usb 6-1: Manufacturer: syz
[  567.665440][ T5868] usb 6-1: SerialNumber: syz
[  567.796111][ T5918] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  567.974110][ T5868] usb 6-1: bad CDC descriptors
[  567.975478][ T5918] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  567.975510][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.975531][ T5918] usb 2-1: Product: syz
[  567.975546][ T5918] usb 2-1: Manufacturer: syz
[  567.975561][ T5918] usb 2-1: SerialNumber: syz
[  567.979238][ T5868] cdc_acm 6-1:1.171: Zero length descriptor references
[  567.979282][ T5868] cdc_acm 6-1:1.171: probe with driver cdc_acm failed with error -22
[  568.031384][ T5868] usb 6-1: USB disconnect, device number 5
[  568.262774][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  568.262814][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  568.262827][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  568.330282][ T5918] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  568.344644][ T5918] usb 2-1: USB disconnect, device number 63
[  568.489338][ T5887] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  568.659363][ T5887] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  568.659396][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.659446][ T5887] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  568.659475][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0
[  568.664251][ T5887] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  568.664285][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  568.664306][ T5887] usb 5-1: Product: syz
[  568.664321][ T5887] usb 5-1: Manufacturer: syz
[  568.664336][ T5887] usb 5-1: SerialNumber: syz
[  568.740223][ T5887] usb 5-1: config 0 descriptor??
[  568.767243][ T5887] hub 5-1:0.0: bad descriptor, ignoring hub
[  568.767287][ T5887] hub 5-1:0.0: probe with driver hub failed with error -5
[  568.847513][ T5887] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  568.909616][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  569.625852][T11976] FAULT_INJECTION: forcing a failure.
[  569.625852][T11976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.625893][T11976] CPU: 0 UID: 0 PID: 11976 Comm: syz.1.2102 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  569.625924][T11976] Tainted: [L]=SOFTLOCKUP
[  569.625931][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  569.625944][T11976] Call Trace:
[  569.625953][T11976]  <TASK>
[  569.625962][T11976]  dump_stack_lvl+0xe8/0x150
[  569.626002][T11976]  should_fail_ex+0x46b/0x600
[  569.626059][T11976]  _copy_from_user+0x2d/0xb0
[  569.626083][T11976]  video_usercopy+0x36f/0x14b0
[  569.626123][T11976]  ? smk_tskacc+0x311/0x3a0
[  569.626154][T11976]  ? __pfx___video_do_ioctl+0x10/0x10
[  569.626190][T11976]  ? __pfx_video_usercopy+0x10/0x10
[  569.626221][T11976]  ? smack_file_ioctl+0x2c2/0x360
[  569.626271][T11976]  ? __fget_files+0x2a/0x420
[  569.626299][T11976]  ? __fget_files+0x3a6/0x420
[  569.626332][T11976]  v4l2_ioctl+0x190/0x1e0
[  569.626365][T11976]  ? __pfx_v4l2_ioctl+0x10/0x10
[  569.626397][T11976]  __se_sys_ioctl+0xff/0x170
[  569.626424][T11976]  do_syscall_64+0x14d/0xf80
[  569.626467][T11976]  ? trace_irq_disable+0x3b/0x150
[  569.626490][T11976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.626511][T11976]  ? clear_bhb_loop+0x40/0x90
[  569.626537][T11976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.626557][T11976] RIP: 0033:0x7efe7ce8c819
[  569.626577][T11976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.626595][T11976] RSP: 002b:00007efe7b0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  569.626619][T11976] RAX: ffffffffffffffda RBX: 00007efe7d105fa0 RCX: 00007efe7ce8c819
[  569.626635][T11976] RDX: 0000200000000100 RSI: 00000000c0205648 RDI: 0000000000000003
[  569.626651][T11976] RBP: 00007efe7b0e6090 R08: 0000000000000000 R09: 0000000000000000
[  569.626665][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.626678][T11976] R13: 00007efe7d106038 R14: 00007efe7d105fa0 R15: 00007fffec4ef7f8
[  569.626715][T11976]  </TASK>
[  569.670437][  T810] usb 5-1: USB disconnect, device number 69
[  572.552590][T12005] FAULT_INJECTION: forcing a failure.
[  572.552590][T12005] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  572.552630][T12005] CPU: 0 UID: 0 PID: 12005 Comm: syz.1.2111 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  572.552660][T12005] Tainted: [L]=SOFTLOCKUP
[  572.552667][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  572.552681][T12005] Call Trace:
[  572.552689][T12005]  <TASK>
[  572.552698][T12005]  dump_stack_lvl+0xe8/0x150
[  572.552736][T12005]  should_fail_ex+0x46b/0x600
[  572.552773][T12005]  _copy_from_user+0x2d/0xb0
[  572.552797][T12005]  kvm_arch_vcpu_ioctl+0xb64/0x2c70
[  572.552839][T12005]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  572.552869][T12005]  ? unwind_next_frame+0xa5/0x23c0
[  572.552922][T12005]  ? is_bpf_text_address+0x26/0x2b0
[  572.552960][T12005]  ? is_bpf_text_address+0x292/0x2b0
[  572.553001][T12005]  ? is_bpf_text_address+0x26/0x2b0
[  572.553036][T12005]  ? kernel_text_address+0xa5/0xe0
[  572.553064][T12005]  ? __kernel_text_address+0xd/0x30
[  572.553089][T12005]  ? unwind_get_return_address+0x4d/0x90
[  572.553111][T12005]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  572.553148][T12005]  ? arch_stack_walk+0xfb/0x150
[  572.553186][T12005]  ? stack_trace_save+0xa9/0x100
[  572.553216][T12005]  ? __pfx_stack_trace_save+0x10/0x10
[  572.553243][T12005]  ? kasan_save_free_info+0x46/0x50
[  572.553276][T12005]  ? stack_depot_save_flags+0x33/0x810
[  572.553308][T12005]  ? vsnprintf+0xee0/0xee0
[  572.553343][T12005]  ? kasan_save_track+0x4f/0x80
[  572.553372][T12005]  ? kasan_save_track+0x3e/0x80
[  572.553400][T12005]  ? kasan_save_free_info+0x46/0x50
[  572.553425][T12005]  ? __kasan_slab_free+0x5c/0x80
[  572.553456][T12005]  ? kfree+0x1c1/0x6c0
[  572.553485][T12005]  ? tomoyo_path_number_perm+0x501/0x630
[  572.553508][T12005]  ? security_file_ioctl+0xc3/0x2a0
[  572.553530][T12005]  ? __se_sys_ioctl+0x47/0x170
[  572.553550][T12005]  ? do_syscall_64+0x14d/0xf80
[  572.553574][T12005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.553627][T12005]  ? __lock_acquire+0x6b5/0x2cf0
[  572.553670][T12005]  ? kasan_quarantine_put+0xbb/0x1f0
[  572.553720][T12005]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  572.553747][T12005]  ? lockdep_hardirqs_on+0x7a/0x110
[  572.553772][T12005]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  572.553799][T12005]  ? _mutex_lock_killable+0x152/0x1d0
[  572.553831][T12005]  ? kvm_vcpu_ioctl+0x283/0xfe0
[  572.553860][T12005]  kvm_vcpu_ioctl+0x7e7/0xfe0
[  572.553893][T12005]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  572.553923][T12005]  ? __asan_memset+0x22/0x50
[  572.553952][T12005]  ? smack_file_ioctl+0x331/0x360
[  572.554021][T12005]  ? __pfx_smack_file_ioctl+0x10/0x10
[  572.554070][T12005]  ? __fget_files+0x2a/0x420
[  572.554097][T12005]  ? __fget_files+0x3a6/0x420
[  572.554125][T12005]  ? __fget_files+0x2a/0x420
[  572.554158][T12005]  ? bpf_lsm_file_ioctl+0x9/0x20
[  572.554182][T12005]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  572.554206][T12005]  __se_sys_ioctl+0xff/0x170
[  572.554232][T12005]  do_syscall_64+0x14d/0xf80
[  572.554257][T12005]  ? trace_irq_disable+0x3b/0x150
[  572.554283][T12005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.554305][T12005]  ? clear_bhb_loop+0x40/0x90
[  572.554334][T12005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.554357][T12005] RIP: 0033:0x7efe7ce8c819
[  572.554378][T12005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.554398][T12005] RSP: 002b:00007efe7b0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  572.554422][T12005] RAX: ffffffffffffffda RBX: 00007efe7d105fa0 RCX: 00007efe7ce8c819
[  572.554438][T12005] RDX: 0000200000000100 RSI: 000000004008ae90 RDI: 0000000000000005
[  572.554452][T12005] RBP: 00007efe7b0e6090 R08: 0000000000000000 R09: 0000000000000000
[  572.554466][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.554479][T12005] R13: 00007efe7d106038 R14: 00007efe7d105fa0 R15: 00007fffec4ef7f8
[  572.554517][T12005]  </TASK>
[  573.601515][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'.
[  573.601536][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2120'.
[  573.601547][T12027] netlink: 540 bytes leftover after parsing attributes in process `syz.3.2120'.
[  573.699429][    T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  573.864367][    T9] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  573.864406][    T9] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  573.864422][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  573.866590][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  573.866609][    T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  573.866621][    T9] usb 2-1: Product: syz
[  573.866629][    T9] usb 2-1: Manufacturer: syz
[  573.866638][    T9] usb 2-1: SerialNumber: syz
[  573.900636][    T9] usb 2-1: config 0 descriptor??
[  573.912451][    T9] hub 2-1:0.0: bad descriptor, ignoring hub
[  573.912489][    T9] hub 2-1:0.0: probe with driver hub failed with error -5
[  574.115436][    T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  574.159782][    T9] usb 2-1: USB disconnect, device number 64
[  574.189319][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  574.278602][ T3584] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  574.711914][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2126'.
[  574.752075][T12045] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2125'.
[  574.752103][T12045] netlink: 'syz.2.2125': attribute type 2 has an invalid length.
[  575.703337][  T810] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  575.844889][  T810] usb 5-1: device descriptor read/64, error -71
[  576.104157][  T810] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  576.201574][    T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  576.246695][  T810] usb 5-1: device descriptor read/64, error -71
[  576.372206][  T810] usb usb5-port1: attempt power cycle
[  576.375034][    T9] usb 2-1: Using ep0 maxpacket: 16
[  576.377946][    T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  576.377972][    T9] usb 2-1: config 0 has no interface number 0
[  576.392099][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  576.392129][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.392147][    T9] usb 2-1: Product: syz
[  576.392161][    T9] usb 2-1: Manufacturer: syz
[  576.392174][    T9] usb 2-1: SerialNumber: syz
[  576.405186][    T9] usb 2-1: config 0 descriptor??
[  576.409102][    T9] hub 2-1:0.132: bad descriptor, ignoring hub
[  576.409140][    T9] hub 2-1:0.132: probe with driver hub failed with error -5
[  576.455865][    T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input37
[  576.643639][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.643989][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.666996][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.681495][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.733439][  T810] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  576.754123][ T5918] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  576.758354][  T810] usb 5-1: device descriptor read/8, error -71
[  576.929369][ T5918] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  576.929432][ T5918] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  576.929463][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0
[  576.932080][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  576.932109][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  576.932131][ T5918] usb 3-1: Product: syz
[  576.932146][ T5918] usb 3-1: Manufacturer: syz
[  576.932162][ T5918] usb 3-1: SerialNumber: syz
[  577.001524][ T5918] usb 3-1: config 0 descriptor??
[  577.014129][  T810] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  577.021162][ T5918] hub 3-1:0.0: bad descriptor, ignoring hub
[  577.021207][ T5918] hub 3-1:0.0: probe with driver hub failed with error -5
[  577.036347][  T810] usb 5-1: device descriptor read/8, error -71
[  577.155890][  T810] usb usb5-port1: unable to enumerate USB device
[  577.291320][ T5918] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  577.394375][ T5918] usb 3-1: USB disconnect, device number 59
[  577.408353][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  578.167207][ T5811] Bluetooth: hci2: unexpected event for opcode 0x1804
[  578.517258][T12101] FAULT_INJECTION: forcing a failure.
[  578.517258][T12101] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  578.517332][T12101] CPU: 1 UID: 0 PID: 12101 Comm: syz.2.2144 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  578.517365][T12101] Tainted: [L]=SOFTLOCKUP
[  578.517373][T12101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  578.517388][T12101] Call Trace:
[  578.517396][T12101]  <TASK>
[  578.517406][T12101]  dump_stack_lvl+0xe8/0x150
[  578.517445][T12101]  should_fail_ex+0x46b/0x600
[  578.517483][T12101]  prepare_alloc_pages+0x22a/0x6b0
[  578.517518][T12101]  __alloc_frozen_pages_noprof+0x12f/0x380
[  578.517550][T12101]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  578.517581][T12101]  ? __pfx_policy_nodemask+0x10/0x10
[  578.517610][T12101]  ? __pfx___schedule+0x10/0x10
[  578.517640][T12101]  alloc_pages_mpol+0xd1/0x380
[  578.517667][T12101]  ___kmalloc_large_node+0x4e/0x150
[  578.517705][T12101]  __kmalloc_large_node_noprof+0x18/0x90
[  578.517731][T12101]  __kmalloc_noprof+0x4a3/0x7b0
[  578.517752][T12101]  ? hci_alloc_dev_priv+0x28/0x2090
[  578.517783][T12101]  hci_alloc_dev_priv+0x28/0x2090
[  578.517810][T12101]  hci_uart_tty_ioctl+0x3b8/0xa50
[  578.517843][T12101]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  578.517868][T12101]  tty_ioctl+0x9cb/0xde0
[  578.517892][T12101]  ? __pfx_tty_ioctl+0x10/0x10
[  578.517936][T12101]  __se_sys_ioctl+0xff/0x170
[  578.517956][T12101]  do_syscall_64+0x14d/0xf80
[  578.517975][T12101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.517992][T12101]  ? clear_bhb_loop+0x40/0x90
[  578.518013][T12101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.518030][T12101] RIP: 0033:0x7f05a9b7c819
[  578.518046][T12101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.518061][T12101] RSP: 002b:00007f05a7d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  578.518080][T12101] RAX: ffffffffffffffda RBX: 00007f05a9df6180 RCX: 00007f05a9b7c819
[  578.518093][T12101] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000005
[  578.518104][T12101] RBP: 00007f05a7d8c090 R08: 0000000000000000 R09: 0000000000000000
[  578.518114][T12101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  578.518124][T12101] R13: 00007f05a9df6218 R14: 00007f05a9df6180 R15: 00007ffe1e578298
[  578.518153][T12101]  </TASK>
[  578.518194][T12101] Bluetooth: Can't allocate HCI device
[  580.383094][T12128] netlink: 'syz.3.2153': attribute type 10 has an invalid length.
[  580.439383][T12128] veth0_vlan: left promiscuous mode
[  580.441874][T12128] veth0_vlan: entered promiscuous mode
[  580.447082][T12128] team0: Device veth0_vlan failed to register rx_handler
[  580.644366][ T5155] usb 2-1: reset high-speed USB device number 65 using dummy_hcd
[  580.647844][ T5155] usb 2-1: device reset changed ep0 maxpacket size!
[  580.649265][  T810] usb 2-1: USB disconnect, device number 65
[  582.042119][  T810] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  582.048449][T12154] binder: BINDER_SET_CONTEXT_MGR already set
[  582.048467][T12154] binder: 12153:12154 ioctl 4018620d 2000000002c0 returned -16
[  582.061727][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  582.208337][  T810] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  582.208375][  T810] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  582.208392][  T810] usb 2-1: config 0 interface 0 has no altsetting 0
[  582.210973][  T810] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  582.211529][  T810] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  582.211552][  T810] usb 2-1: Product: syz
[  582.211568][  T810] usb 2-1: Manufacturer: syz
[  582.211581][  T810] usb 2-1: SerialNumber: syz
[  582.231661][  T810] usb 2-1: config 0 descriptor??
[  582.273490][    T9] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  582.273520][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.273539][    T9] usb 6-1: Product: syz
[  582.273552][    T9] usb 6-1: Manufacturer: syz
[  582.273566][    T9] usb 6-1: SerialNumber: syz
[  582.284591][  T810] hub 2-1:0.0: bad descriptor, ignoring hub
[  582.284629][  T810] hub 2-1:0.0: probe with driver hub failed with error -5
[  582.296776][    T9] usb 6-1: config 0 descriptor??
[  582.329103][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  582.329141][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[  582.607301][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.607625][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.614339][T12158] bridge0: port 3(syz_tun) entered blocking state
[  582.614456][T12158] bridge0: port 3(syz_tun) entered disabled state
[  582.614642][T12158] syz_tun: entered allmulticast mode
[  582.617084][T12158] syz_tun: entered promiscuous mode
[  582.617727][T12158] bridge0: port 3(syz_tun) entered blocking state
[  582.617839][T12158] bridge0: port 3(syz_tun) entered forwarding state
[  582.619324][T12158] netlink: 'syz.5.2160': attribute type 10 has an invalid length.
[  582.619579][T12158] bridge0: port 3(syz_tun) entered disabled state
[  582.619805][T12158] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.620549][T12158] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.628124][T12158] bridge0: port 3(syz_tun) entered blocking state
[  582.628280][T12158] bridge0: port 3(syz_tun) entered forwarding state
[  582.628648][T12158] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.628806][T12158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  582.629140][T12158] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.629394][T12158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.633407][T12158] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  582.708555][  T810] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  582.769104][  T810] usb 2-1: USB disconnect, device number 66
[  582.894486][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  583.965560][   T37] audit: type=1326 audit(1775892298.575:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12168 comm="syz.1.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7ce8c819 code=0x7ffc0000
[  583.993490][   T37] audit: type=1326 audit(1775892298.602:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12168 comm="syz.1.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7efe7ce8c819 code=0x7ffc0000
[  583.993648][   T37] audit: type=1326 audit(1775892298.602:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12168 comm="syz.1.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7ce8c819 code=0x7ffc0000
[  584.070731][   T37] audit: type=1326 audit(1775892298.667:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12168 comm="syz.1.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7ce8c819 code=0x7ffc0000
[  584.118861][T12173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2167'.
[  584.137359][   T37] audit: type=1326 audit(1775892298.722:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12168 comm="syz.1.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe7ce8c819 code=0x7ffc0000
[  584.143591][   T37] audit: type=1326 audit(1775892298.732:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12168 comm="syz.1.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7ce8c819 code=0x7ffc0000
[  584.151636][   T37] audit: type=1326 audit(1775892298.741:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12168 comm="syz.1.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7ce8c819 code=0x7ffc0000
[  585.072948][ T5918] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  585.144888][    T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  585.153988][    T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  585.154035][    T9] dib0700: firmware download failed at 7 with -22
[  585.225578][    T9] usb 6-1: USB disconnect, device number 6
[  585.246385][ T5918] usb 2-1: Using ep0 maxpacket: 8
[  585.250334][ T5918] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.250370][ T5918] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  585.250394][ T5918] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  585.250422][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.250457][ T5918] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  585.250482][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.297170][T12193] binder: BINDER_SET_CONTEXT_MGR already set
[  585.297185][T12193] binder: 12192:12193 ioctl 4018620d 2000000002c0 returned -16
[  585.339453][ T5918] usb 2-1: config 0 descriptor??
[  585.647171][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  585.722857][ T5887] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  585.814256][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814297][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814324][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814352][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814379][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814407][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814433][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814460][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814486][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.814513][ T5918] lenovo 0003:17EF:60A4.001B: unknown main item tag 0x0
[  585.823374][    T9] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  585.823400][    T9] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  585.823436][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  585.823457][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.893764][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  585.904816][ T5887] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  585.904846][ T5887] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  585.904865][ T5887] usb 5-1: Manufacturer: syz
[  585.949664][ T5887] usb 5-1: config 0 descriptor??
[  585.973586][ T5918] lenovo 0003:17EF:60A4.001B: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0
[  585.979964][ T5887] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  586.069725][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.070340][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.152539][ T5887] usb 2-1: USB disconnect, device number 67
[  586.198505][    T9] usb 6-1: USB disconnect, device number 7
[  586.422849][ T5918] kernel read not supported for file /1116/net/if_inet6 (pid: 5918 comm: kworker/1:6)
[  587.439261][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2184'.
[  588.333392][   T36] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  588.498359][   T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.498419][   T36] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  588.498482][   T36] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  588.498506][   T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.504029][   T36] usb 6-1: config 0 descriptor??
[  588.579345][   T36] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  588.789749][ T5887] usb 5-1: USB disconnect, device number 74
[  589.087953][T12250] binder: 12248:12250 ioctl c0306201 0 returned -14
[  589.183286][T12255] netlink: 'syz.2.2193': attribute type 11 has an invalid length.
[  589.830998][T12258] afs: Unknown parameter '0x0000000000000007'
[  590.456391][    T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  590.622042][    T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  590.622107][    T9] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  590.622132][    T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  590.622180][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  590.622206][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.796723][T12271] FAULT_INJECTION: forcing a failure.
[  590.796723][T12271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  590.796795][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.1.2199 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  590.796826][T12271] Tainted: [L]=SOFTLOCKUP
[  590.796834][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  590.796847][T12271] Call Trace:
[  590.796856][T12271]  <TASK>
[  590.796866][T12271]  dump_stack_lvl+0xe8/0x150
[  590.796906][T12271]  should_fail_ex+0x46b/0x600
[  590.796944][T12271]  _copy_from_user+0x2d/0xb0
[  590.796968][T12271]  io_sqe_buffers_register+0x2c3/0x7e0
[  590.797017][T12271]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  590.797067][T12271]  io_register_rsrc+0x24d/0x280
[  590.797093][T12271]  ? __pfx_io_register_rsrc+0x10/0x10
[  590.797119][T12271]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  590.797146][T12271]  ? mutex_lock_nested+0x152/0x1d0
[  590.797177][T12271]  ? __se_sys_io_uring_register+0x20b/0x1910
[  590.797216][T12271]  __se_sys_io_uring_register+0xc81/0x1910
[  590.797258][T12271]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  590.797293][T12271]  ? ksys_write+0x248/0x270
[  590.797339][T12271]  ? __pfx_ksys_write+0x10/0x10
[  590.797387][T12271]  do_syscall_64+0x14d/0xf80
[  590.797413][T12271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.797436][T12271]  ? clear_bhb_loop+0x40/0x90
[  590.797478][T12271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.797500][T12271] RIP: 0033:0x7efe7ce8c819
[  590.797521][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.797539][T12271] RSP: 002b:00007efe7b0a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  590.797564][T12271] RAX: ffffffffffffffda RBX: 00007efe7d106180 RCX: 00007efe7ce8c819
[  590.797580][T12271] RDX: 0000200000002280 RSI: 000000000000000f RDI: 0000000000000006
[  590.797594][T12271] RBP: 00007efe7b0a4090 R08: 0000000000000000 R09: 0000000000000000
[  590.797608][T12271] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  590.797622][T12271] R13: 00007efe7d106218 R14: 00007efe7d106180 R15: 00007fffec4ef7f8
[  590.797660][T12271]  </TASK>
[  591.672514][ T5918] usb 6-1: USB disconnect, device number 8
[  591.700556][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  591.775935][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'.
[  591.993057][    T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  592.024800][    T9] usb 5-1: USB disconnect, device number 75
[  592.557102][T12295] binder: 12294:12295 ioctl c0306201 0 returned -14
[  594.244079][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  594.244166][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  594.832473][ T5918] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  595.012792][ T5918] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  595.012815][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.012827][ T5918] usb 2-1: Product: syz
[  595.012835][ T5918] usb 2-1: Manufacturer: syz
[  595.012844][ T5918] usb 2-1: SerialNumber: syz
[  595.016286][ T5918] usb 2-1: config 0 descriptor??
[  595.062167][ T5918] hub 2-1:0.0: bad descriptor, ignoring hub
[  595.062192][ T5918] hub 2-1:0.0: probe with driver hub failed with error -5
[  595.806935][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.807756][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.820867][T12313] netlink: 'syz.1.2210': attribute type 10 has an invalid length.
[  598.272609][T12255] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning:
[  598.272637][T12255] ------------[ cut here ]------------
[  598.272642][T12255] lockdep bfs error:-1
[  598.272649][T12255] WARNING: kernel/locking/lockdep.c:2059 at print_bfs_bug+0x20/0x40, CPU#0: syz.2.2193/12255
[  598.272675][T12255] Modules linked in:
[  598.272689][T12255] CPU: 0 UID: 0 PID: 12255 Comm: syz.2.2193 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  598.272708][T12255] Tainted: [L]=SOFTLOCKUP
[  598.272713][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  598.272720][T12255] RIP: 0010:print_bfs_bug+0x22/0x40
[  598.272734][T12255] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 a7 aa fa 02 89 c5 e8 30 8a ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d b0 0f cd 0d 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 d5 e0 6d 8d e8 f5
[  598.272746][T12255] RSP: 0018:ffffc90003b0ef90 EFLAGS: 00010046
[  598.272756][T12255] RAX: 000000000000003b RBX: 00000000ffffffff RCX: d0b09708318c8300
[  598.272766][T12255] RDX: ffffc9000eb03000 RSI: 00000000ffffffff RDI: ffffffff8f6d9f50
[  598.272775][T12255] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  598.272782][T12255] R10: dffffc0000000000 R11: fffff52000761da1 R12: ffffffff960e0928
[  598.272791][T12255] R13: ffffffff930a5228 R14: ffff88802ebc8000 R15: 0000000000000020
[  598.272800][T12255] FS:  00007f05a7dce6c0(0000) GS:ffff888126332000(0000) knlGS:0000000000000000
[  598.272811][T12255] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  598.272819][T12255] CR2: 0000200000002000 CR3: 00000000292da000 CR4: 00000000003526f0
[  598.272832][T12255] Call Trace:
[  598.272838][T12255]  <TASK>
[  598.272844][T12255]  __lock_acquire+0x2550/0x2cf0
[  598.272858][T12255]  ? lockdep_unlock+0x5d/0xd0
[  598.272874][T12255]  ? __lock_acquire+0x146e/0x2cf0
[  598.272890][T12255]  lock_acquire+0xf0/0x2e0
[  598.272900][T12255]  ? raw_spin_rq_lock_nested+0xb6/0x150
[  598.272918][T12255]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  598.272935][T12255]  _raw_spin_lock_nested+0x32/0x50
[  598.272950][T12255]  ? raw_spin_rq_lock_nested+0xb6/0x150
[  598.272965][T12255]  raw_spin_rq_lock_nested+0xb6/0x150
[  598.272983][T12255]  _task_rq_lock+0xbc/0x470
[  598.273000][T12255]  __schedule+0x16d3/0x5240
[  598.273012][T12255]  ? unwind_get_return_address+0x4d/0x90
[  598.273030][T12255]  ? arch_stack_walk+0xfb/0x150
[  598.273045][T12255]  ? stack_trace_save+0xa9/0x100
[  598.273061][T12255]  ? __pfx_stack_trace_save+0x10/0x10
[  598.273078][T12255]  ? __pfx___schedule+0x10/0x10
[  598.273091][T12255]  ? add_lock_to_list+0xc7/0x100
[  598.273115][T12255]  preempt_schedule_irq+0x4d/0xa0
[  598.273128][T12255]  irqentry_exit+0x599/0x620
[  598.273141][T12255]  ? trace_irq_disable+0x3b/0x150
[  598.273162][T12255]  asm_common_interrupt+0x26/0x40
[  598.273174][T12255] RIP: 0010:lock_acquire+0x20b/0x2e0
[  598.273185][T12255] Code: e9 30 ff ff ff e8 55 1d 84 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 aa ae 10 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d de 63 cd
[  598.273196][T12255] RSP: 0018:ffffc90003b0f540 EFLAGS: 00000292
[  598.273206][T12255] RAX: d0b09708318c8300 RBX: 0000000000000246 RCX: 0000000000000046
[  598.273215][T12255] RDX: 0000000000000006 RSI: ffffffff8d7c20a5 RDI: ffffffff8ba67a80
[  598.273223][T12255] RBP: 0000000000000000 R08: 0000000000000002 R09: ffffffff9597ac68
[  598.273231][T12255] R10: 000000004bd204ac R11: 00000000816509e3 R12: 0000000000000000
[  598.273239][T12255] R13: ffff8880650d0230 R14: 0000000000000000 R15: 0000000000000001
[  598.273253][T12255]  rt_spin_lock+0x83/0x400
[  598.273270][T12255]  ? dev_reset_queue+0x160/0x1f0
[  598.273290][T12255]  ? __pfx_rt_spin_lock+0x10/0x10
[  598.273307][T12255]  ? dev_reset_queue+0xe7/0x1f0
[  598.273324][T12255]  ? __local_bh_disable_ip+0x5b/0x420
[  598.273341][T12255]  ? dev_reset_queue+0xe7/0x1f0
[  598.273358][T12255]  ? dev_reset_queue+0xe7/0x1f0
[  598.273376][T12255]  dev_reset_queue+0x160/0x1f0
[  598.273400][T12255]  dev_deactivate_many+0x71f/0xd40
[  598.273420][T12255]  ? dev_deactivate_many+0x255/0xd40
[  598.273439][T12255]  __dev_close_many+0x17b/0x6d0
[  598.273459][T12255]  ? __pfx___dev_close_many+0x10/0x10
[  598.273480][T12255]  netif_close_many+0x225/0x420
[  598.273497][T12255]  ? rcu_is_watching+0x15/0xb0
[  598.273511][T12255]  ? __pfx_netif_close_many+0x10/0x10
[  598.273528][T12255]  ? rt_mutex_slowlock_block+0x56c/0x680
[  598.273550][T12255]  unregister_netdevice_many_notify+0xb47/0x2360
[  598.273568][T12255]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  598.273584][T12255]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  598.273604][T12255]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  598.273626][T12255]  unregister_netdevice_queue+0x31f/0x360
[  598.273642][T12255]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  598.273657][T12255]  ? ppp_release+0x8a/0x1f0
[  598.273671][T12255]  ppp_release+0xf0/0x1f0
[  598.273682][T12255]  ? __pfx_ppp_release+0x10/0x10
[  598.273694][T12255]  __fput+0x461/0xa90
[  598.273711][T12255]  task_work_run+0x1d9/0x270
[  598.273726][T12255]  ? __pfx_task_work_run+0x10/0x10
[  598.273741][T12255]  ? task_work_add+0x29f/0x440
[  598.273755][T12255]  get_signal+0x11c3/0x1310
[  598.273773][T12255]  ? __fput_deferred+0x253/0x3e0
[  598.273788][T12255]  ? __pfx___fput_deferred+0x10/0x10
[  598.273805][T12255]  arch_do_signal_or_restart+0xbc/0x830
[  598.273821][T12255]  ? __x64_sys_sendmsg+0x275/0x2a0
[  598.273838][T12255]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  598.273858][T12255]  exit_to_user_mode_loop+0x86/0x480
[  598.273876][T12255]  ? rcu_is_watching+0x15/0xb0
[  598.273890][T12255]  do_syscall_64+0x32d/0xf80
[  598.273904][T12255]  ? trace_irq_disable+0x3b/0x150
[  598.273918][T12255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.273930][T12255]  ? clear_bhb_loop+0x40/0x90
[  598.273944][T12255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.273955][T12255] RIP: 0033:0x7f05a9b7c819
[  598.273967][T12255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.273978][T12255] RSP: 002b:00007f05a7dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.273991][T12255] RAX: 0000000000000040 RBX: 00007f05a9df5fa0 RCX: 00007f05a9b7c819
[  598.273998][T12255] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  598.274006][T12255] RBP: 00007f05a9c12c91 R08: 0000000000000000 R09: 0000000000000000
[  598.274013][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  598.274021][T12255] R13: 00007f05a9df6038 R14: 00007f05a9df5fa0 R15: 00007ffe1e578298
[  598.274034][T12255]  </TASK>
[  598.274040][T12255] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  598.274051][T12255] CPU: 0 UID: 0 PID: 12255 Comm: syz.2.2193 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  598.274068][T12255] Tainted: [L]=SOFTLOCKUP
[  598.274072][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  598.274080][T12255] Call Trace:
[  598.274085][T12255]  <TASK>
[  598.274089][T12255]  vpanic+0x56c/0xa60
[  598.274108][T12255]  ? __pfx__printk+0x10/0x10
[  598.274120][T12255]  ? __pfx_vpanic+0x10/0x10
[  598.274137][T12255]  ? is_bpf_text_address+0x292/0x2b0
[  598.274154][T12255]  ? is_bpf_text_address+0x26/0x2b0
[  598.274173][T12255]  panic+0xc5/0xd0
[  598.274190][T12255]  ? __pfx_panic+0x10/0x10
[  598.274212][T12255]  __warn+0x315/0x4f0
[  598.274229][T12255]  ? print_bfs_bug+0x20/0x40
[  598.274242][T12255]  ? print_bfs_bug+0x20/0x40
[  598.274255][T12255]  __report_bug+0x29a/0x540
[  598.274270][T12255]  ? print_bfs_bug+0x20/0x40
[  598.274283][T12255]  ? __pfx___report_bug+0x10/0x10
[  598.274297][T12255]  ? __pfx_vprintk_emit+0x10/0x10
[  598.274312][T12255]  ? kernel_text_address+0xa5/0xe0
[  598.274327][T12255]  report_bug_entry+0x19a/0x290
[  598.274341][T12255]  ? print_bfs_bug+0x22/0x40
[  598.274352][T12255]  ? print_bfs_bug+0x27/0x40
[  598.274364][T12255]  handle_bug+0xce/0x200
[  598.274381][T12255]  exc_invalid_op+0x1a/0x50
[  598.274403][T12255]  asm_exc_invalid_op+0x1a/0x20
[  598.274414][T12255] RIP: 0010:print_bfs_bug+0x22/0x40
[  598.274427][T12255] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 a7 aa fa 02 89 c5 e8 30 8a ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d b0 0f cd 0d 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 d5 e0 6d 8d e8 f5
[  598.274438][T12255] RSP: 0018:ffffc90003b0ef90 EFLAGS: 00010046
[  598.274448][T12255] RAX: 000000000000003b RBX: 00000000ffffffff RCX: d0b09708318c8300
[  598.274457][T12255] RDX: ffffc9000eb03000 RSI: 00000000ffffffff RDI: ffffffff8f6d9f50
[  598.274466][T12255] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  598.274473][T12255] R10: dffffc0000000000 R11: fffff52000761da1 R12: ffffffff960e0928
[  598.274482][T12255] R13: ffffffff930a5228 R14: ffff88802ebc8000 R15: 0000000000000020
[  598.274497][T12255]  __lock_acquire+0x2550/0x2cf0
[  598.274511][T12255]  ? lockdep_unlock+0x5d/0xd0
[  598.274528][T12255]  ? __lock_acquire+0x146e/0x2cf0
[  598.274544][T12255]  lock_acquire+0xf0/0x2e0
[  598.274554][T12255]  ? raw_spin_rq_lock_nested+0xb6/0x150
[  598.274571][T12255]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  598.274589][T12255]  _raw_spin_lock_nested+0x32/0x50
[  598.274602][T12255]  ? raw_spin_rq_lock_nested+0xb6/0x150
[  598.274618][T12255]  raw_spin_rq_lock_nested+0xb6/0x150
[  598.274635][T12255]  _task_rq_lock+0xbc/0x470
[  598.274652][T12255]  __schedule+0x16d3/0x5240
[  598.274664][T12255]  ? unwind_get_return_address+0x4d/0x90
[  598.274676][T12255]  ? arch_stack_walk+0xfb/0x150
[  598.274690][T12255]  ? stack_trace_save+0xa9/0x100
[  598.274706][T12255]  ? __pfx_stack_trace_save+0x10/0x10
[  598.274724][T12255]  ? __pfx___schedule+0x10/0x10
[  598.274736][T12255]  ? add_lock_to_list+0xc7/0x100
[  598.274752][T12255]  preempt_schedule_irq+0x4d/0xa0
[  598.274765][T12255]  irqentry_exit+0x599/0x620
[  598.274778][T12255]  ? trace_irq_disable+0x3b/0x150
[  598.274794][T12255]  asm_common_interrupt+0x26/0x40
[  598.274806][T12255] RIP: 0010:lock_acquire+0x20b/0x2e0
[  598.274817][T12255] Code: e9 30 ff ff ff e8 55 1d 84 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 aa ae 10 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d de 63 cd
[  598.274828][T12255] RSP: 0018:ffffc90003b0f540 EFLAGS: 00000292
[  598.274837][T12255] RAX: d0b09708318c8300 RBX: 0000000000000246 RCX: 0000000000000046
[  598.274845][T12255] RDX: 0000000000000006 RSI: ffffffff8d7c20a5 RDI: ffffffff8ba67a80
[  598.274854][T12255] RBP: 0000000000000000 R08: 0000000000000002 R09: ffffffff9597ac68
[  598.274862][T12255] R10: 000000004bd204ac R11: 00000000816509e3 R12: 0000000000000000
[  598.274870][T12255] R13: ffff8880650d0230 R14: 0000000000000000 R15: 0000000000000001
[  598.274884][T12255]  rt_spin_lock+0x83/0x400
[  598.274901][T12255]  ? dev_reset_queue+0x160/0x1f0
[  598.274920][T12255]  ? __pfx_rt_spin_lock+0x10/0x10
[  598.274937][T12255]  ? dev_reset_queue+0xe7/0x1f0
[  598.274955][T12255]  ? __local_bh_disable_ip+0x5b/0x420
[  598.274971][T12255]  ? dev_reset_queue+0xe7/0x1f0
[  598.274989][T12255]  ? dev_reset_queue+0xe7/0x1f0
[  598.275007][T12255]  dev_reset_queue+0x160/0x1f0
[  598.275025][T12255]  dev_deactivate_many+0x71f/0xd40
[  598.275045][T12255]  ? dev_deactivate_many+0x255/0xd40
[  598.275064][T12255]  __dev_close_many+0x17b/0x6d0
[  598.275083][T12255]  ? __pfx___dev_close_many+0x10/0x10
[  598.275104][T12255]  netif_close_many+0x225/0x420
[  598.275122][T12255]  ? rcu_is_watching+0x15/0xb0
[  598.275136][T12255]  ? __pfx_netif_close_many+0x10/0x10
[  598.275153][T12255]  ? rt_mutex_slowlock_block+0x56c/0x680
[  598.275173][T12255]  unregister_netdevice_many_notify+0xb47/0x2360
[  598.275190][T12255]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  598.275206][T12255]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  598.275223][T12255]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  598.275248][T12255]  unregister_netdevice_queue+0x31f/0x360
[  598.275264][T12255]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  598.275280][T12255]  ? ppp_release+0x8a/0x1f0
[  598.275292][T12255]  ppp_release+0xf0/0x1f0
[  598.275303][T12255]  ? __pfx_ppp_release+0x10/0x10
[  598.275315][T12255]  __fput+0x461/0xa90
[  598.275332][T12255]  task_work_run+0x1d9/0x270
[  598.275347][T12255]  ? __pfx_task_work_run+0x10/0x10
[  598.275361][T12255]  ? task_work_add+0x29f/0x440
[  598.275375][T12255]  get_signal+0x11c3/0x1310
[  598.275456][T12255]  ? __fput_deferred+0x253/0x3e0
[  598.275471][T12255]  ? __pfx___fput_deferred+0x10/0x10
[  598.275489][T12255]  arch_do_signal_or_restart+0xbc/0x830
[  598.275504][T12255]  ? __x64_sys_sendmsg+0x275/0x2a0
[  598.275518][T12255]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  598.275538][T12255]  exit_to_user_mode_loop+0x86/0x480
[  598.275556][T12255]  ? rcu_is_watching+0x15/0xb0
[  598.275570][T12255]  do_syscall_64+0x32d/0xf80
[  598.275583][T12255]  ? trace_irq_disable+0x3b/0x150
[  598.275598][T12255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.275610][T12255]  ? clear_bhb_loop+0x40/0x90
[  598.275629][T12255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.275640][T12255] RIP: 0033:0x7f05a9b7c819
[  598.275650][T12255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.275661][T12255] RSP: 002b:00007f05a7dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.275673][T12255] RAX: 0000000000000040 RBX: 00007f05a9df5fa0 RCX: 00007f05a9b7c819
[  598.275681][T12255] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  598.275689][T12255] RBP: 00007f05a9c12c91 R08: 0000000000000000 R09: 0000000000000000
[  598.275697][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  598.275705][T12255] R13: 00007f05a9df6038 R14: 00007f05a9df5fa0 R15: 00007ffe1e578298
[  598.275719][T12255]  </TASK>
[  598.276123][T12255] Kernel Offset: disabled