last executing test programs:

48.985485369s ago: executing program 1 (id=10397):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x10001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x5}, {0x7, 0x2, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x2, '\x00', 0x2b}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0xa, 0xa, '\x00', 0x1b}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x3, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0xc}, {0x8, 0x5, 0x4, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0xf3}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}})
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000)

48.659534365s ago: executing program 1 (id=10401):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
userfaultfd(0x801)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x9, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x9, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x20000000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x6, 0x25], [0x8009, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffe, 0xb9, 0xce4, 0x1ff, 0x1, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x15, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(r5, 0x4147, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000140)={0x401, 0x7, {<r7=>0x0}, {0xffffffffffffffff}, 0x1, 0x6})
ptrace$ARCH_MAP_VDSO_64(0x1e, r7, 0x4, 0x2003)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0x7, @empty, 0x4002800}}, 0x10, 0x0, 0x1fffc, 0x3, 0x56, 0x0, 0x4}, 0x9c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYBLOB='\"\x00'], 0x8)

46.542365836s ago: executing program 1 (id=10411):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x1900, &(0x7f0000001dc0)={0x0, 0x1, 0x100000}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
unshare(0x20000400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0x4}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x400000, 0x4, 0x6, 0x8, 0x4, 0x1, 0x3e], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0xa, 0x400, 0x5, 0x6, 0x7, 0x10, 0x4, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x7, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x0, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4f0c, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x4, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14b, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c)
socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000040)=ANY=[], 0xfdef)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x40000, 0x8001, 0x7, 0x101, 0x0, [{0x7, 0x4, 0x13, '\x00', 0x2}, {0x7, 0x7, 0x1, '\x00', 0x7}, {0x40, 0x5c, 0x3e, '\x00', 0x1}, {0x22, 0x4, 0x7c, '\x00', 0xe}, {0x6, 0x4, 0x8, '\x00', 0x10}, {0x55, 0x6, 0x9, '\x00', 0x1}, {0x0, 0x4, 0x9, '\x00', 0x9}, {0x7, 0x9b, 0x80, '\x00', 0x1}, {0x40, 0x5, 0x5, '\x00', 0x80}, {0xff, 0xa, 0x3, '\x00', 0x6a}, {0x7, 0x36, 0x81}, {0xfd, 0x3, 0x7f, '\x00', 0x2}, {0xb, 0x81, 0x1, '\x00', 0x2}, {0x6, 0x4, 0x7f, '\x00', 0xd3}, {0x9f, 0xf7, 0xd, '\x00', 0xb}, {0xe8, 0x9, 0x4d, '\x00', 0x9}, {0x0, 0x4, 0x0, '\x00', 0xa}, {0xb, 0x8, 0xff, '\x00', 0xff}, {0x3, 0x2, 0x6, '\x00', 0xe}, {0x6, 0x7, 0x2, '\x00', 0x4}, {0x80, 0x3, 0x0, '\x00', 0x3}, {0x9, 0x2, 0x6, '\x00', 0x7f}, {0x1, 0x2c, 0x8, '\x00', 0x6}, {0x5, 0x80, 0x5, '\x00', 0x4}]}})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x61)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
r10 = syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0)
ioctl$VIDIOC_S_FMT(r10, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x30314742}})

44.697787853s ago: executing program 1 (id=10422):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
unshare(0x2c020400)
open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x1)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000280)={0x40, 0x0, 0x3, "30a988"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x40000)
syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, 'S'}, @main=@item_4={0x3, 0x0, 0x9, "e2d83f12"}]}}, 0x0}, 0x0)

41.472425015s ago: executing program 1 (id=10440):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, {0xa, 0xd4}}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
r3 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0)
quotactl_fd$Q_SYNC(r6, 0xffffffff80000100, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x88, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8800}]}, 0xe0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x204001, 0x3, 0x1}, 0x50)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x64, 0x0, &(0x7f0000000500)=[@request_death, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@fd, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x1}], 0xa4, 0x0, &(0x7f0000000580)="397b05c0f2122368fc60971824091ede2165c9066d9d22d01fc085e3b0c54871da82d4d38738bb1251ef0923dd8da8cf699718b0bf9241975c43d21c0de1159960f1e1aad110ed242d61a0a51eee622edb4993d610327db5eeab7c7600906a157e8c8f84e40fb9ba217a896feeba1fa13b71f11a8b342bbc9e06503a4d6a4aa755e7117c1fb16d20d91a778eced1ad258848dd3f529e676cea6803b2c37cc4d9c0fe62f4"})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x14)

40.8766223s ago: executing program 1 (id=10445):
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x47, 0x1}, 0x7)
mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
munlockall()
r0 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
close(0x3)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001040)={0x1002, 0xff5, 0x5650, 0x2, 0x16, "67f24dbe4dccb676"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r3=>0x0})
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000001c0)=""/107, &(0x7f0000000040)=0x6b)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000380)={0x0, @reserved})
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fddbdf250000000016643d7775045a3ee238f24f19c8", @ANYRES32=0x0, @ANYBLOB="15010000000000001400128009000100766c616e000000000400028020000e004000000000000000001000000000000006a8ffffffffffff0010065a08000a00", @ANYRES32=r3, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0xc0)

39.669645444s ago: executing program 32 (id=10445):
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x47, 0x1}, 0x7)
mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
munlockall()
r0 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
close(0x3)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001040)={0x1002, 0xff5, 0x5650, 0x2, 0x16, "67f24dbe4dccb676"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r3=>0x0})
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000001c0)=""/107, &(0x7f0000000040)=0x6b)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000380)={0x0, @reserved})
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fddbdf250000000016643d7775045a3ee238f24f19c8", @ANYRES32=0x0, @ANYBLOB="15010000000000001400128009000100766c616e000000000400028020000e004000000000000000001000000000000006a8ffffffffffff0010065a08000a00", @ANYRES32=r3, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0xc0)

26.559253037s ago: executing program 3 (id=10493):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010186}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2b4, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_CT={0x94, 0xb, 0x0, 0x1, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3db}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x551}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x128}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_CT={0x1a0, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc78}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}]}, @CTA_NAT_SRC={0xa8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x10}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}]}}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb1c6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x13}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8673}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x199f8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

26.492358947s ago: executing program 3 (id=10494):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100064ec6"})

26.241035652s ago: executing program 3 (id=10495):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) (fail_nth: 15)

25.795355694s ago: executing program 3 (id=10497):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
unshare(0x2c020400)
open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x1)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000280)={0x40, 0x0, 0x3, "30a988"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x40000)
syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, 'S'}, @main=@item_4={0x3, 0x0, 0x9, "e2d83f12"}]}}, 0x0}, 0x0)

23.784485667s ago: executing program 3 (id=10502):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
msgsnd(0xffffffffffffffff, &(0x7f0000000280)={0x2, "3238e8f5ae84047e213b7330676f3938281ddc822468ee164696732b2847e247c86d70abfe8f3e70232898a6e72d8594b6c1ad611a6be5b6aa1c1a3d6fca9e75eb35ff401889e13311b3f3d60dfe6e8a83581074de5776a13e4e2f5f7b088034e08b48ed9a0ba21140be341e07dfeabb2766e59a67c31c69ebe7c2d443e7d4e65bfd"}, 0x86, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)
r11 = openat$iommufd(0xffffff9c, &(0x7f0000000200), 0x80, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x190)
ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000200)={0x8, 0xffffffff, 0x400106bf, 0x6, 0xfffffffe})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r13})
ioctl$IOMMU_IOAS_IOVA_RANGES(r12, 0x3b84, &(0x7f00000000c0)={0x20, r13, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}]})
ioctl$IOMMU_IOAS_UNMAP$ALL(r11, 0x3b86, &(0x7f0000000340)={0x18, r13})

23.685424471s ago: executing program 3 (id=10503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x30}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)

23.456054002s ago: executing program 33 (id=10503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x30}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)

9.816803316s ago: executing program 4 (id=10550):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000000), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa4}, 0x8040)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4f8, 0x3, 0x0, 0x4, 0x1, 0x2, 0x1, 0x850, 0x51})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffd, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000010400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x14}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x4}}], 0x2, 0x0)
close_range(r4, r5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

8.703805887s ago: executing program 4 (id=10553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @empty, <r2=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000500)={'gre0\x00', <r3=>0x0, 0x40, 0x700, 0xfffffffd, 0x1ff, {{0x1f, 0x4, 0x2, 0x7, 0x7c, 0x64, 0x0, 0x59, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x0, 0xa, "0000004da2001400"}, @lsrr={0x83, 0xf, 0x98, [@rand_addr=0x64010101, @multicast1, @multicast1]}, @ssrr={0x89, 0x7, 0x96, [@private=0xa010101]}, @end, @noop, @lsrr={0x83, 0xb, 0x70, [@loopback, @loopback]}, @noop, @lsrr={0x83, 0xb, 0xb5, [@private=0xa010101, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xb9, 0x3, 0xe, [{@broadcast, 0xff}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0x1}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x80}, {@remote, 0x6}]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xd8, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000010}, 0x200c0000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r4=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000200)=[0x800, 0x4])

7.519131646s ago: executing program 0 (id=10558):
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/249, 0xf9}], 0x1}, 0xe}], 0x1, 0x2, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0)=0x6, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = getpgrp(0x0)
r8 = syz_pidfd_open(r7, 0x0)
pidfd_send_signal(r8, 0x19, &(0x7f0000001fc0)={0x19, 0x546d0581, 0xc}, 0x0)
r9 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000))
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r15 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)='.,&\xc5,\xa0^*-\x00', 0xfffffffffffffff8)
prctl$PR_GET_TSC(0x19, &(0x7f00000003c0))
keyctl$update(0x2, r15, &(0x7f0000000340)="ebac5c0fd0266db8ac29aee7842f31ef0ce9b5b3ac5dae05ad3927172089b0858db77365bc5cd85ceb47fb42063114d852219fbf1e153b38556529c990b38bbe58db5180928bb67dad", 0x49)
socket$inet6_udp(0xa, 0x2, 0x0)

7.272008048s ago: executing program 0 (id=10560):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100))
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x5, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x5, 0x6, 0x1, 0x5, 0x101, 0x4000, 0xf7fffffe, 0xffffffffffffffff, 0x0, 0x3, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001080)={0x38, r6, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x8084)

5.909137279s ago: executing program 0 (id=10561):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xfe, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa30acf584ecb5fee496e6866856b76b5ee000000000000012539019363a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x4001}, 0x0) (fail_nth: 4)

5.604072886s ago: executing program 0 (id=10562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x80000000, 0x25dfdbfd, {0xa, 0x80, 0x80}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x20000050)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r3, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r4}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8)
dup2(r3, r4)
fcntl$setown(r4, 0x8, r2)
tkill(r2, 0x13)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14030000020a010100000000000000000000000a140000001100010000000000000000000100000ae2035c2132489c432a1fd414a1c11d43fc78b0c7adc0112ba3fe"], 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x20000040)

5.554780788s ago: executing program 4 (id=10563):
r0 = socket(0x2, 0x3, 0x9)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r3)
truncate(&(0x7f0000000200)='./mnt\x00', 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x7a)
sendmmsg$unix(r5, &(0x7f0000000a80)=[{{&(0x7f00000002c0)=@file={0x1, './mnt\x00'}, 0x6e, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000003c0)="6b89f93fbc474988077020470b34d0c8ab76c9bf8717ffe5857c9daf070365ad0d4e90559e1ae157f1b9394cc591f9ae4ced9b20a74bf55974590eb06485a485edf0606665e9718a6b2f42c680e36d7b7febb02a167a3c666335b8a000cd", 0x5e}, {&(0x7f0000000500)="50f18cf90fd0d94901c546f62efd1bc8ccf77bd5bc107d76dfffb50110d350fb9f0987163744b1252def197ce54d3d3a9821da051b6b669645bb7c44dfa00d20e36276a0e02a9c8bb9c6a02aec0d3de3da6da53fc2a5076dede36e2a291f85c1276a4b49da8b51eb58947a099d71cb4af1b0f7373c9a23fef923d71e9cb40ea847600173544a1774a032291e07bd0c04f172b0911716f3d8c7542da912280be738bab8ce8b9b33b36ad580588a96fd2b84b6a2309af487ce6b7a59c63889e10568756c40946a486d6e4acebe16415c8486cccd85bf5cc82879d2bb26", 0xdc}, {&(0x7f00000001c0)="45c829957fe3e2b42b37bc968b9e", 0xe}, {&(0x7f0000000600)="fc125b701a383d1dfa4139567bd706a3f82efe8a1b42436033ea22cc620a9c90f8caff7665bf837f8627c7e5c2554fc5c156253625b4cc91c2f43c1085292a0a431b7794f002f379d2e0dc83527a149456afbd9aefe67a30a4bfed6b393c5742cf3c43f1f5dca414a5c76f4a7ab16ee828569bf71556791fd353b2b41f0c8a5f2151e60142cfc353409af8d8ce2f43ae6ef52e5bfda8c8d1d565949ff6", 0x9d}, {&(0x7f00000006c0)="6ccabc405c8e1669474b746adf851a9894a342a9b9c811e7bde65eb583b13e47e22a15daa984f343a1c564cc7932c815dabaa78472efc6bf0067ea6aa0a28face13bb1f748fe6dc1b09d48bc14f2f7e981113d036cd735905ce29dbd4d6abee08940e0527f05ec7d020c2b1d3cfc0bfc963ccfa3b9a240ae3d424c6e2743827c6cb8b5158900c7bffde3f125311018ea214d681a58bcb03cb8d2ed59df70a23d61e1fd702c7e28269f7358c2b40a161b6ba98160067b6e22bb9860c0f1cdf9ff4580c637d6564aafe944c0baa56a18a7345b3653c1cf25a5d9eb", 0xda}, {&(0x7f0000000440)="96793adfa42b580892cc581f8954c28770082968a8681d45f4f4f1425917de250b6adccf49fa49c6643f0e8d51aa7440033eab3de36b9c6bf91acf30e87561781c69f50539e305", 0x47}], 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="100000000100000001000000", @ANYRES32=r5, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="182176800000000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3], 0x58, 0xc1}}], 0x2, 0xc0)

5.433883731s ago: executing program 0 (id=10564):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB='\t'], 0x0)

5.42849942s ago: executing program 4 (id=10565):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket(0x1a, 0x800, 0x2000ff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x3fd6, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e1f, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002000, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000340)=0x4)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$unix(r1, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000008c0)="166da1949ba0ee9ee511f385427169498f9565a1c4099287", 0x18}], 0x1, 0x0, 0x0, 0x4040004}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[], 0x10, 0x40000}}], 0x2, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="14"], 0x464}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x88, &(0x7f0000000900)}, 0x10)
r6 = syz_io_uring_setup(0x4523, &(0x7f0000000100)={0x0, 0x9b53, 0x8, 0x1, 0x5}, &(0x7f0000000040), &(0x7f00000001c0))
syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x8, 0x3, 0x374, 0x0, r6}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x110, &(0x7f0000000380)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg1\x00', <r10=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4811)

4.67318069s ago: executing program 6 (id=10570):
r0 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_tables_targets\x00')
read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) (fail_nth: 4)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0)
io_setup(0x2, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0x8d85}}, 0x20}, 0x1, 0x0, 0x0, 0x4c014}, 0x0)

4.125759522s ago: executing program 6 (id=10571):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r2, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = timerfd_create(0x0, 0x0)
timerfd_gettime(r5, &(0x7f0000000200))
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000100fedb1c9ddf25390000000800", @ANYRES32=0x0, @ANYBLOB="10005a800c000480050001005a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x4004)
r9 = syz_genetlink_get_family_id$tipc(0x0, r6)
sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f00000003c0)={0x0, 0xa6, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r10, r11, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r10, 0x5459, 0x0)

4.024633679s ago: executing program 4 (id=10573):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @empty, <r2=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000500)={'gre0\x00', <r3=>0x0, 0x40, 0x700, 0xfffffffd, 0x1ff, {{0x1f, 0x4, 0x2, 0x7, 0x7c, 0x64, 0x0, 0x59, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x0, 0xa, "0000004da2001400"}, @lsrr={0x83, 0xf, 0x98, [@rand_addr=0x64010101, @multicast1, @multicast1]}, @ssrr={0x89, 0x7, 0x96, [@private=0xa010101]}, @end, @noop, @lsrr={0x83, 0xb, 0x70, [@loopback, @loopback]}, @noop, @lsrr={0x83, 0xb, 0xb5, [@private=0xa010101, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xb9, 0x3, 0xe, [{@broadcast, 0xff}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0x1}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x80}, {@remote, 0x6}]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xd8, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000010}, 0x200c0000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r4=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000200)=[0x800, 0x4])

3.844002313s ago: executing program 2 (id=10574):
r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/icmp\x00')
read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) (async, rerun: 32)
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000200)=""/96) (async, rerun: 32)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000000001ffffff00000000", @ANYRES32=0x1, @ANYBLOB="f9ffffff000000000000000000000095e90000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000100"/28], 0x50) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x44402, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffc)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f000000f000/0x4000)=nil, 0x930, 0x0, 0x12, r4, 0x0) (async)
r5 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="fb4149dd033be3ac3bc4a22332fdaa8de0518df242008031d1dfd92f0000000001fff9ffdc9610fbff77521ce30d8f00", 0x0, 0xfcf7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000100000080000400000023490b8e13b29e2cfc94aaabc1f77141791e52af67dc8b6aa6d984e2ca5cebe6fddbdaacf5bb7604bd04cc72dfbdbdccd4fbc442d24b69dc12b0bb3d9517aff04b63655e62f5c53306befcfb664ba07eea1595732025b2aad8eb090016e9283c295897d4724187dec83bb996269c1ad8c8", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x8) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) (rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r9, &(0x7f0000000300), 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r11 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x4661, 0x400, 0x0, 0x8011f}, &(0x7f0000000340)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) (async)
io_uring_enter(r11, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000085) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
socket(0x10, 0x3, 0x3)

3.210810069s ago: executing program 2 (id=10575):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2000}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x20, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800)
sendto$inet(r0, &(0x7f0000002240)='-', 0x1, 0x4004085, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000280)=""/133, 0x85, 0x1, 0x0, 0x0)

2.924935703s ago: executing program 2 (id=10576):
r0 = socket(0x2, 0x3, 0x9)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r3)
truncate(&(0x7f0000000200)='./mnt\x00', 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000a80)=[{{&(0x7f00000002c0)=@file={0x1, './mnt\x00'}, 0x6e, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000003c0)="6b89f93fbc474988077020470b34d0c8ab76c9bf8717ffe5857c9daf070365ad0d4e90559e1ae157f1b9394cc591f9ae4ced9b20a74bf55974590eb06485a485edf0606665e9718a6b2f42c680e36d7b7febb02a167a3c666335b8a000cd", 0x5e}, {&(0x7f0000000500)="50f18cf90fd0d94901c546f62efd1bc8ccf77bd5bc107d76dfffb50110d350fb9f0987163744b1252def197ce54d3d3a9821da051b6b669645bb7c44dfa00d20e36276a0e02a9c8bb9c6a02aec0d3de3da6da53fc2a5076dede36e2a291f85c1276a4b49da8b51eb58947a099d71cb4af1b0f7373c9a23fef923d71e9cb40ea847600173544a1774a032291e07bd0c04f172b0911716f3d8c7542da912280be738bab8ce8b9b33b36ad580588a96fd2b84b6a2309af487ce6b7a59c63889e10568756c40946a486d6e4acebe16415c8486cccd85bf5cc82879d2bb26", 0xdc}, {&(0x7f00000001c0)="45c829957fe3e2b42b37bc968b9e", 0xe}, {&(0x7f0000000600)="fc125b701a383d1dfa4139567bd706a3f82efe8a1b42436033ea22cc620a9c90f8caff7665bf837f8627c7e5c2554fc5c156253625b4cc91c2f43c1085292a0a431b7794f002f379d2e0dc83527a149456afbd9aefe67a30a4bfed6b393c5742cf3c43f1f5dca414a5c76f4a7ab16ee828569bf71556791fd353b2b41f0c8a5f2151e60142cfc353409af8d8ce2f43ae6ef52e5bfda8c8d1d565949ff6", 0x9d}, {&(0x7f00000006c0)="6ccabc405c8e1669474b746adf851a9894a342a9b9c811e7bde65eb583b13e47e22a15daa984f343a1c564cc7932c815dabaa78472efc6bf0067ea6aa0a28face13bb1f748fe6dc1b09d48bc14f2f7e981113d036cd735905ce29dbd4d6abee08940e0527f05ec7d020c2b1d3cfc0bfc963ccfa3b9a240ae3d424c6e2743827c6cb8b5158900c7bffde3f125311018ea214d681a58bcb03cb8d2ed59df70a23d61e1fd702c7e28269f7358c2b40a161b6ba98160067b6e22bb9860c0f1cdf9ff4580c637d6564aafe944c0baa56a18a7345b3653c1cf25a5d9eb", 0xda}, {&(0x7f0000000440)="96793adfa42b580892cc581f8954c28770082968a8681d45f4f4f1425917de250b6adccf49fa49c6643f0e8d51aa7440033eab3de36b9c6bf91acf30e87561781c69f50539e305", 0x47}], 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="100000000100000001000000", @ANYRES32=r4, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="182176800000000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3], 0x58, 0xc1}}], 0x2, 0xc0)

2.83931295s ago: executing program 2 (id=10577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x8000)

2.45489527s ago: executing program 2 (id=10579):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="010425bd7000fedbdf25150000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="30000180080003000200000014000200626f6e645f736c6176655f3100000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="600001800800030000000000080003000000000014000200766c616e3100000000000000000000000800030001000000140002006d6163766c616e3100000000000000001400020064766d7270300000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="1c00018008000100", @ANYRES32=r2, @ANYBLOB="087e7f403cd4af75b9b85f1e", @ANYRES32=0x0, @ANYBLOB="40000180140002006272696467655f736c6176655f310000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f68737200000000"], 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
socket(0x2000000000000021, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r4)
socket$kcm(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
sendmsg$can_raw(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@can={{0x1, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "6ea7dcc626b9d464"}, 0x10}, 0xee}, 0x20004080)

2.310281605s ago: executing program 0 (id=10580):
syz_usb_connect(0x5, 0x105, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x9e, 0xf7, 0x58, 0x10, 0x408, 0x4030, 0x3180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x2, 0x81, 0x9, 0x40, 0x8, [{{0x9, 0x4, 0x9c, 0xd2, 0x1, 0xe, 0x1, 0x0, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x800, 0x7}}], [{{0x9, 0x5, 0x9, 0x1, 0x10, 0xb5, 0x2, 0x3, [@generic={0x4b, 0x6, "2ded2ccdf3081aa17c30269ce7864d70618c9dcc294f318c006ad6a551f025487772ad1aef18ff0cd8e5ae8490d5b41a0f3c1ff393f62f29b905574a224a2b69e31e82e14b2a3bf320"}, @generic={0x69, 0x22, "1a902fb5c6e94dff04fd9bf0337a62d96adad37273e3e30782a59844a7954ac021a8d39f7d49f54478e45ab6f2d177ee433f2a0b1c46f531e0b65a533147f17a2e6a1a787da219b4197ea17a488639891d5a8fd393f5e539b4a258bd31b9cda97339cff7350e59"}]}}]}}, {{0x9, 0x4, 0x75, 0x7f, 0x2, 0xc, 0xe, 0xb9, 0x9, [], [{{0x9, 0x5, 0x4, 0x3, 0x3cf, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x9, 0x8, 0x2}}]}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdf, 0x1b1c, 0xa30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xe0, 0x1, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0x101}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xc, 0x6, 0x4}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xfe, 0x7, 0x0, 0x20, 0x3}, 0x10d, &(0x7f0000000100)={0x5, 0xf, 0x10d, 0x3, [@generic={0x3b, 0x10, 0x2, "13220c9c9d3fcea6e39bda5406bb5538f18dd9fe9c23cd46e1df26ccdc67af95bd1d130851672a0fa6b1ebe347c47aca4cf02528b37486ae"}, @generic={0xc3, 0x10, 0x2, "7bb6e5d397eb5d42ec5ab80bd188367528ff1fb116fc4e5d3a622364a97b977436174a6b3610a705824f7c2ddacedf637ea306a4e9261d28fd46d9617270663f60b119a4e2792c99187e8825cc0c5b984db997efef9b2b49093220456747bda186bc7cd33de98118169c33c083d1be5970878947b0b5aad9e8cb51e99a25a040b3ef29a2f097278271a5c1e1732493dc359be2ff9dff2af25405bc93dca0abc4979b212718e02459785e74428ecbab219adbecaa4ab174d969ab05fa9096cc88"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xe, 0x5, 0xc}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0xd7, &(0x7f0000000300)=@string={0xd7, 0x3, "3c667752a5c9c201a6c8ad11e6ae6f47e51cac64907dd921fcdf71aefdb7c33980efdcc966f55c99d77e62231fdf72b56d26defebcfbae9cf49df442d5a740d8d68c67530b0ea431764b1eb80299d93fe249cbae40b9ccbf228eb264bd8da624e5ee6f7bcb08e2338b35e2ec42dedafdd716424ebf537dbce9d0cfd69fe44f7025a825f4ed784ad56a6bd63dce04eeab7c950a75bdb45043bc6c5bf1b93f2d5d5ce4b7628f0a71ccc189f0b3bcf99c90867175be4bf5cfe630cffcfacb59f916fecad4284a5637a82c350b23fef513b72b37abb934"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0xea, &(0x7f0000000640)=@string={0xea, 0x3, "55d293844a05faa586f92f5db943a8c2e6d4d056806ba0b5566a4fc1ba198e6bfbf44aa38d4267ad8736ecf5dc87fc0ce685cb8a946f51d624b2654b50b55553e2bf70b220e5b5caaed6dd0ed2cafea518a6bcb830168b1ab6ea86b48b4aee1966590a26c237c6fa8d19c6a8b75b5658d571cc9fa6a52a1fe75c1fb5a360dcc69a9a549d37772ff5bf413fc9600beae186095218f7637c194ad5a119fce9e35c4c54441d1c9fb6fb60f074b8fcbc0c4cb6fe09986553b7aa868410b9b7fa9d062a04bbd681194d9dfc545b4a8de48837907d2a1ea94dabf8883e5c2d9c3e12b22db931f990094e40"}}, {0xa7, &(0x7f0000000440)=@string={0xa7, 0x3, "7633e1e24fb46e4eea97ea9856d8fcbb2578845ced181fdec891064f63b4bec49660b5f412667025f6ca9141a720473dde9d20215a175e222b8d3b9043159a732ef3f81600eeda395aca59a6c0a0e0b80cf51c36e5e21d60259acd0b867bd4698b291040b996f054f9874fec02a208ef5acc2d851faa7ce7a415148777e0a70a70c9c346e6d9c5a1f5ed7706af3f6a3d884392bf4cc3716869a6d0e8946d056312a7c1e246"}}, {0xea, &(0x7f0000000740)=@string={0xea, 0x3, "2cd430f03d8124446bd162d2b90e54fc5397acf8c0f86e9e51822b530118ca3bab995432495f3c95e3d91e5114a709842df6a43c1252913a804ff6b3fb904ed86f2bafb819d733096e25fff8f6268c80362d6b2a9e0b773beac97008f04c0dc638103c8fb591ffe7588a0744a1e698c002566e94a600a9d1f41a6662d5d42e0b4e72aa546efdf1f4bd9aac75f67a96c38c1b315bdd41d96f239196186353f212bd0a8c3ee0f46c45f1c3eb2939317103f78fb2e49ed6cbc32053e29f16d331d91b822d4be742ca7b7fe2d43ee1f64e9f0d481c5f5b4c971cb20155762ae887596c7ed7399ac198db"}}, {0x17, &(0x7f0000000840)=@string={0x17, 0x3, "0709a374adf3a51bf13a942a188bd757e0ba3fcb82"}}]})
openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x501100, 0x0)
syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904800000010100000a2401000000020102132406000006000000281ab0cd98e0891ddefba4d1ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000c40)={0x6, @private=0xa010102, 0x4e20, 0x2, 'none\x00', 0x0, 0x8, 0x21}, 0x2c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000c140}, 0x80)

2.309723877s ago: executing program 6 (id=10581):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000000), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa4}, 0x8040)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4f8, 0x3, 0x0, 0x4, 0x1, 0x2, 0x1, 0x850, 0x51})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffd, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000010400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x14}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x4}}], 0x2, 0x0)
close_range(r4, r5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

2.125125512s ago: executing program 2 (id=10582):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x75, 0x5e, 0x75, 0x40, 0x9022, 0xd484, 0xcd35, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x25, 0x7f, 0x36}}]}}]}}, 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x2, 0x3}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0x62, 0x4, 0x10, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1809}}]})

1.627875745s ago: executing program 5 (id=10583):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfff, 0xc6d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x4048080)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x0, 0xb00}, 0x0)

1.459207028s ago: executing program 5 (id=10584):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x272, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x21c, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x188, 0x194, 0x194, 0x188, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0xff000000, 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6, 0x2, 0x4}, 0x0, 0x90, 0xd8, 0x0, {0x0, 0x74020000}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x170, 0x10000, 'pptp\x00', {0x2}}}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x1, 0x0, 0x23}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0xd5, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x278)

1.35736241s ago: executing program 5 (id=10585):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000fe3b142daa2708a30db7a7f3a4000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000008000b4000000000200004801c0001800c00010062697477697365000c0002800800034000000002140000001100010000000000000000000700000a"], 0xb0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x325)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$kcm(0x10, 0x2, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x2c}}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4)
sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001200010027bd70004ec9b97b7dd0b279000400fdffffff040000000000000000"], 0xc}], 0x1, 0x0, 0x0, 0x6}, 0x4000800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
pipe(&(0x7f0000000540))

1.29318139s ago: executing program 6 (id=10586):
r0 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x1)
r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40002, 0x0, 0x4}, 0x18)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='!{{*\x00', &(0x7f0000000080)='./file0\x00', r1)
r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x8200, 0x0)
r3 = fsmount(r2, 0x0, 0x8)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000002, 0x105010, r2, 0x2ba18000)
r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x101000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x14)
ioctl$SCSI_IOCTL_SYNC(r3, 0x4)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000240)={<r5=>0x0, 0x1})
r6 = openat$fb0(0xffffff9c, &(0x7f0000000280), 0x8401, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000002c0)={0x578, 0x384, 0x320, 0x640, 0x9, 0x2, 0x10, 0x0, {0xed45, 0xfffffffc}, {0x4, 0x3}, {0x7f, 0xfffff000, 0x1}, {0x8, 0x1}, 0x2, 0x2, 0x4, 0x3, 0x0, 0xc, 0x101, 0x4, 0x1, 0x8, 0x8, 0xb4e4, 0x20, 0x4, 0x0, 0x3})
setxattr$security_evm(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x0, 0xf, 0xb5, 0xd7, "0a94eeede7d78f2e5d8b93d4414fcfc1fe5b681d2afbd5381964d0ce7df01b032c8f47964211639dac703a0361a4c2654ab1d6dfafcd62e11501931b8e94ff341d57bd8b810889be6f8cc67d74da009170bd40fe2c315f0609a942fc9059ba34f1c8aa26accf821296423a7ee3f8db4289f9925b83e691ba8cad097f7157bd8d1d76ff6317c1fffe7a41fb4740d59f77aee5d3710f6b564d2a7f22e2f4569a36776bbd9529d2163ccc3461e394fb26f77cb8f37ca0a33283cd6d35a631ebe2feb307f8e41dd4bdc060a84ea9ef5a834058cb9b01e9876d"}, 0xe0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000500)={r5})
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000540)=@gcm_128={{0x303}, "1b8b33833df77db3", "5b4f428d44157383c83c490fadc50ca6", "94102cc5", "ac62d2af41b31e30"}, 0x28)
futimesat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)={{0x77359400}, {0x77359400}})
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40044149, &(0x7f0000000600)=0xb)
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x18, &(0x7f0000000640)={0x20, 0x718e9b727cb6518e, 0xaf, {0xaf, 0x22, "acff4980903d42c0547acdc5b36c0b6c8718499e390cd411f09e9fdd66772c414174545cb0f767720469d1555217c1365b38760254e0d45beead2ca103259894dc243bef8cd2889f9fa0d0f71cd37063743d55f0347251d348b5a25e7b0d2b95760dd12158eb8cb6b68e12275348e168bb272009cf2d3dbeb58abe166e106498078de9b4dfd0be47b180cc9eeae4301322eb8f5afa4d389c4d8171624211b7d350f304a4aa616ba6554f27be68"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000740)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x72, 0x4, 0x44, 0x7, "74af4055", "f5906f16"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6d, 0x8, 0x8, 0x0, 0x8, 0x2}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000840)={0x0, 0x0, 0x15, "707b592e41a01d3a4ce234ffa80b0651ad7580ceed"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6b}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x100, 0x40}}, &(0x7f0000000980)={0x40, 0x7, 0x2}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "dff1"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "659c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x6}})
r7 = io_uring_setup(0x6ec9, &(0x7f0000000cc0)={0x0, 0x5195, 0x4000, 0x3, 0x2e2, 0x0, r3})
ftruncate(r7, 0x3)
write$midi(r3, &(0x7f0000000d40)="3bc43bdd2f23cbb8c20c13dc6d7d70e9bde79a2814ac0eef9ccc6f8306134b7c294b2edf0d088bb639db77e1c31002d15e80e55721a51f771bc2b443a30af0cfe1a3c8a43094ad03a7e1c002400466b0caf0e9c23c12b8172aaa5cc891937f0f1fbee7830710b29b4bcd3791c937562f4091d039acf60dbcfa97d12f772a5357218a8427ef9f1ef2c654aa74a0f0f715450245f55ee698876eeb4339c081e1369d1f7d919c1b7d", 0xa7)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0/file0\x00', 0x0, 0x10, r6}, 0x14)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000e80)={0x2, "9fd07a965595628f1caff28cf1367f55a7ddb978ecf2b3f563aaad4486051a999920ba9b3a11483e70895827dfdde8fdda80d2ce983c885c1384211b339b5697", {0x6, 0x800}})
cachestat(r8, &(0x7f0000000f40)={0xae0, 0x7fffffff}, &(0x7f0000000f80), 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000fc0), 0x8a200, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000001000)=0x6dc, 0x4)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000001040)={0x58000, 0x10000})

934.247157ms ago: executing program 4 (id=10587):
socket$inet_tcp(0x2, 0x1, 0x0)
openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x2a8, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x5d8, 0x2a4, 0x0, 0x148, 0x0, 0x148, 0x544, 0x240, 0x240, 0x544, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x284, 0x2a4, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x9, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xbb04, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x634)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000690000/0x2000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000240)})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x200141, 0x20, 0x4}, 0x18)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
socket(0x1e, 0x4, 0x80)
r4 = socket$inet(0x2, 0x80001, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r5, 0x3)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r4, 0x3)

668.658455ms ago: executing program 6 (id=10588):
r0 = socket(0x2, 0x3, 0x9)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r3)
truncate(&(0x7f0000000200)='./mnt\x00', 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f00000002c0)=@file={0x1, './mnt\x00'}, 0x6e, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000003c0)="6b89f93fbc474988077020470b34d0c8ab76c9bf8717ffe5857c9daf070365ad0d4e90559e1ae157f1b9394cc591f9ae4ced9b20a74bf55974590eb06485a485edf0606665e9718a6b2f42c680e36d7b7febb02a167a3c666335b8a000cd", 0x5e}, {&(0x7f0000000500)="50f18cf90fd0d94901c546f62efd1bc8ccf77bd5bc107d76dfffb50110d350fb9f0987163744b1252def197ce54d3d3a9821da051b6b669645bb7c44dfa00d20e36276a0e02a9c8bb9c6a02aec0d3de3da6da53fc2a5076dede36e2a291f85c1276a4b49da8b51eb58947a099d71cb4af1b0f7373c9a23fef923d71e9cb40ea847600173544a1774a032291e07bd0c04f172b0911716f3d8c7542da912280be738bab8ce8b9b33b36ad580588a96fd2b84b6a2309af487ce6b7a59c63889e10568756c40946a486d6e4acebe16415c8486cccd85bf5cc82879d2bb26", 0xdc}, {&(0x7f00000001c0)="45c829957fe3e2b42b37bc968b9e", 0xe}, {&(0x7f0000000600)="fc125b701a383d1dfa4139567bd706a3f82efe8a1b42436033ea22cc620a9c90f8caff7665bf837f8627c7e5c2554fc5c156253625b4cc91c2f43c1085292a0a431b7794f002f379d2e0dc83527a149456afbd9aefe67a30a4bfed6b393c5742cf3c43f1f5dca414a5c76f4a7ab16ee828569bf71556791fd353b2b41f0c8a5f2151e60142cfc353409af8d8ce2f43ae6ef52e5bfda8c8d1d565949ff6", 0x9d}, {&(0x7f00000006c0)="6ccabc405c8e1669474b746adf851a9894a342a9b9c811e7bde65eb583b13e47e22a15daa984f343a1c564cc7932c815dabaa78472efc6bf0067ea6aa0a28face13bb1f748fe6dc1b09d48bc14f2f7e981113d036cd735905ce29dbd4d6abee08940e0527f05ec7d020c2b1d3cfc0bfc963ccfa3b9a240ae3d424c6e2743827c6cb8b5158900c7bffde3f125311018ea214d681a58bcb03cb8d2ed59df70a23d61e1fd702c7e28269f7358c2b40a161b6ba98160067b6e22bb9860c0f1cdf9ff4580c637d6564aafe944c0baa56a18a7345b3653c1cf25a5d9eb", 0xda}, {&(0x7f0000000440)="96793adfa42b580892cc581f8954c28770082968a8681d45f4f4f1425917de250b6adccf49fa49c6643f0e8d51aa7440033eab3de36b9c6bf91acf30e87561781c69f50539e305", 0x47}], 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="182176800000000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3], 0x58, 0xc1}}], 0x2, 0xc0)

498.384634ms ago: executing program 6 (id=10589):
r0 = socket(0x840000000002, 0x3, 0x100)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0116000904"], 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000), 0x4)
keyctl$set_reqkey_keyring(0xe, 0x4)
keyctl$clear(0x3, 0xfffffffffffffffc)
r1 = request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0x0)
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0x3, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfffffe04, 0x1, "316c59a3de3a"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
keyctl$get_persistent(0x16, r2, r1)

379.684627ms ago: executing program 5 (id=10590):
r0 = socket$unix(0x1, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000002940)=[{r1, 0x4690}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

180.524495ms ago: executing program 5 (id=10591):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x40, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb"}}, 0x4e)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

0s ago: executing program 5 (id=10592):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000)
syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r9, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a)
syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0xa0, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x3}, {0xffff, 0xfff5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x14, 0x8670, 0x5, 0x1, 0x5c4}}, {0x4}}, {{0x1c, 0x1, {0x22, 0x0, 0x2, 0xf21, 0x0, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0x3, 0x8, 0x0]}}, {{0x1c, 0x1, {0x2, 0x9, 0x7fff, 0x101, 0x0, 0x4, 0x7}}, {0x4}}]}]}, 0xa0}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

z.3.10136'.
[ 2951.499657][T11499] usb usb8: usbfs: process 11499 (syz.1.10134) did not claim interface 0 before use
[ 2952.190467][T10106] usb 5-1: USB disconnect, device number 91
[ 2952.549525][T10109] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2952.751674][T10109] usb 2-1: device descriptor read/64, error -71
[ 2953.029941][T10109] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2953.188510][T10109] usb 2-1: device descriptor read/64, error -71
[ 2953.323280][T10109] usb usb2-port1: attempt power cycle
[ 2953.668523][T10109] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2953.699265][T10109] usb 2-1: device descriptor read/8, error -71
[ 2953.938567][T10109] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2953.959168][T10109] usb 2-1: device descriptor read/8, error -71
[ 2954.034384][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10147'.
[ 2954.079990][T10109] usb usb2-port1: unable to enumerate USB device
[ 2954.145417][T11542] netlink: 'syz.0.10149': attribute type 1 has an invalid length.
[ 2954.231234][T11544] bond3: (slave bridge1): making interface the new active one
[ 2954.244612][T11544] bond3: (slave bridge1): Enslaving as an active interface with an up link
[ 2955.171860][T11565] FAULT_INJECTION: forcing a failure.
[ 2955.171860][T11565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2955.185669][T11565] CPU: 1 UID: 0 PID: 11565 Comm: syz.4.10156 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2955.185702][T11565] Tainted: [L]=SOFTLOCKUP
[ 2955.185711][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2955.185725][T11565] Call Trace:
[ 2955.185733][T11565]  <TASK>
[ 2955.185742][T11565]  dump_stack_lvl+0xe8/0x150
[ 2955.185789][T11565]  should_fail_ex+0x412/0x560
[ 2955.185823][T11565]  _copy_to_user+0x31/0xb0
[ 2955.185849][T11565]  simple_read_from_buffer+0xe1/0x170
[ 2955.185879][T11565]  proc_fail_nth_read+0x1bb/0x230
[ 2955.185905][T11565]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2955.185930][T11565]  ? rw_verify_area+0x2a6/0x4d0
[ 2955.185962][T11565]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2955.185984][T11565]  vfs_read+0x20c/0xa70
[ 2955.186002][T11565]  ? fdget_pos+0x246/0x320
[ 2955.186032][T11565]  ? __pfx___mutex_lock+0x10/0x10
[ 2955.186063][T11565]  ? __pfx_vfs_read+0x10/0x10
[ 2955.186102][T11565]  ? __fget_files+0x2a/0x420
[ 2955.186132][T11565]  ? __fget_files+0x3a0/0x420
[ 2955.186157][T11565]  ? __fget_files+0x2a/0x420
[ 2955.186192][T11565]  ksys_read+0x150/0x270
[ 2955.186215][T11565]  ? __pfx_ksys_read+0x10/0x10
[ 2955.186239][T11565]  ? asm_int80_emulation+0x1a/0x20
[ 2955.186263][T11565]  ? asm_int80_emulation+0x1a/0x20
[ 2955.186284][T11565]  do_int80_emulation+0x111/0x400
[ 2955.186317][T11565]  ? clear_bhb_loop+0x60/0xb0
[ 2955.186337][T11565]  ? clear_bhb_loop+0x60/0xb0
[ 2955.186369][T11565]  asm_int80_emulation+0x1a/0x20
[ 2955.186388][T11565] RIP: 0023:0xf712572b
[ 2955.186412][T11565] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2955.186430][T11565] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2955.186463][T11565] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0
[ 2955.186478][T11565] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 2955.186490][T11565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2955.186503][T11565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2955.186516][T11565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2955.186548][T11565]  </TASK>
[ 2955.734700][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10158'.
[ 2955.989930][T11578] netlink: 'syz.3.10161': attribute type 4 has an invalid length.
[ 2956.048604][T11582] netlink: 'syz.3.10161': attribute type 4 has an invalid length.
[ 2956.328606][T10127] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 2956.485855][T10127] usb 4-1: too many configurations: 60, using maximum allowed: 8
[ 2956.509907][T10127] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2956.521127][T10127] usb 4-1: can't read configurations, error -61
[ 2956.658691][T10127] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 2956.688598][T10118] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 2956.829673][T10127] usb 4-1: too many configurations: 60, using maximum allowed: 8
[ 2956.842075][T10127] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2956.854577][T10127] usb 4-1: can't read configurations, error -61
[ 2956.868079][T10127] usb usb4-port1: attempt power cycle
[ 2956.881430][T10118] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 2956.928353][T10118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2956.953673][T10118] usb 2-1: Product: syz
[ 2956.964855][T10118] usb 2-1: Manufacturer: syz
[ 2956.971000][T11591] FAULT_INJECTION: forcing a failure.
[ 2956.971000][T11591] name failslab, interval 1, probability 0, space 0, times 0
[ 2956.985241][T10118] usb 2-1: SerialNumber: syz
[ 2957.016360][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.4.10165 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2957.016384][T11591] Tainted: [L]=SOFTLOCKUP
[ 2957.016390][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2957.016400][T11591] Call Trace:
[ 2957.016406][T11591]  <TASK>
[ 2957.016412][T11591]  dump_stack_lvl+0xe8/0x150
[ 2957.016440][T11591]  should_fail_ex+0x412/0x560
[ 2957.016466][T11591]  should_failslab+0xa8/0x100
[ 2957.016486][T11591]  __kmalloc_cache_noprof+0x83/0x6e0
[ 2957.016527][T11591]  ? nfnetlink_rcv+0xfe1/0x27b0
[ 2957.016567][T11591]  nfnetlink_rcv+0xfe1/0x27b0
[ 2957.016615][T11591]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2957.016670][T11591]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2957.016687][T11591]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2957.016715][T11591]  netlink_unicast+0x80f/0x9b0
[ 2957.016744][T11591]  ? __pfx_netlink_unicast+0x10/0x10
[ 2957.016768][T11591]  ? netlink_sendmsg+0x650/0xb40
[ 2957.016782][T11591]  ? skb_put+0x11b/0x210
[ 2957.016807][T11591]  netlink_sendmsg+0x813/0xb40
[ 2957.016830][T11591]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2957.016848][T11591]  ? __asan_memset+0x22/0x50
[ 2957.016869][T11591]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2957.016890][T11591]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2957.016904][T11591]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2957.016920][T11591]  __sock_sendmsg+0x21c/0x270
[ 2957.016941][T11591]  ____sys_sendmsg+0x4d7/0x810
[ 2957.016962][T11591]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2957.016981][T11591]  ? kstrtoull+0x12f/0x1d0
[ 2957.017007][T11591]  ___sys_sendmsg+0x2a5/0x360
[ 2957.017021][T11591]  ? __lock_acquire+0x6b5/0x2cf0
[ 2957.017040][T11591]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2957.017056][T11591]  ? get_pid_task+0x20/0x1f0
[ 2957.017075][T11591]  ? get_pid_task+0x20/0x1f0
[ 2957.017092][T11591]  ? get_pid_task+0x20/0x1f0
[ 2957.017131][T11591]  ? __fget_files+0x2a/0x420
[ 2957.017148][T11591]  ? __fget_files+0x3a0/0x420
[ 2957.017173][T11591]  __sys_sendmsg+0x183/0x260
[ 2957.017189][T11591]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2957.017213][T11591]  ? __pfx_ksys_write+0x10/0x10
[ 2957.017239][T11591]  __do_fast_syscall_32+0x1d2/0x540
[ 2957.017254][T11591]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2957.017273][T11591]  ? do_fast_syscall_32+0x33/0x70
[ 2957.017295][T11591]  ? asm_int80_emulation+0x1a/0x20
[ 2957.017308][T11591]  ? do_int80_emulation+0x20e/0x400
[ 2957.017333][T11591]  do_fast_syscall_32+0x33/0x70
[ 2957.017356][T11591]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2957.017373][T11591] RIP: 0023:0xf73bd539
[ 2957.017386][T11591] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2957.017399][T11591] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2957.017415][T11591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[ 2957.017425][T11591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2957.017433][T11591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2957.017442][T11591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2957.017450][T11591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2957.017472][T11591]  </TASK>
[ 2957.438882][T10127] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 2957.459882][T10127] usb 4-1: too many configurations: 60, using maximum allowed: 8
[ 2957.470102][T10127] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2957.477778][T10127] usb 4-1: can't read configurations, error -61
[ 2957.608819][T10127] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2957.657785][T10127] usb 4-1: too many configurations: 60, using maximum allowed: 8
[ 2957.671107][T10127] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2957.679400][T10127] usb 4-1: can't read configurations, error -61
[ 2957.686362][T10127] usb usb4-port1: unable to enumerate USB device
[ 2957.765433][T10118] rtl8150 2-1:1.0: eth1: rtl8150 is detected
[ 2957.964249][T11580] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10162'.
[ 2958.054732][T10106] usb 2-1: USB disconnect, device number 42
[ 2958.588677][T11616] input: syz0 as /devices/virtual/input/input213
[ 2959.316895][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10173'.
[ 2959.736296][T11646] kernel profiling enabled (shift: 6)
[ 2960.181451][T11662] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10180'.
[ 2960.249694][T11664] syzkaller0: entered promiscuous mode
[ 2960.255407][T11664] syzkaller0: entered allmulticast mode
[ 2960.279288][T11662] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10180'.
[ 2960.288830][T11662] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2960.788566][T10118] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2960.951724][T10118] usb 4-1: Using ep0 maxpacket: 8
[ 2961.037489][T10118] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2961.055145][T10118] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[ 2961.073676][T10118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 2961.095040][T10118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2961.137286][T10118] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[ 2961.193009][T10118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2961.232671][T10118] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2D, changing to 0xD
[ 2961.244611][T10118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 29797, setting to 1024
[ 2961.259560][T10118] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[ 2961.395061][T10118] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 2961.408488][T10118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2961.426903][T10118] usb 4-1: Product: syz
[ 2961.473766][T10118] usb 4-1: Manufacturer: syz
[ 2961.490437][T10118] usb 4-1: SerialNumber: syz
[ 2961.520445][T10118] usb 4-1: config 0 descriptor??
[ 2961.543508][T11672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2961.558640][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10184'.
[ 2961.559284][T11672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2961.722491][T10118] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2963.461134][T10118] usb 4-1: USB disconnect, device number 7
[ 2963.804077][T11702] FAULT_INJECTION: forcing a failure.
[ 2963.804077][T11702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2963.826105][T11702] CPU: 0 UID: 0 PID: 11702 Comm: syz.3.10190 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2963.826137][T11702] Tainted: [L]=SOFTLOCKUP
[ 2963.826144][T11702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2963.826156][T11702] Call Trace:
[ 2963.826165][T11702]  <TASK>
[ 2963.826174][T11702]  dump_stack_lvl+0xe8/0x150
[ 2963.826205][T11702]  should_fail_ex+0x412/0x560
[ 2963.826234][T11702]  _copy_from_user+0x2d/0xb0
[ 2963.826256][T11702]  copy_folio_from_user+0x1e3/0x320
[ 2963.826289][T11702]  mfill_atomic_copy+0xfe7/0x1420
[ 2963.826322][T11702]  ? __pfx_mfill_atomic_copy+0x10/0x10
[ 2963.826353][T11702]  userfaultfd_ioctl+0x2c17/0x5130
[ 2963.826383][T11702]  ? __do_fast_syscall_32+0x1d2/0x540
[ 2963.826399][T11702]  ? do_fast_syscall_32+0x33/0x70
[ 2963.826424][T11702]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2963.826463][T11702]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 2963.826511][T11702]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2963.826536][T11702]  ? tomoyo_path_number_perm+0x219/0x630
[ 2963.826559][T11702]  ? tomoyo_path_number_perm+0x219/0x630
[ 2963.826582][T11702]  ? do_vfs_ioctl+0x1166/0x1530
[ 2963.826601][T11702]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2963.826648][T11702]  ? __fget_files+0x2a/0x420
[ 2963.826673][T11702]  ? __fget_files+0x3a0/0x420
[ 2963.826693][T11702]  ? __fget_files+0x2a/0x420
[ 2963.826716][T11702]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 2963.826739][T11702]  __ia32_compat_sys_ioctl+0x5ea/0x950
[ 2963.826759][T11702]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2963.826780][T11702]  ? __fget_files+0x3a0/0x420
[ 2963.826806][T11702]  ? fput+0xa0/0xd0
[ 2963.826828][T11702]  ? ksys_write+0x242/0x270
[ 2963.826847][T11702]  ? __pfx_ksys_write+0x10/0x10
[ 2963.826871][T11702]  __do_fast_syscall_32+0x1d2/0x540
[ 2963.826887][T11702]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2963.826910][T11702]  ? do_fast_syscall_32+0x33/0x70
[ 2963.826934][T11702]  ? asm_int80_emulation+0x1a/0x20
[ 2963.826950][T11702]  ? do_int80_emulation+0x20e/0x400
[ 2963.826979][T11702]  do_fast_syscall_32+0x33/0x70
[ 2963.827005][T11702]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2963.827026][T11702] RIP: 0023:0xf73ed539
[ 2963.827043][T11702] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2963.827058][T11702] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2963.827082][T11702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03
[ 2963.827095][T11702] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2963.827106][T11702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2963.827116][T11702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2963.827127][T11702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2963.827153][T11702]  </TASK>
[ 2964.422994][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2964.429604][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2965.221852][T11711] program syz.0.10194 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2965.301700][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10195'.
[ 2965.353634][T11711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10194'.
[ 2965.547820][T11731] fuse: Unknown parameter 'B'
[ 2965.748629][T11730] netlink: 'syz.0.10202': attribute type 4 has an invalid length.
[ 2965.757573][T11730] netlink: 'syz.0.10202': attribute type 4 has an invalid length.
[ 2966.234655][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10209'.
[ 2967.068177][T11765] program syz.3.10214 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2967.145421][T11765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10214'.
[ 2967.857908][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10220'.
[ 2968.089157][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10221'.
[ 2968.952048][T11794] netlink: 196 bytes leftover after parsing attributes in process `syz.3.10222'.
[ 2969.308761][T10118] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 2969.458537][T10118] usb 2-1: Using ep0 maxpacket: 32
[ 2969.483324][T10118] usb 2-1: config 247 has an invalid interface number: 193 but max is 0
[ 2969.492188][T10118] usb 2-1: config 247 has no interface number 0
[ 2969.502305][T10118] usb 2-1: config 247 interface 193 has no altsetting 0
[ 2969.511978][T10118] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=f1.05
[ 2969.539040][T10118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2969.594105][T10118] usb 2-1: Product: syz
[ 2969.598311][T10118] usb 2-1: Manufacturer: syz
[ 2969.612016][T10118] usb 2-1: SerialNumber: syz
[ 2970.740177][T10118] pegasus 2-1:247.193: probe with driver pegasus failed with error -71
[ 2970.764600][T10118] usb 2-1: USB disconnect, device number 43
[ 2970.842184][T11825] syzkaller0: entered promiscuous mode
[ 2970.847893][T11825] syzkaller0: entered allmulticast mode
[ 2971.347494][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10231'.
[ 2973.179976][T11844] FAULT_INJECTION: forcing a failure.
[ 2973.179976][T11844] name failslab, interval 1, probability 0, space 0, times 0
[ 2973.223486][T11844] CPU: 0 UID: 0 PID: 11844 Comm: syz.2.10238 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2973.223511][T11844] Tainted: [L]=SOFTLOCKUP
[ 2973.223516][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2973.223526][T11844] Call Trace:
[ 2973.223533][T11844]  <TASK>
[ 2973.223539][T11844]  dump_stack_lvl+0xe8/0x150
[ 2973.223563][T11844]  should_fail_ex+0x412/0x560
[ 2973.223587][T11844]  should_failslab+0xa8/0x100
[ 2973.223607][T11844]  __kvmalloc_node_noprof+0x166/0x8d0
[ 2973.223624][T11844]  ? rhashtable_init_noprof+0x52e/0xa70
[ 2973.223637][T11844]  ? rhashtable_init_noprof+0x12d/0xa70
[ 2973.223654][T11844]  rhashtable_init_noprof+0x52e/0xa70
[ 2973.223672][T11844]  nft_rhash_init+0x118/0x3b0
[ 2973.223692][T11844]  ? __pfx_nft_rhash_init+0x10/0x10
[ 2973.223709][T11844]  ? __pfx_nft_rhash_key+0x10/0x10
[ 2973.223725][T11844]  ? __pfx_nft_rhash_obj+0x10/0x10
[ 2973.223741][T11844]  ? __pfx_nft_rhash_cmp+0x10/0x10
[ 2973.223760][T11844]  ? nf_tables_newset+0x13bf/0x2580
[ 2973.223785][T11844]  nf_tables_newset+0x1c2b/0x2580
[ 2973.223813][T11844]  ? __pfx_nf_tables_newset+0x10/0x10
[ 2973.223847][T11844]  ? __nla_parse+0x40/0x60
[ 2973.223864][T11844]  nfnetlink_rcv+0x1240/0x27b0
[ 2973.223911][T11844]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2973.223981][T11844]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2973.223998][T11844]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2973.224032][T11844]  netlink_unicast+0x80f/0x9b0
[ 2973.224062][T11844]  ? __pfx_netlink_unicast+0x10/0x10
[ 2973.224084][T11844]  ? __alloc_skb+0x193/0x390
[ 2973.224105][T11844]  ? netlink_sendmsg+0x650/0xb40
[ 2973.224120][T11844]  ? skb_put+0x11b/0x210
[ 2973.224144][T11844]  netlink_sendmsg+0x813/0xb40
[ 2973.224166][T11844]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2973.224203][T11844]  ? __asan_memset+0x22/0x50
[ 2973.224224][T11844]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2973.224245][T11844]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2973.224260][T11844]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2973.224276][T11844]  __sock_sendmsg+0x21c/0x270
[ 2973.224297][T11844]  ____sys_sendmsg+0x4d7/0x810
[ 2973.224318][T11844]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2973.224336][T11844]  ? kstrtoull+0x12f/0x1d0
[ 2973.224362][T11844]  ___sys_sendmsg+0x2a5/0x360
[ 2973.224375][T11844]  ? __lock_acquire+0x6b5/0x2cf0
[ 2973.224394][T11844]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2973.224410][T11844]  ? get_pid_task+0x20/0x1f0
[ 2973.224431][T11844]  ? get_pid_task+0x20/0x1f0
[ 2973.224449][T11844]  ? get_pid_task+0x20/0x1f0
[ 2973.224487][T11844]  ? __fget_files+0x2a/0x420
[ 2973.224505][T11844]  ? __fget_files+0x3a0/0x420
[ 2973.224531][T11844]  __sys_sendmsg+0x183/0x260
[ 2973.224547][T11844]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2973.224570][T11844]  ? __pfx_ksys_write+0x10/0x10
[ 2973.224590][T11844]  __do_fast_syscall_32+0x1d2/0x540
[ 2973.224604][T11844]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2973.224624][T11844]  ? do_fast_syscall_32+0x33/0x70
[ 2973.224645][T11844]  ? asm_int80_emulation+0x1a/0x20
[ 2973.224659][T11844]  ? do_int80_emulation+0x20e/0x400
[ 2973.224684][T11844]  do_fast_syscall_32+0x33/0x70
[ 2973.224707][T11844]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2973.224725][T11844] RIP: 0023:0xf73cd539
[ 2973.224739][T11844] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2973.224751][T11844] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2973.224767][T11844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[ 2973.224778][T11844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2973.224787][T11844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2973.224795][T11844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2973.224804][T11844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2973.224825][T11844]  </TASK>
[ 2973.939947][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10241'.
[ 2976.822519][T11867] FAULT_INJECTION: forcing a failure.
[ 2976.822519][T11867] name failslab, interval 1, probability 0, space 0, times 0
[ 2976.863141][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.3.10246 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2976.863175][T11867] Tainted: [L]=SOFTLOCKUP
[ 2976.863184][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2976.863197][T11867] Call Trace:
[ 2976.863205][T11867]  <TASK>
[ 2976.863215][T11867]  dump_stack_lvl+0xe8/0x150
[ 2976.863247][T11867]  should_fail_ex+0x412/0x560
[ 2976.863282][T11867]  should_failslab+0xa8/0x100
[ 2976.863309][T11867]  __kvmalloc_node_noprof+0x166/0x8d0
[ 2976.863333][T11867]  ? alloc_netdev_mqs+0xa4b/0x11b0
[ 2976.863364][T11867]  alloc_netdev_mqs+0xa4b/0x11b0
[ 2976.863397][T11867]  rtnl_create_link+0x31f/0xd70
[ 2976.863429][T11867]  rtnl_newlink_create+0x277/0xb70
[ 2976.863451][T11867]  ? __pfx___nla_validate_parse+0x10/0x10
[ 2976.863484][T11867]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 2976.863509][T11867]  ? __pfx___mutex_lock+0x10/0x10
[ 2976.863551][T11867]  ? ns_capable+0x89/0xe0
[ 2976.863576][T11867]  rtnl_newlink+0x1666/0x1be0
[ 2976.863608][T11867]  ? __lock_acquire+0x6b5/0x2cf0
[ 2976.863643][T11867]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2976.863675][T11867]  ? __lock_acquire+0x6b5/0x2cf0
[ 2976.863704][T11867]  ? __lock_acquire+0x6b5/0x2cf0
[ 2976.863728][T11867]  ? __lock_acquire+0x6b5/0x2cf0
[ 2976.863759][T11867]  ? unwind_next_frame+0xa5/0x23c0
[ 2976.863814][T11867]  ? unwind_next_frame+0xa5/0x23c0
[ 2976.863842][T11867]  ? is_bpf_text_address+0x26/0x2b0
[ 2976.863892][T11867]  ? __lock_acquire+0x6b5/0x2cf0
[ 2976.863916][T11867]  ? is_bpf_text_address+0x292/0x2b0
[ 2976.863946][T11867]  ? is_bpf_text_address+0x26/0x2b0
[ 2976.863980][T11867]  ? kernel_text_address+0xa5/0xe0
[ 2976.864010][T11867]  ? __kernel_text_address+0xd/0x30
[ 2976.864039][T11867]  ? unwind_get_return_address+0x4d/0x90
[ 2976.864074][T11867]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 2976.864127][T11867]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2976.864157][T11867]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 2976.864191][T11867]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 2976.864221][T11867]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2976.864251][T11867]  ? __lock_acquire+0x6b5/0x2cf0
[ 2976.864288][T11867]  netlink_rcv_skb+0x232/0x4b0
[ 2976.864311][T11867]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2976.864343][T11867]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2976.864377][T11867]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2976.864408][T11867]  netlink_unicast+0x80f/0x9b0
[ 2976.864449][T11867]  ? __pfx_netlink_unicast+0x10/0x10
[ 2976.864479][T11867]  ? __alloc_skb+0x193/0x390
[ 2976.864509][T11867]  ? netlink_sendmsg+0x650/0xb40
[ 2976.864530][T11867]  ? skb_put+0x11b/0x210
[ 2976.864564][T11867]  netlink_sendmsg+0x813/0xb40
[ 2976.864597][T11867]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2976.864623][T11867]  ? __asan_memset+0x22/0x50
[ 2976.864651][T11867]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2976.864682][T11867]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2976.864701][T11867]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2976.864725][T11867]  __sock_sendmsg+0x21c/0x270
[ 2976.864755][T11867]  ____sys_sendmsg+0x4d7/0x810
[ 2976.864786][T11867]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2976.864812][T11867]  ? kstrtoull+0x12f/0x1d0
[ 2976.864848][T11867]  ___sys_sendmsg+0x2a5/0x360
[ 2976.864867][T11867]  ? __lock_acquire+0x6b5/0x2cf0
[ 2976.864893][T11867]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2976.864917][T11867]  ? get_pid_task+0x20/0x1f0
[ 2976.864942][T11867]  ? get_pid_task+0x20/0x1f0
[ 2976.864965][T11867]  ? get_pid_task+0x20/0x1f0
[ 2976.865021][T11867]  ? __fget_files+0x2a/0x420
[ 2976.865045][T11867]  ? __fget_files+0x3a0/0x420
[ 2976.865082][T11867]  __sys_sendmsg+0x183/0x260
[ 2976.865109][T11867]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2976.865144][T11867]  ? __pfx_ksys_write+0x10/0x10
[ 2976.865174][T11867]  __do_fast_syscall_32+0x1d2/0x540
[ 2976.865192][T11867]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2976.865219][T11867]  ? do_fast_syscall_32+0x33/0x70
[ 2976.865248][T11867]  ? asm_int80_emulation+0x1a/0x20
[ 2976.865267][T11867]  ? do_int80_emulation+0x20e/0x400
[ 2976.865301][T11867]  do_fast_syscall_32+0x33/0x70
[ 2976.865332][T11867]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2976.865356][T11867] RIP: 0023:0xf73ed539
[ 2976.865374][T11867] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2976.865392][T11867] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2976.865413][T11867] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[ 2976.865427][T11867] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000
[ 2976.865440][T11867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2976.865453][T11867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2976.865480][T11867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2976.865512][T11867]  </TASK>
[ 2977.392690][T11877] FAULT_INJECTION: forcing a failure.
[ 2977.392690][T11877] name failslab, interval 1, probability 0, space 0, times 0
[ 2977.409011][T11877] CPU: 1 UID: 0 PID: 11877 Comm: syz.4.10249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2977.409047][T11877] Tainted: [L]=SOFTLOCKUP
[ 2977.409056][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2977.409070][T11877] Call Trace:
[ 2977.409078][T11877]  <TASK>
[ 2977.409088][T11877]  dump_stack_lvl+0xe8/0x150
[ 2977.409121][T11877]  should_fail_ex+0x412/0x560
[ 2977.409157][T11877]  should_failslab+0xa8/0x100
[ 2977.409185][T11877]  __kvmalloc_node_noprof+0x166/0x8d0
[ 2977.409209][T11877]  ? nf_hook_entries_grow+0x288/0x720
[ 2977.409241][T11877]  nf_hook_entries_grow+0x288/0x720
[ 2977.409280][T11877]  __nf_register_net_hook+0x2c9/0x930
[ 2977.409317][T11877]  nf_register_net_hook+0xb2/0x190
[ 2977.409343][T11877]  nf_register_net_hooks+0x44/0x1b0
[ 2977.409371][T11877]  nf_ct_netns_do_get+0x363/0x5c0
[ 2977.409400][T11877]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 2977.409428][T11877]  ? __kasan_kmalloc+0x93/0xb0
[ 2977.409454][T11877]  ? __raw_spin_lock_init+0x45/0x100
[ 2977.409487][T11877]  nf_ct_netns_get+0x44/0xb0
[ 2977.409511][T11877]  nft_connlimit_do_init+0x1de/0x2e0
[ 2977.409541][T11877]  nft_set_elem_expr_alloc+0x213/0x5f0
[ 2977.409567][T11877]  ? __pfx_nft_set_elem_expr_alloc+0x10/0x10
[ 2977.409614][T11877]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2977.409648][T11877]  nft_set_expr_alloc+0x397/0x760
[ 2977.409677][T11877]  nf_tables_newset+0x1c6b/0x2580
[ 2977.409720][T11877]  ? __pfx_nf_tables_newset+0x10/0x10
[ 2977.409773][T11877]  ? __nla_parse+0x40/0x60
[ 2977.409810][T11877]  nfnetlink_rcv+0x1240/0x27b0
[ 2977.409880][T11877]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2977.409961][T11877]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2977.409985][T11877]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2977.410026][T11877]  netlink_unicast+0x80f/0x9b0
[ 2977.410068][T11877]  ? __pfx_netlink_unicast+0x10/0x10
[ 2977.410098][T11877]  ? __alloc_skb+0x193/0x390
[ 2977.410127][T11877]  ? netlink_sendmsg+0x650/0xb40
[ 2977.410148][T11877]  ? skb_put+0x11b/0x210
[ 2977.410183][T11877]  netlink_sendmsg+0x813/0xb40
[ 2977.410216][T11877]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2977.410242][T11877]  ? __asan_memset+0x22/0x50
[ 2977.410270][T11877]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2977.410301][T11877]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2977.410321][T11877]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2977.410345][T11877]  __sock_sendmsg+0x21c/0x270
[ 2977.410375][T11877]  ____sys_sendmsg+0x4d7/0x810
[ 2977.410406][T11877]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2977.410432][T11877]  ? kstrtoull+0x12f/0x1d0
[ 2977.410470][T11877]  ___sys_sendmsg+0x2a5/0x360
[ 2977.410490][T11877]  ? __lock_acquire+0x6b5/0x2cf0
[ 2977.410516][T11877]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2977.410540][T11877]  ? get_pid_task+0x20/0x1f0
[ 2977.410567][T11877]  ? get_pid_task+0x20/0x1f0
[ 2977.410591][T11877]  ? get_pid_task+0x20/0x1f0
[ 2977.410648][T11877]  ? __fget_files+0x2a/0x420
[ 2977.410673][T11877]  ? __fget_files+0x3a0/0x420
[ 2977.410710][T11877]  __sys_sendmsg+0x183/0x260
[ 2977.410734][T11877]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2977.410769][T11877]  ? __pfx_ksys_write+0x10/0x10
[ 2977.410806][T11877]  __do_fast_syscall_32+0x1d2/0x540
[ 2977.410824][T11877]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2977.410851][T11877]  ? do_fast_syscall_32+0x33/0x70
[ 2977.410880][T11877]  ? asm_int80_emulation+0x1a/0x20
[ 2977.410899][T11877]  ? do_int80_emulation+0x20e/0x400
[ 2977.410934][T11877]  do_fast_syscall_32+0x33/0x70
[ 2977.410966][T11877]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2977.410991][T11877] RIP: 0023:0xf73bd539
[ 2977.411010][T11877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2977.411027][T11877] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2977.411049][T11877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[ 2977.411064][T11877] RDX: 000000002404c800 RSI: 0000000000000000 RDI: 0000000000000000
[ 2977.411077][T11877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2977.411090][T11877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2977.411102][T11877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2977.411135][T11877]  </TASK>
[ 2977.930764][T11882] IPv6: sit1: Disabled Multicast RS
[ 2977.954502][T11882] sit1: entered allmulticast mode
[ 2978.015116][T11885] vlan0: entered promiscuous mode
[ 2978.071163][T11890] syzkaller0: entered promiscuous mode
[ 2978.076818][T11890] syzkaller0: entered allmulticast mode
[ 2979.208542][T10106] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 2979.369851][T10106] usb 5-1: Using ep0 maxpacket: 16
[ 2979.379579][T10106] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[ 2979.390132][T10106] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2979.402094][T10106] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2979.412040][T10106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2979.420419][T10106] usb 5-1: Product: syz
[ 2979.424857][T10106] usb 5-1: Manufacturer: syz
[ 2979.431184][T10106] usb 5-1: SerialNumber: syz
[ 2981.488134][T11897] veth1_to_bond: entered allmulticast mode
[ 2982.078991][T11931] vxcan1: entered allmulticast mode
[ 2982.330212][T10106] usb 5-1: 0:2 : does not exist
[ 2982.339895][T11894] veth1_to_bond: left allmulticast mode
[ 2982.350837][T10106] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 2982.376265][T10106] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 2982.459392][T10106] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 2982.484750][T10106] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[ 2982.551166][T10106] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 2982.590858][T10106] usb 5-1: USB disconnect, device number 92
[ 2983.047081][T11933] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2983.053757][T11933] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2983.072481][T11933] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2983.129081][T11933] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2983.135237][T11933] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2984.144780][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10276'.
[ 2984.343911][T25234] Bluetooth: hci1: command 0x0406 tx timeout
[ 2985.129823][T25234] Bluetooth: hci2: command 0x0406 tx timeout
[ 2985.135965][ T7080] Bluetooth: hci5: command 0x0406 tx timeout
[ 2985.218591][T25234] Bluetooth: hci3: command 0x0406 tx timeout
[ 2985.225096][ T7080] Bluetooth: hci0: command 0x0406 tx timeout
[ 2986.013168][T12006] FAULT_INJECTION: forcing a failure.
[ 2986.013168][T12006] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2986.049031][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.3.10287 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2986.049066][T12006] Tainted: [L]=SOFTLOCKUP
[ 2986.049075][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2986.049089][T12006] Call Trace:
[ 2986.049099][T12006]  <TASK>
[ 2986.049108][T12006]  dump_stack_lvl+0xe8/0x150
[ 2986.049151][T12006]  should_fail_ex+0x412/0x560
[ 2986.049186][T12006]  prepare_alloc_pages+0x22a/0x650
[ 2986.049220][T12006]  __alloc_frozen_pages_noprof+0x12f/0x380
[ 2986.049249][T12006]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2986.049283][T12006]  ? policy_nodemask+0x27c/0x710
[ 2986.049314][T12006]  alloc_pages_mpol+0x232/0x4a0
[ 2986.049344][T12006]  folio_alloc_mpol_noprof+0x39/0x70
[ 2986.049372][T12006]  shmem_alloc_and_add_folio+0x445/0xf80
[ 2986.049409][T12006]  ? filemap_get_entry+0xca/0x320
[ 2986.049427][T12006]  ? filemap_get_entry+0xca/0x320
[ 2986.049452][T12006]  ? shmem_huge_global_enabled+0x2cd/0x320
[ 2986.049479][T12006]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 2986.049513][T12006]  ? shmem_allowable_huge_orders+0x4c0/0x4e0
[ 2986.049548][T12006]  shmem_get_folio_gfp+0x5a9/0x1670
[ 2986.049596][T12006]  shmem_fault+0x179/0x390
[ 2986.049636][T12006]  __do_fault+0x138/0x390
[ 2986.049660][T12006]  do_pte_missing+0x6ad/0x3310
[ 2986.049695][T12006]  ? handle_mm_fault+0xee/0x32a0
[ 2986.049729][T12006]  handle_mm_fault+0x1b8c/0x32a0
[ 2986.049774][T12006]  ? handle_mm_fault+0xee/0x32a0
[ 2986.049817][T12006]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2986.049847][T12006]  ? follow_page_pte+0x825/0x1460
[ 2986.049891][T12006]  ? __pfx_follow_page_pte+0x10/0x10
[ 2986.049933][T12006]  __get_user_pages+0x165b/0x29d0
[ 2986.049994][T12006]  __gup_longterm_locked+0x7ed/0x1630
[ 2986.050049][T12006]  gup_fast_fallback+0x1d82/0x22e0
[ 2986.050077][T12006]  ? lruvec_stat_mod_folio+0x6f/0x2d0
[ 2986.050141][T12006]  ? __pfx_gup_fast_fallback+0x10/0x10
[ 2986.050172][T12006]  ? __kvmalloc_node_noprof+0x5ba/0x8d0
[ 2986.050194][T12006]  ? is_valid_gup_args+0x11f/0x200
[ 2986.050223][T12006]  ? pin_user_pages_fast+0x4d/0xb0
[ 2986.050254][T12006]  io_pin_pages+0xba/0x1b0
[ 2986.050285][T12006]  io_sqe_buffer_register+0x17e/0x2110
[ 2986.050320][T12006]  ? __might_fault+0xaf/0x130
[ 2986.050352][T12006]  ? __might_fault+0xaf/0x130
[ 2986.050384][T12006]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[ 2986.050422][T12006]  __io_register_rsrc_update+0x597/0x1250
[ 2986.050476][T12006]  ? __pfx___io_register_rsrc_update+0x10/0x10
[ 2986.050529][T12006]  io_register_rsrc_update+0x1b1/0x1c0
[ 2986.050565][T12006]  ? __pfx_io_register_rsrc_update+0x10/0x10
[ 2986.050600][T12006]  ? __fget_files+0x2a/0x420
[ 2986.050629][T12006]  ? io_is_uring_fops+0xd/0x50
[ 2986.050654][T12006]  __se_sys_io_uring_register+0xbe6/0x12a0
[ 2986.050692][T12006]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[ 2986.050723][T12006]  ? ksys_write+0x242/0x270
[ 2986.050746][T12006]  ? __pfx_ksys_write+0x10/0x10
[ 2986.050776][T12006]  __do_fast_syscall_32+0x1d2/0x540
[ 2986.050795][T12006]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2986.050822][T12006]  ? do_fast_syscall_32+0x33/0x70
[ 2986.050851][T12006]  ? asm_int80_emulation+0x1a/0x20
[ 2986.050870][T12006]  ? do_int80_emulation+0x20e/0x400
[ 2986.050906][T12006]  do_fast_syscall_32+0x33/0x70
[ 2986.050937][T12006]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2986.050963][T12006] RIP: 0023:0xf73ed539
[ 2986.050982][T12006] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2986.051001][T12006] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab
[ 2986.051024][T12006] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000010
[ 2986.051038][T12006] RDX: 0000000080000600 RSI: 0000000000000020 RDI: 0000000000000000
[ 2986.051051][T12006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2986.051064][T12006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2986.051076][T12006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2986.051108][T12006]  </TASK>
[ 2986.820827][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10286'.
[ 2986.844489][T12002] netlink: 'syz.0.10286': attribute type 5 has an invalid length.
[ 2986.859365][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10286'.
[ 2986.888990][T10109] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 2986.905458][T12002] geneve0: entered promiscuous mode
[ 2986.912366][T12002] geneve0: entered allmulticast mode
[ 2987.042525][T10109] usb 2-1: device descriptor read/64, error -71
[ 2987.188997][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2987.209338][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2987.257090][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2987.284594][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2987.328788][T10109] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 2987.488861][T10109] usb 2-1: device descriptor read/64, error -71
[ 2987.598991][T10109] usb usb2-port1: attempt power cycle
[ 2987.948510][T10109] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 2987.990642][T10109] usb 2-1: device descriptor read/8, error -71
[ 2988.259110][T10109] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 2988.279763][T10109] usb 2-1: device descriptor read/8, error -71
[ 2988.388833][T10109] usb usb2-port1: unable to enumerate USB device
[ 2988.821975][T12066] program syz.4.10306 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2988.834979][T12066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10306'.
[ 2990.393522][T12108] could not allocate digest TFM handle 
[ 2990.399745][T12108] FAULT_INJECTION: forcing a failure.
[ 2990.399745][T12108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2990.413642][T12108] CPU: 0 UID: 0 PID: 12108 Comm: syz.3.10320 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2990.413681][T12108] Tainted: [L]=SOFTLOCKUP
[ 2990.413688][T12108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2990.413701][T12108] Call Trace:
[ 2990.413709][T12108]  <TASK>
[ 2990.413726][T12108]  dump_stack_lvl+0xe8/0x150
[ 2990.413761][T12108]  should_fail_ex+0x412/0x560
[ 2990.413795][T12108]  _copy_to_user+0x31/0xb0
[ 2990.413821][T12108]  simple_read_from_buffer+0xe1/0x170
[ 2990.413857][T12108]  proc_fail_nth_read+0x1bb/0x230
[ 2990.413882][T12108]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2990.413908][T12108]  ? rw_verify_area+0x2a6/0x4d0
[ 2990.413939][T12108]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2990.413963][T12108]  vfs_read+0x20c/0xa70
[ 2990.413980][T12108]  ? fdget_pos+0x246/0x320
[ 2990.414010][T12108]  ? __pfx___mutex_lock+0x10/0x10
[ 2990.414042][T12108]  ? __pfx_vfs_read+0x10/0x10
[ 2990.414062][T12108]  ? __fget_files+0x2a/0x420
[ 2990.414092][T12108]  ? __fget_files+0x3a0/0x420
[ 2990.414118][T12108]  ? __fget_files+0x2a/0x420
[ 2990.414153][T12108]  ksys_read+0x150/0x270
[ 2990.414177][T12108]  ? __pfx_ksys_read+0x10/0x10
[ 2990.414202][T12108]  ? asm_int80_emulation+0x1a/0x20
[ 2990.414226][T12108]  ? asm_int80_emulation+0x1a/0x20
[ 2990.414247][T12108]  do_int80_emulation+0x111/0x400
[ 2990.414279][T12108]  ? clear_bhb_loop+0x60/0xb0
[ 2990.414299][T12108]  ? clear_bhb_loop+0x60/0xb0
[ 2990.414324][T12108]  asm_int80_emulation+0x1a/0x20
[ 2990.414344][T12108] RIP: 0023:0xf715572b
[ 2990.414361][T12108] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2990.414379][T12108] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2990.414401][T12108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54165d0
[ 2990.414416][T12108] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 2990.414428][T12108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2990.414440][T12108] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2990.414452][T12108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2990.414486][T12108]  </TASK>
[ 2990.458720][T10109] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 2990.788716][T10109] usb 2-1: device descriptor read/64, error -71
[ 2991.015754][   T30] kauditd_printk_skb: 55 callbacks suppressed
[ 2991.015773][   T30] audit: type=1326 audit(1769406872.461:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.028821][T10109] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 2991.084578][   T30] audit: type=1326 audit(1769406872.521:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.125994][T12126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2991.138793][   T30] audit: type=1326 audit(1769406872.521:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.162365][   T30] audit: type=1326 audit(1769406872.521:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.195734][   T30] audit: type=1326 audit(1769406872.521:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.221142][   T30] audit: type=1326 audit(1769406872.521:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.249376][   T30] audit: type=1326 audit(1769406872.531:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.272317][   T30] audit: type=1326 audit(1769406872.531:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.296883][   T30] audit: type=1326 audit(1769406872.531:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.302049][T10109] usb 2-1: device descriptor read/64, error -71
[ 2991.322120][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10326'.
[ 2991.337983][   T30] audit: type=1326 audit(1769406872.531:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.3.10324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2991.439067][T10109] usb usb2-port1: attempt power cycle
[ 2991.616203][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10328'.
[ 2991.727105][T12147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 2991.761060][T12148] [U] 
[ 2991.798595][T10109] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 2991.836354][T10109] usb 2-1: device descriptor read/8, error -71
[ 2991.953212][T12158] xt_hashlimit: Unknown mode mask 700, kernel too old?
[ 2992.098651][T10109] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 2992.119850][T10109] usb 2-1: device descriptor read/8, error -71
[ 2992.239836][T10109] usb usb2-port1: unable to enumerate USB device
[ 2992.258511][T29182] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[ 2992.423212][T29182] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 2992.432692][T29182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2992.441444][T29182] usb 4-1: Product: syz
[ 2992.449149][T29182] usb 4-1: Manufacturer: syz
[ 2992.458300][T29182] usb 4-1: SerialNumber: syz
[ 2992.473794][T29182] usb 4-1: config 0 descriptor??
[ 2993.225366][T10127] usb 4-1: USB disconnect, device number 8
[ 2994.258870][T12134] delete_channel: no stack
[ 2994.281367][T10127] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2994.448630][T10127] usb 2-1: Using ep0 maxpacket: 16
[ 2994.460405][T10127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2994.501340][T10127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2994.538512][T10118] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 2994.607273][T10127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2994.617429][T10127] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2994.737012][T10127] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2994.747225][T10118] usb 4-1: Using ep0 maxpacket: 16
[ 2994.756699][T10118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2994.773337][T10118] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2994.786089][T10127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2994.800378][T10118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2994.827993][T10127] usb 2-1: SerialNumber: syz
[ 2994.842683][T12205] FAULT_INJECTION: forcing a failure.
[ 2994.842683][T12205] name failslab, interval 1, probability 0, space 0, times 0
[ 2994.886717][T12205] CPU: 1 UID: 0 PID: 12205 Comm: syz.2.10347 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2994.886749][T12205] Tainted: [L]=SOFTLOCKUP
[ 2994.886757][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 2994.886769][T12205] Call Trace:
[ 2994.886777][T12205]  <TASK>
[ 2994.886786][T12205]  dump_stack_lvl+0xe8/0x150
[ 2994.886818][T12205]  should_fail_ex+0x412/0x560
[ 2994.886853][T12205]  should_failslab+0xa8/0x100
[ 2994.886880][T12205]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 2994.886909][T12205]  ? apparmor_capable+0x137/0x1a0
[ 2994.886930][T12205]  ? skb_clone+0x212/0x3a0
[ 2994.886955][T12205]  skb_clone+0x212/0x3a0
[ 2994.886975][T12205]  ? nfnetlink_rcv+0x4b0/0x27b0
[ 2994.887010][T12205]  nfnetlink_rcv+0x4e2/0x27b0
[ 2994.887051][T12205]  ? is_bpf_text_address+0x26/0x2b0
[ 2994.887085][T12205]  ? kernel_text_address+0xa5/0xe0
[ 2994.887115][T12205]  ? __kernel_text_address+0xd/0x30
[ 2994.887144][T12205]  ? unwind_get_return_address+0x4d/0x90
[ 2994.887176][T12205]  ? __lock_acquire+0x6b5/0x2cf0
[ 2994.887209][T12205]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2994.887257][T12205]  ? __lock_acquire+0x6b5/0x2cf0
[ 2994.887289][T12205]  ? __netlink_lookup+0xc6/0x8b0
[ 2994.887325][T12205]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2994.887347][T12205]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2994.887385][T12205]  netlink_unicast+0x80f/0x9b0
[ 2994.887425][T12205]  ? __pfx_netlink_unicast+0x10/0x10
[ 2994.887458][T12205]  ? netlink_sendmsg+0x650/0xb40
[ 2994.887478][T12205]  ? skb_put+0x11b/0x210
[ 2994.887512][T12205]  netlink_sendmsg+0x813/0xb40
[ 2994.887542][T12205]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2994.887568][T12205]  ? __asan_memset+0x22/0x50
[ 2994.887596][T12205]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2994.887626][T12205]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2994.887644][T12205]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2994.887667][T12205]  __sock_sendmsg+0x21c/0x270
[ 2994.887696][T12205]  ____sys_sendmsg+0x4d7/0x810
[ 2994.887725][T12205]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2994.887749][T12205]  ? kstrtoull+0x12f/0x1d0
[ 2994.887783][T12205]  ___sys_sendmsg+0x2a5/0x360
[ 2994.887801][T12205]  ? __lock_acquire+0x6b5/0x2cf0
[ 2994.887826][T12205]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2994.887849][T12205]  ? get_pid_task+0x20/0x1f0
[ 2994.887877][T12205]  ? get_pid_task+0x20/0x1f0
[ 2994.887901][T12205]  ? get_pid_task+0x20/0x1f0
[ 2994.887956][T12205]  ? __fget_files+0x2a/0x420
[ 2994.887980][T12205]  ? __fget_files+0x3a0/0x420
[ 2994.888017][T12205]  __sys_sendmsg+0x183/0x260
[ 2994.888040][T12205]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2994.888074][T12205]  ? __pfx_ksys_write+0x10/0x10
[ 2994.888103][T12205]  __do_fast_syscall_32+0x1d2/0x540
[ 2994.888122][T12205]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2994.888150][T12205]  ? do_fast_syscall_32+0x33/0x70
[ 2994.888186][T12205]  ? asm_int80_emulation+0x1a/0x20
[ 2994.888205][T12205]  ? do_int80_emulation+0x20e/0x400
[ 2994.888241][T12205]  do_fast_syscall_32+0x33/0x70
[ 2994.888273][T12205]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2994.888297][T12205] RIP: 0023:0xf73cd539
[ 2994.888315][T12205] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2994.888332][T12205] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2994.888354][T12205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[ 2994.888372][T12205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2994.888383][T12205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2994.888395][T12205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2994.888407][T12205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2994.888435][T12205]  </TASK>
[ 2994.891231][T10118] usb 4-1: config 0 descriptor??
[ 2995.277786][T10127] hub 2-1:1.0: bad descriptor, ignoring hub
[ 2995.284901][T10127] hub 2-1:1.0: probe with driver hub failed with error -5
[ 2995.293471][T10127] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 2995.526924][T12191] raw-gadget.0 gadget.1: fail, usb_ep_set_wedge returned -11
[ 2995.829609][T10118] mcp2221 0003:04D8:00DD.009C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[ 2996.368739][T10118] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 2996.778163][T10118] usb 5-1: Using ep0 maxpacket: 8
[ 2996.865473][T10118] usb 5-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config
[ 2996.924896][T10118] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 2996.957897][T10117] usb 2-1: USB disconnect, device number 52
[ 2996.983074][T10118] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2997.029756][T10118] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 2997.042611][T10118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2997.056236][T10118] usb 5-1: Product: syz
[ 2997.062359][T10118] usb 5-1: Manufacturer: syz
[ 2997.071116][T10118] usb 5-1: SerialNumber: syz
[ 2997.119971][T12213] program syz.2.10350 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2997.138780][T10118] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 2997.180500][T10118] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 2997.198601][T10118] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 2997.248857][T12198] fuse: Bad value for 'group_id'
[ 2997.253856][T12198] fuse: Bad value for 'group_id'
[ 2997.421925][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10353'.
[ 2997.534269][   T30] kauditd_printk_skb: 74 callbacks suppressed
[ 2997.534290][   T30] audit: type=1326 audit(1769406878.981:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.1.10353" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x0
[ 2997.940492][T12239] vxcan1: entered allmulticast mode
[ 2999.084551][T10118] usb 4-1: USB disconnect, device number 9
[ 2999.134261][T29182] usb 5-1: USB disconnect, device number 93
[ 2999.588588][T29182] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2999.788665][T29182] usb 5-1: Using ep0 maxpacket: 8
[ 2999.799447][T29182] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 2999.807761][T29182] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2999.818252][T29182] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2999.837393][T29182] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[ 2999.858596][T29182] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 2999.879281][T29182] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3000.022879][T29182] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 3000.049916][T29182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3000.292090][T29182] usb 5-1: GET_CAPABILITIES returned 0
[ 3000.306146][T29182] usbtmc 5-1:16.0: can't read capabilities
[ 3000.829410][T12271] Failed to get privilege flags for destination (handle=0x2:0x40)
[ 3000.868686][T10118] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 3000.911437][T10117] usb 5-1: USB disconnect, device number 94
[ 3000.933351][T12274] fuse: Unknown parameter 'KÖQ—ESµï�ØGÀ0x0000000000000006'
[ 3001.018720][T10118] usb 4-1: Using ep0 maxpacket: 32
[ 3001.026676][T10118] usb 4-1: config 0 has an invalid interface number: 169 but max is 0
[ 3001.035563][T10118] usb 4-1: config 0 has no interface number 0
[ 3001.042894][T10118] usb 4-1: config 0 interface 169 has no altsetting 0
[ 3001.056529][T10118] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[ 3001.066210][T10118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3001.074558][T10118] usb 4-1: Product: syz
[ 3001.079782][T12278] netlink: 'syz.1.10368': attribute type 9 has an invalid length.
[ 3001.087756][T10118] usb 4-1: Manufacturer: syz
[ 3001.093155][T10118] usb 4-1: SerialNumber: syz
[ 3001.100999][T10118] usb 4-1: config 0 descriptor??
[ 3001.385727][T10118] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 3001.460655][T10118] usb 4-1: USB disconnect, device number 10
[ 3001.470514][T12280] FAULT_INJECTION: forcing a failure.
[ 3001.470514][T12280] name failslab, interval 1, probability 0, space 0, times 0
[ 3001.492493][T12280] CPU: 1 UID: 0 PID: 12280 Comm: syz.2.10369 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3001.492533][T12280] Tainted: [L]=SOFTLOCKUP
[ 3001.492541][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3001.492553][T12280] Call Trace:
[ 3001.492562][T12280]  <TASK>
[ 3001.492572][T12280]  dump_stack_lvl+0xe8/0x150
[ 3001.492603][T12280]  should_fail_ex+0x412/0x560
[ 3001.492637][T12280]  should_failslab+0xa8/0x100
[ 3001.492664][T12280]  __kmalloc_noprof+0xde/0x7e0
[ 3001.492684][T12280]  ? tomoyo_encode+0x28b/0x550
[ 3001.492717][T12280]  tomoyo_encode+0x28b/0x550
[ 3001.492751][T12280]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 3001.492782][T12280]  ? tomoyo_domain+0xd7/0x130
[ 3001.492817][T12280]  ? tomoyo_path_number_perm+0x219/0x630
[ 3001.492841][T12280]  tomoyo_path_number_perm+0x246/0x630
[ 3001.492867][T12280]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3001.492890][T12280]  ? __lock_acquire+0x6b5/0x2cf0
[ 3001.492953][T12280]  ? __fget_files+0x2a/0x420
[ 3001.492983][T12280]  ? __fget_files+0x3a0/0x420
[ 3001.493007][T12280]  ? __fget_files+0x2a/0x420
[ 3001.493037][T12280]  security_file_ioctl_compat+0xc3/0x2a0
[ 3001.493065][T12280]  __ia32_compat_sys_ioctl+0x139/0x950
[ 3001.493089][T12280]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 3001.493113][T12280]  ? __fget_files+0x3a0/0x420
[ 3001.493145][T12280]  ? fput+0xa0/0xd0
[ 3001.493173][T12280]  ? ksys_write+0x242/0x270
[ 3001.493195][T12280]  ? __pfx_ksys_write+0x10/0x10
[ 3001.493224][T12280]  __do_fast_syscall_32+0x1d2/0x540
[ 3001.493244][T12280]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3001.493271][T12280]  ? do_fast_syscall_32+0x33/0x70
[ 3001.493298][T12280]  ? asm_int80_emulation+0x1a/0x20
[ 3001.493317][T12280]  ? do_int80_emulation+0x20e/0x400
[ 3001.493353][T12280]  do_fast_syscall_32+0x33/0x70
[ 3001.493384][T12280]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3001.493409][T12280] RIP: 0023:0xf73cd539
[ 3001.493427][T12280] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3001.493451][T12280] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 3001.493472][T12280] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922
[ 3001.493487][T12280] RDX: 0000000080002080 RSI: 0000000000000000 RDI: 0000000000000000
[ 3001.493507][T12280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3001.493519][T12280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3001.493531][T12280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3001.493562][T12280]  </TASK>
[ 3001.493711][T12280] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3001.711541][T11682] udevd[11682]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3002.031708][T12292] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10375'.
[ 3002.088819][T29182] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 3002.278140][T29182] usb 5-1: config 6 has an invalid interface number: 14 but max is 0
[ 3002.312099][T29182] usb 5-1: config 6 has no interface number 0
[ 3002.338117][T29182] usb 5-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0
[ 3002.362713][T29182] usb 5-1: config 6 interface 14 has no altsetting 0
[ 3002.392016][T29182] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 3002.448454][T29182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3002.478511][T29182] usb 5-1: Product: syz
[ 3002.546874][T29182] usb 5-1: Manufacturer: syz
[ 3002.571372][T29182] usb 5-1: SerialNumber: syz
[ 3002.813833][T29182] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 3002.839141][T29182] command write [95] error -8
[ 3002.858173][T29182] usb 5-1: USB disconnect, device number 95
[ 3003.378779][T10109] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 3003.548754][T10109] usb 4-1: Using ep0 maxpacket: 8
[ 3003.549465][T12316] loop7: detected capacity change from 0 to 16383
[ 3003.563009][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10382'.
[ 3003.572764][T12319] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10382'.
[ 3003.587638][T10109] usb 4-1: config 2 interface 0 has no altsetting 0
[ 3003.603055][T10109] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[ 3003.625805][T10109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3003.645229][T10109] usb 4-1: Product: syz
[ 3003.664705][T10109] usb 4-1: Manufacturer: syz
[ 3003.698795][T10109] usb 4-1: SerialNumber: syz
[ 3003.859706][T12324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3003.909509][T12324] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 3003.946618][T10109] usb 4-1: USB disconnect, device number 11
[ 3003.972446][T12324] tipc: Resetting bearer <eth:syzkaller0>
[ 3004.185468][T12329] FAULT_INJECTION: forcing a failure.
[ 3004.185468][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3004.199307][T12329] CPU: 0 UID: 0 PID: 12329 Comm: syz.4.10386 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3004.199339][T12329] Tainted: [L]=SOFTLOCKUP
[ 3004.199348][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3004.199362][T12329] Call Trace:
[ 3004.199376][T12329]  <TASK>
[ 3004.199382][T12329]  dump_stack_lvl+0xe8/0x150
[ 3004.199406][T12329]  should_fail_ex+0x412/0x560
[ 3004.199432][T12329]  _copy_from_user+0x2d/0xb0
[ 3004.199449][T12329]  get_compat_msghdr+0xb3/0x4c0
[ 3004.199467][T12329]  ? aa_file_perm+0x12d/0x1630
[ 3004.199491][T12329]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 3004.199516][T12329]  ___sys_sendmsg+0x201/0x360
[ 3004.199530][T12329]  ? __lock_acquire+0x6b5/0x2cf0
[ 3004.199550][T12329]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3004.199565][T12329]  ? kstrtoull+0x12f/0x1d0
[ 3004.199606][T12329]  ? __fget_files+0x2a/0x420
[ 3004.199624][T12329]  ? __fget_files+0x3a0/0x420
[ 3004.199649][T12329]  __sys_sendmmsg+0x2e7/0x4e0
[ 3004.199669][T12329]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3004.199690][T12329]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3004.199730][T12329]  ? ksys_write+0x242/0x270
[ 3004.199746][T12329]  ? __pfx_ksys_write+0x10/0x10
[ 3004.199763][T12329]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 3004.199781][T12329]  __do_fast_syscall_32+0x1d2/0x540
[ 3004.199794][T12329]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3004.199814][T12329]  ? do_fast_syscall_32+0x33/0x70
[ 3004.199835][T12329]  ? asm_int80_emulation+0x1a/0x20
[ 3004.199849][T12329]  ? do_int80_emulation+0x20e/0x400
[ 3004.199874][T12329]  do_fast_syscall_32+0x33/0x70
[ 3004.199896][T12329]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3004.199914][T12329] RIP: 0023:0xf73bd539
[ 3004.199933][T12329] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3004.199946][T12329] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 3004.199962][T12329] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080007fc0
[ 3004.199972][T12329] RDX: 000000000800001d RSI: 000000000000001c RDI: 0000000000000000
[ 3004.199981][T12329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3004.199989][T12329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3004.199998][T12329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3004.200019][T12329]  </TASK>
[ 3004.900433][T12345] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10391'.
[ 3005.562984][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10398'.
[ 3005.577859][T12362] vlan2: entered allmulticast mode
[ 3005.587882][T12362] veth0_to_bond: entered allmulticast mode
[ 3005.945820][T12356] netlink: 136 bytes leftover after parsing attributes in process `syz.3.10390'.
[ 3006.639267][T12374] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10402'.
[ 3006.942476][T12380] netlink: 'syz.3.10404': attribute type 61 has an invalid length.
[ 3006.992738][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10404'.
[ 3007.128218][T12387] FAULT_INJECTION: forcing a failure.
[ 3007.128218][T12387] name failslab, interval 1, probability 0, space 0, times 0
[ 3007.173723][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.0.10406 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3007.173758][T12387] Tainted: [L]=SOFTLOCKUP
[ 3007.173766][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3007.173780][T12387] Call Trace:
[ 3007.173789][T12387]  <TASK>
[ 3007.173799][T12387]  dump_stack_lvl+0xe8/0x150
[ 3007.173833][T12387]  should_fail_ex+0x412/0x560
[ 3007.173869][T12387]  should_failslab+0xa8/0x100
[ 3007.173899][T12387]  __kmalloc_cache_noprof+0x83/0x6e0
[ 3007.173922][T12387]  ? sctp_add_bind_addr+0x8c/0x370
[ 3007.173953][T12387]  sctp_add_bind_addr+0x8c/0x370
[ 3007.173982][T12387]  sctp_copy_local_addr_list+0x314/0x4f0
[ 3007.174013][T12387]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 3007.174040][T12387]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 3007.174069][T12387]  ? sctp_v4_is_any+0x35/0x60
[ 3007.174094][T12387]  ? sctp_copy_one_addr+0x93/0x360
[ 3007.174123][T12387]  sctp_bind_addr_copy+0xb3/0x3c0
[ 3007.174148][T12387]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 3007.174174][T12387]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 3007.174206][T12387]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 3007.174244][T12387]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[ 3007.174278][T12387]  __sctp_connect+0x5cb/0xdc0
[ 3007.174319][T12387]  ? __pfx___sctp_connect+0x10/0x10
[ 3007.174348][T12387]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 3007.174374][T12387]  ? __sctp_setsockopt_connectx+0xc7/0x190
[ 3007.174400][T12387]  sctp_getsockopt_connectx3+0x227/0x360
[ 3007.174424][T12387]  ? lock_sock_nested+0x6a/0x100
[ 3007.174452][T12387]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[ 3007.174500][T12387]  ? __local_bh_enable_ip+0xd0/0x130
[ 3007.174545][T12387]  sctp_getsockopt+0x984/0xb90
[ 3007.174572][T12387]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 3007.174601][T12387]  do_sock_getsockopt+0x2d3/0x3f0
[ 3007.174645][T12387]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 3007.174678][T12387]  ? __fget_files+0x3a0/0x420
[ 3007.174702][T12387]  ? __fget_files+0x2a/0x420
[ 3007.174736][T12387]  __ia32_sys_getsockopt+0x1a4/0x240
[ 3007.174767][T12387]  __do_fast_syscall_32+0x1d2/0x540
[ 3007.174785][T12387]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3007.174812][T12387]  ? do_fast_syscall_32+0x33/0x70
[ 3007.174841][T12387]  ? asm_int80_emulation+0x1a/0x20
[ 3007.174861][T12387]  ? do_int80_emulation+0x20e/0x400
[ 3007.174894][T12387]  do_fast_syscall_32+0x33/0x70
[ 3007.174924][T12387]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3007.174948][T12387] RIP: 0023:0xf739d539
[ 3007.174967][T12387] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3007.174985][T12387] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[ 3007.175007][T12387] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084
[ 3007.175021][T12387] RDX: 000000000000006f RSI: 0000000080000000 RDI: 0000000080000180
[ 3007.175033][T12387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3007.175043][T12387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3007.175053][T12387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3007.175078][T12387]  </TASK>
[ 3008.944439][T12426] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10415'.
[ 3008.988563][T12407] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3008.995086][T12407] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 3009.002966][T12407] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3009.015268][T12407] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3009.027301][T12407] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3009.559260][T10118] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 3009.693811][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10420'.
[ 3009.779862][T10118] usb 5-1: config 0 has no interfaces?
[ 3009.796156][T10118] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 3009.835508][T10118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3009.902218][T10118] usb 5-1: config 0 descriptor??
[ 3009.970761][T12441] netlink: 'syz.1.10422': attribute type 2 has an invalid length.
[ 3010.012001][T12441] netlink: 'syz.1.10422': attribute type 1 has an invalid length.
[ 3010.043047][T12441] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10422'.
[ 3010.085884][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10424'.
[ 3010.168607][T25234] Bluetooth: hci1: command 0x0406 tx timeout
[ 3010.378591][T10109] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 3010.580722][T10109] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 3010.600516][T10109] usb 2-1: config 0 has no interface number 0
[ 3010.622663][T10109] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3010.639394][T10109] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3010.684102][T10109] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 3010.710064][T10109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3010.874983][T10109] usb 2-1: config 0 descriptor??
[ 3011.049883][T25234] Bluetooth: hci3: command 0x0406 tx timeout
[ 3011.049903][ T7080] Bluetooth: hci0: command 0x0406 tx timeout
[ 3011.050044][ T7080] Bluetooth: hci2: command 0x0406 tx timeout
[ 3011.063540][T25234] Bluetooth: hci5: command 0x0406 tx timeout
[ 3011.115442][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3011.151342][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3011.437699][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10430'.
[ 3011.517136][T10109] prodikeys 0003:041E:2801.009D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1
[ 3011.576246][T10109] hid_prodikeys: hid-prodikeys: failed to find output report
[ 3011.576246][T10109] 
[ 3011.881052][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10433'.
[ 3012.076473][T12480] fuse: Unknown parameter 'ÿÿ01777777777777777777777'
[ 3012.127321][T12483] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 3012.328778][T12488] FAULT_INJECTION: forcing a failure.
[ 3012.328778][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3012.361404][T12488] CPU: 1 UID: 0 PID: 12488 Comm: syz.0.10438 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3012.361439][T12488] Tainted: [L]=SOFTLOCKUP
[ 3012.361447][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3012.361471][T12488] Call Trace:
[ 3012.361480][T12488]  <TASK>
[ 3012.361490][T12488]  dump_stack_lvl+0xe8/0x150
[ 3012.361522][T12488]  should_fail_ex+0x412/0x560
[ 3012.361556][T12488]  _copy_from_user+0x2d/0xb0
[ 3012.361581][T12488]  __sys_bpf+0x229/0x920
[ 3012.361613][T12488]  ? __pfx___sys_bpf+0x10/0x10
[ 3012.361657][T12488]  ? fput+0xa0/0xd0
[ 3012.361684][T12488]  ? ksys_write+0x242/0x270
[ 3012.361705][T12488]  ? __pfx_ksys_write+0x10/0x10
[ 3012.361729][T12488]  __ia32_sys_bpf+0x7c/0x90
[ 3012.361755][T12488]  __do_fast_syscall_32+0x1d2/0x540
[ 3012.361775][T12488]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3012.361800][T12488]  ? do_fast_syscall_32+0x33/0x70
[ 3012.361829][T12488]  ? asm_int80_emulation+0x1a/0x20
[ 3012.361847][T12488]  ? do_int80_emulation+0x20e/0x400
[ 3012.361881][T12488]  do_fast_syscall_32+0x33/0x70
[ 3012.361911][T12488]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3012.361936][T12488] RIP: 0023:0xf739d539
[ 3012.361954][T12488] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3012.361971][T12488] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[ 3012.361993][T12488] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0
[ 3012.362007][T12488] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[ 3012.362019][T12488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3012.362031][T12488] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3012.362042][T12488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3012.362107][T12488]  </TASK>
[ 3012.812608][T10109] usb 5-1: USB disconnect, device number 96
[ 3012.838643][T10117] usb 2-1: USB disconnect, device number 53
[ 3013.552650][T12504] netlink: 'syz.4.10441': attribute type 29 has an invalid length.
[ 3013.563880][T12504] netlink: 'syz.4.10441': attribute type 29 has an invalid length.
[ 3013.685664][   T30] audit: type=1326 audit(1769406895.131:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3013.717068][T12506] fuse: Unknown parameter 'ÿÿ0x0000000000000007'
[ 3013.735981][   T30] audit: type=1326 audit(1769406895.131:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3013.795454][   T30] audit: type=1326 audit(1769406895.131:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3013.828334][   T30] audit: type=1326 audit(1769406895.131:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3013.878481][   T30] audit: type=1326 audit(1769406895.131:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3013.918547][   T30] audit: type=1326 audit(1769406895.131:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=339 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3013.993897][   T30] audit: type=1326 audit(1769406895.131:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3014.358556][   T30] audit: type=1326 audit(1769406895.131:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3014.498483][   T30] audit: type=1326 audit(1769406895.131:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3014.568480][   T30] audit: type=1326 audit(1769406895.131:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.10443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 3014.963021][T25234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3014.972765][T25234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3014.982784][T25234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3015.009492][T25234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3015.017299][T25234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3015.108527][T10127] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 3015.258621][T10127] usb 5-1: Using ep0 maxpacket: 8
[ 3015.265945][T10127] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 3015.286439][T10127] usb 5-1: config 0 has no interface number 0
[ 3015.306725][T10127] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3015.325379][T10127] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 3015.352043][T10127] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 3015.378511][T10127] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 3015.432625][T10127] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 3015.471791][T10127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3015.509393][T10127] usb 5-1: config 0 descriptor??
[ 3015.532941][T10127] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 3015.824277][T12519] chnl_net:caif_netlink_parms(): no params data found
[ 3016.120558][T12519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3016.127928][T12519] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3016.135802][T12519] bridge_slave_0: entered allmulticast mode
[ 3016.144493][T12519] bridge_slave_0: entered promiscuous mode
[ 3016.154927][T12519] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3016.162620][T12519] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3016.171041][T12519] bridge_slave_1: entered allmulticast mode
[ 3016.179703][T12519] bridge_slave_1: entered promiscuous mode
[ 3016.374459][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3016.405957][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3016.537582][T12519] team0: Port device team_slave_0 added
[ 3016.565977][T12519] team0: Port device team_slave_1 added
[ 3016.640499][T12538] loop8: detected capacity change from 0 to 8
[ 3016.647892][T12538] Dev loop8: unable to read RDB block 8
[ 3016.653907][T12538]  loop8: unable to read partition table
[ 3016.660197][T12538] loop8: partition table beyond EOD, truncated
[ 3016.668262][T12538] loop_reread_partitions: partition scan of loop8 (þ被xü^6Ñ9%ƒä ) failed (rc=-5)
[ 3016.760690][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3016.780591][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3016.845761][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3016.877896][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3016.908816][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3016.978264][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3017.052699][ T7080] Bluetooth: hci2: command tx timeout
[ 3017.316402][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10455'.
[ 3017.328007][T12519] hsr_slave_0: entered promiscuous mode
[ 3017.353344][T12519] hsr_slave_1: entered promiscuous mode
[ 3017.919428][T10127] usb 5-1: USB disconnect, device number 97
[ 3017.943478][T10127] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 3018.249816][T12519] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 3018.258535][ T7280] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 3018.289142][T12519] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 3018.511173][T12519] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 3018.538468][ T7280] usb 4-1: Using ep0 maxpacket: 8
[ 3018.558031][ T7280] usb 4-1: config 2 has an invalid interface number: 1 but max is 0
[ 3018.566504][ T7280] usb 4-1: config 2 has no interface number 0
[ 3018.588290][ T7280] usb 4-1: config 2 interface 1 has no altsetting 0
[ 3018.599745][T12519] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 3018.631532][ T7280] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78
[ 3018.645529][ T7280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3018.654708][ T7280] usb 4-1: Product: syz
[ 3018.659183][ T7280] usb 4-1: Manufacturer: syz
[ 3018.664186][ T7280] usb 4-1: SerialNumber: syz
[ 3019.033768][T12519] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3019.084039][T12519] 8021q: adding VLAN 0 to HW filter on device team0
[ 3019.098706][  T684] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3019.105868][  T684] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3019.128664][ T7080] Bluetooth: hci2: command tx timeout
[ 3019.142469][  T684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3019.149679][  T684] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3019.178688][ T7280] snd-usb-audio 4-1:2.1: probe with driver snd-usb-audio failed with error -22
[ 3019.199244][ T7280] snd-usb-us122l 4-1:2.1: usb_set_interface error
[ 3019.206158][ T7280] snd-usb-us122l 4-1:2.1: probe with driver snd-usb-us122l failed with error -22
[ 3019.231795][ T7280] usb 4-1: USB disconnect, device number 12
[ 3019.282322][T12519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3019.349747][T11568] udevd[11568]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3019.451777][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3019.651082][T12519] veth0_vlan: entered promiscuous mode
[ 3019.712847][T12519] veth1_vlan: entered promiscuous mode
[ 3019.768586][T10127] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 3019.863634][T12519] veth0_macvtap: entered promiscuous mode
[ 3019.898255][T12519] veth1_macvtap: entered promiscuous mode
[ 3019.960012][T10127] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3019.982246][T10127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3019.997280][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3020.005966][T10127] usb 5-1: Product: syz
[ 3020.034729][T10127] usb 5-1: Manufacturer: syz
[ 3020.043705][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3020.052438][T10127] usb 5-1: SerialNumber: syz
[ 3020.088900][T26255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.101444][T26255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.122409][T10127] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3020.143885][T29830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.178337][T29830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.194661][ T7280] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3020.504824][  T684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3020.541846][  T684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3020.705591][T26255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3020.713765][T26255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3020.986523][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10446'.
[ 3021.209335][ T7080] Bluetooth: hci2: command tx timeout
[ 3021.271086][T12583] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3021.289681][ T7280] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3021.307679][ T7280] ath9k_htc: Failed to initialize the device
[ 3021.356920][ T7280] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3021.572379][T12589] netlink: 'syz.3.10465': attribute type 2 has an invalid length.
[ 3021.614883][T12589] : entered promiscuous mode
[ 3021.640970][T29182] usb 5-1: USB disconnect, device number 98
[ 3022.535883][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10468'.
[ 3022.768753][T10136] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 3022.988896][T10136] usb 6-1: Using ep0 maxpacket: 16
[ 3023.013351][T10136] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[ 3023.027136][T10136] usb 6-1: config 1 has no interface number 0
[ 3023.039262][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10470'.
[ 3023.050042][T12611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10470'.
[ 3023.168229][T10136] usb 6-1: config 1 interface 7 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 3023.224762][T10136] usb 6-1: config 1 interface 7 has no altsetting 0
[ 3023.296457][ T7080] Bluetooth: hci2: command tx timeout
[ 3023.343728][T10136] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=cf.00
[ 3023.353981][T10136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3023.366660][T10136] usb 6-1: Product: syz
[ 3023.384737][T10136] usb 6-1: Manufacturer: syz
[ 3023.402092][T10136] usb 6-1: SerialNumber: syz
[ 3023.439123][T12615] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 3023.877824][T12597] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3023.890279][T10136] em28xx 6-1:1.7: New device syz syz @ 480 Mbps (eb1a:2885, interface 7, class 7)
[ 3023.902802][T10136] em28xx 6-1:1.7: Video interface 7 found: bulk
[ 3024.293398][T10136] em28xx 6-1:1.7: unknown em28xx chip ID (0)
[ 3024.394530][T10136] em28xx 6-1:1.7: reading from i2c device at 0xa0 failed (error=-5)
[ 3024.404990][T10136] em28xx 6-1:1.7: board has no eeprom
[ 3024.478770][T10136] em28xx 6-1:1.7: Identified as Terratec Cinergy H5 (card=79)
[ 3024.488621][T10136] em28xx 6-1:1.7: Currently, V4L2 is not supported on this model
[ 3024.512919][T10106] em28xx 6-1:1.7: Binding DVB extension
[ 3024.518816][T10106] em28xx 6-1:1.7: no endpoint for DVB mode and transfer type 0
[ 3024.575179][T10136] usb 6-1: USB disconnect, device number 2
[ 3024.591208][T10106] em28xx 6-1:1.7: failed to pre-allocate USB transfer buffers for DVB.
[ 3024.603199][T10136] em28xx 6-1:1.7: Disconnecting em28xx
[ 3024.619076][T10106] em28xx 6-1:1.7: Remote control support is not available for this card.
[ 3024.645668][T10136] em28xx 6-1:1.7: Closing input extension
[ 3024.686377][T10136] em28xx 6-1:1.7: Freeing device
[ 3025.188726][T12633] IPVS: Unknown mcast interface: dummy0
[ 3025.209683][T12632] FAULT_INJECTION: forcing a failure.
[ 3025.209683][T12632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3025.251943][T12632] CPU: 0 UID: 0 PID: 12632 Comm: syz.5.10479 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3025.251975][T12632] Tainted: [L]=SOFTLOCKUP
[ 3025.251994][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3025.252008][T12632] Call Trace:
[ 3025.252017][T12632]  <TASK>
[ 3025.252027][T12632]  dump_stack_lvl+0xe8/0x150
[ 3025.252057][T12632]  should_fail_ex+0x412/0x560
[ 3025.252093][T12632]  _copy_from_user+0x2d/0xb0
[ 3025.252117][T12632]  get_compat_msghdr+0xb3/0x4c0
[ 3025.252146][T12632]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 3025.252169][T12632]  ? rcu_is_watching+0x15/0xb0
[ 3025.252194][T12632]  ? ___sys_recvmsg+0x224/0x590
[ 3025.252223][T12632]  ___sys_recvmsg+0x1dd/0x590
[ 3025.252243][T12632]  ? ktime_get_ts64+0xa9/0x3f0
[ 3025.252276][T12632]  ? __pfx____sys_recvmsg+0x10/0x10
[ 3025.252333][T12632]  do_recvmmsg+0x3a5/0x800
[ 3025.252365][T12632]  ? __pfx_do_recvmmsg+0x10/0x10
[ 3025.252400][T12632]  ? _copy_from_user+0x94/0xb0
[ 3025.252439][T12632]  __sys_recvmmsg+0x12f/0x290
[ 3025.252463][T12632]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 3025.252483][T12632]  ? ksys_write+0x242/0x270
[ 3025.252505][T12632]  ? __pfx_ksys_write+0x10/0x10
[ 3025.252528][T12632]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 3025.252557][T12632]  __do_fast_syscall_32+0x1d2/0x540
[ 3025.252576][T12632]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3025.252604][T12632]  ? do_fast_syscall_32+0x33/0x70
[ 3025.252633][T12632]  ? asm_int80_emulation+0x1a/0x20
[ 3025.252653][T12632]  ? do_int80_emulation+0x20e/0x400
[ 3025.252688][T12632]  do_fast_syscall_32+0x33/0x70
[ 3025.252720][T12632]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3025.252745][T12632] RIP: 0023:0xf7f14539
[ 3025.252763][T12632] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3025.252782][T12632] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 3025.252804][T12632] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440
[ 3025.252818][T12632] RDX: 00000000000006f5 RSI: 0000000000000022 RDI: 0000000080000480
[ 3025.252831][T12632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3025.252844][T12632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3025.252856][T12632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3025.252886][T12632]  </TASK>
[ 3025.508482][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 3025.508502][   T30] audit: type=1800 audit(1769406906.951:6206): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10481" name="file0" dev="tmpfs" ino=1601 res=0 errno=0
[ 3025.551529][   T30] audit: type=1804 audit(1769406906.951:6207): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10481" name="/newroot/308/file0" dev="tmpfs" ino=1601 res=1 errno=0
[ 3025.668240][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10482'.
[ 3025.855494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 3025.862691][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 3026.448514][T25788] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 3026.598850][T25788] usb 6-1: Using ep0 maxpacket: 32
[ 3026.606521][T25788] usb 6-1: config 0 has an invalid interface number: 54 but max is 0
[ 3026.620913][T25788] usb 6-1: config 0 has no interface number 0
[ 3026.634780][T25788] usb 6-1: config 0 interface 54 has no altsetting 0
[ 3026.652198][T25788] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[ 3026.664276][T25788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3026.672410][T25788] usb 6-1: Product: syz
[ 3026.676693][T25788] usb 6-1: Manufacturer: syz
[ 3026.681444][T25788] usb 6-1: SerialNumber: syz
[ 3026.695194][T25788] usb 6-1: config 0 descriptor??
[ 3026.962541][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10489'.
[ 3027.921021][T12682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3027.929116][T12682] syzkaller0: entered promiscuous mode
[ 3027.934736][T12682] syzkaller0: entered allmulticast mode
[ 3027.963894][T12682] syzkaller0: mtu greater than device maximum
[ 3027.975665][T12681] tipc: Resetting bearer <eth:syzkaller0>
[ 3028.001498][T12681] tipc: Disabling bearer <eth:syzkaller0>
[ 3028.218561][T12684] FAULT_INJECTION: forcing a failure.
[ 3028.218561][T12684] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3028.251796][T12684] CPU: 1 UID: 0 PID: 12684 Comm: syz.3.10495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3028.251831][T12684] Tainted: [L]=SOFTLOCKUP
[ 3028.251840][T12684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3028.251854][T12684] Call Trace:
[ 3028.251864][T12684]  <TASK>
[ 3028.251874][T12684]  dump_stack_lvl+0xe8/0x150
[ 3028.251906][T12684]  should_fail_ex+0x412/0x560
[ 3028.251948][T12684]  _copy_from_iter+0x3b0/0x1670
[ 3028.251995][T12684]  ? __pfx__copy_from_iter+0x10/0x10
[ 3028.252028][T12684]  ? _copy_from_iter+0x446/0x1670
[ 3028.252068][T12684]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3028.252101][T12684]  bcm_tx_setup+0x11be/0x1bc0
[ 3028.252151][T12684]  bcm_sendmsg+0x46e/0x6c0
[ 3028.252187][T12684]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 3028.252222][T12684]  ? __asan_memset+0x22/0x50
[ 3028.252251][T12684]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 3028.252283][T12684]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3028.252303][T12684]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 3028.252333][T12684]  __sock_sendmsg+0x21c/0x270
[ 3028.252364][T12684]  ____sys_sendmsg+0x4d7/0x810
[ 3028.252396][T12684]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3028.252422][T12684]  ? kstrtoull+0x12f/0x1d0
[ 3028.252472][T12684]  ___sys_sendmsg+0x2a5/0x360
[ 3028.252493][T12684]  ? __lock_acquire+0x6b5/0x2cf0
[ 3028.252518][T12684]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3028.252542][T12684]  ? get_pid_task+0x20/0x1f0
[ 3028.252569][T12684]  ? get_pid_task+0x20/0x1f0
[ 3028.252594][T12684]  ? get_pid_task+0x20/0x1f0
[ 3028.252664][T12684]  ? __fget_files+0x2a/0x420
[ 3028.252690][T12684]  ? __fget_files+0x3a0/0x420
[ 3028.252731][T12684]  __sys_sendmsg+0x183/0x260
[ 3028.252756][T12684]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3028.252791][T12684]  ? __pfx_ksys_write+0x10/0x10
[ 3028.252821][T12684]  __do_fast_syscall_32+0x1d2/0x540
[ 3028.252840][T12684]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3028.252868][T12684]  ? do_fast_syscall_32+0x33/0x70
[ 3028.252904][T12684]  ? asm_int80_emulation+0x1a/0x20
[ 3028.252924][T12684]  ? do_int80_emulation+0x20e/0x400
[ 3028.252959][T12684]  do_fast_syscall_32+0x33/0x70
[ 3028.252991][T12684]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3028.253016][T12684] RIP: 0023:0xf73ed539
[ 3028.253034][T12684] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3028.253053][T12684] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 3028.253076][T12684] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080
[ 3028.253090][T12684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3028.253102][T12684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3028.253121][T12684] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3028.253133][T12684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3028.253165][T12684]  </TASK>
[ 3028.582798][T12688] fuse: Unknown parameter '000000000000000000000050x0000000000000005'
[ 3028.661297][T12691] netlink: 'syz.0.10498': attribute type 13 has an invalid length.
[ 3028.669924][T12691] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10498'.
[ 3028.723535][T12694] netlink: 'syz.3.10497': attribute type 2 has an invalid length.
[ 3028.732244][T12694] netlink: 'syz.3.10497': attribute type 1 has an invalid length.
[ 3028.740923][T12694] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10497'.
[ 3029.089810][T10127] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 3029.235039][T25788] ums_eneub6250 6-1:0.54: USB Mass Storage device detected
[ 3029.253529][T10127] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 3029.262744][T10127] usb 4-1: config 0 has no interface number 0
[ 3029.273083][T10127] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3029.284988][T10127] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3029.305760][T25788] usb 6-1: USB disconnect, device number 3
[ 3029.312839][T10127] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 3029.326382][T10127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3029.326486][T10136] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 3029.369361][T10127] usb 4-1: config 0 descriptor??
[ 3029.508489][T10136] usb 5-1: Using ep0 maxpacket: 8
[ 3029.515703][T10136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3029.527574][T10136] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 3029.536973][T10136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3029.549582][T10136] usb 5-1: config 0 descriptor??
[ 3029.584545][T12689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3029.595191][T12689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3029.771521][T10136] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 3029.817496][T10127] prodikeys 0003:041E:2801.009E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[ 3029.832194][T10127] hid_prodikeys: hid-prodikeys: failed to find output report
[ 3029.832194][T10127] 
[ 3029.998533][T10136] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 3030.023936][T10127] usb 4-1: USB disconnect, device number 13
[ 3030.170938][T10136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 3030.180840][T10136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 3030.192951][T10136] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[ 3030.202195][T10136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3030.210421][T10136] usb 6-1: Product: syz
[ 3030.214805][T10136] usb 6-1: Manufacturer: syz
[ 3030.219531][T10136] usb 6-1: SerialNumber: syz
[ 3030.226424][T10136] usb 6-1: config 0 descriptor??
[ 3030.235484][T10136] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 3030.245342][T10136] usb 6-1: Detected SIO
[ 3030.251571][T10136] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[ 3030.258998][T10136] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7
[ 3030.267778][T10136] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 3030.434135][T25788] usb 6-1: USB disconnect, device number 4
[ 3030.452708][T25788] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 3030.465018][T25788] ftdi_sio 6-1:0.0: device disconnected
[ 3031.098200][T25234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 3031.108608][T25234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 3031.119605][T25234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 3031.152419][T25234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 3031.163866][T25234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 3031.639589][T12722] netlink: 'syz.5.10507': attribute type 5 has an invalid length.
[ 3032.154550][T10127] usb 5-1: USB disconnect, device number 99
[ 3032.610543][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10510'.
[ 3032.844974][T26255] bond1 (unregistering): Released all slaves
[ 3032.952021][T26255] : left promiscuous mode
[ 3033.084933][T26255] tipc: Disabling bearer <udp:syz2>
[ 3033.107327][T26255] tipc: Left network mode
[ 3033.208649][ T7080] Bluetooth: hci0: command tx timeout
[ 3033.586836][T12711] chnl_net:caif_netlink_parms(): no params data found
[ 3033.736628][T26255] hsr_slave_0: left promiscuous mode
[ 3033.760320][T26255] hsr_slave_1: left promiscuous mode
[ 3033.779640][T26255] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3033.793390][T26255] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3034.825684][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10518'.
[ 3034.981387][T25788] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 3035.108700][T10119] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 3035.138925][T25788] usb 5-1: Using ep0 maxpacket: 8
[ 3035.160211][T25788] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3035.170619][T25788] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3035.182112][T25788] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3035.192668][T25788] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3035.206304][T25788] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3035.215784][T25788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3035.288779][ T7080] Bluetooth: hci0: command tx timeout
[ 3035.311277][T10119] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3035.328675][T10119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3035.347771][T10119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3035.359198][T10119] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3035.372699][T10119] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3035.382011][T10119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3035.400391][T10119] usb 6-1: config 0 descriptor??
[ 3035.455083][T25788] usb 5-1: GET_CAPABILITIES returned 0
[ 3035.463129][T25788] usbtmc 5-1:16.0: can't read capabilities
[ 3035.682648][T26255] team0 (unregistering): Port device team_slave_1 removed
[ 3035.751519][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.762252][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.771350][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.802103][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.811281][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.820427][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.834463][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.843621][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.852750][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.861975][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.879291][T10119] plantronics 0003:047F:FFFF.009F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 3035.897264][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.906437][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.915565][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.924710][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.987407][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3035.996592][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3036.014046][T10119] usb 5-1: USB disconnect, device number 100
[ 3036.213525][T12787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3036.226267][T12787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3036.767840][T12777] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 3036.922031][T10119] usb 6-1: USB disconnect, device number 5
[ 3037.041986][T12711] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3037.064178][T12711] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3037.072095][T12711] bridge_slave_0: entered allmulticast mode
[ 3037.096470][T12711] bridge_slave_0: entered promiscuous mode
[ 3037.106472][T12711] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3037.114541][T12711] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3037.136147][T12711] bridge_slave_1: entered allmulticast mode
[ 3037.156321][T12711] bridge_slave_1: entered promiscuous mode
[ 3037.304497][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3037.325089][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3037.381917][ T7080] Bluetooth: hci0: command tx timeout
[ 3037.394178][T12711] team0: Port device team_slave_0 added
[ 3037.405739][T12711] team0: Port device team_slave_1 added
[ 3037.491883][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3037.509050][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3037.587240][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3037.693177][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3037.724339][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3037.793068][T12815] input: syz1 as /devices/virtual/input/input215
[ 3037.820163][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3038.692961][ T7080] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3
[ 3038.763447][T12711] hsr_slave_0: entered promiscuous mode
[ 3038.809890][T12711] hsr_slave_1: entered promiscuous mode
[ 3038.862002][T12711] debugfs: 'hsr0' already exists in 'hsr'
[ 3038.878454][T12711] Cannot create hsr debugfs directory
[ 3038.912565][T12831] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10527'.
[ 3038.943384][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10527'.
[ 3039.029590][T12831] macsec1: entered promiscuous mode
[ 3039.044930][T12831] hsr0: entered promiscuous mode
[ 3039.057342][T12831] macsec1: entered allmulticast mode
[ 3039.063042][T12831] hsr0: entered allmulticast mode
[ 3039.075053][T12831] hsr_slave_0: entered allmulticast mode
[ 3039.086717][   T30] audit: type=1326 audit(1769406920.521:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.5.10524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 3039.086903][T12831] hsr_slave_1: entered allmulticast mode
[ 3039.178587][   T30] audit: type=1326 audit(1769406920.531:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.5.10524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 3039.220041][   T30] audit: type=1326 audit(1769406920.531:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.5.10524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 3039.451935][T12831] hsr0: left allmulticast mode
[ 3039.457315][T12831] hsr_slave_0: left allmulticast mode
[ 3039.467177][T12831] hsr_slave_1: left allmulticast mode
[ 3039.467330][ T7080] Bluetooth: hci0: command tx timeout
[ 3039.481453][T12831] hsr0: left promiscuous mode
[ 3039.488639][   T30] audit: type=1326 audit(1769406920.581:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.5.10524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 3039.829307][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10528'.
[ 3039.839395][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10528'.
[ 3040.042289][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10530'.
[ 3040.076963][T12848] ipt_REJECT: ECHOREPLY no longer supported.
[ 3040.275005][T12711] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3040.326421][T12711] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3040.338096][T12711] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3040.365698][T12711] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3040.399775][T10136] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 3040.568743][T10136] usb 6-1: device descriptor read/64, error -71
[ 3040.808498][T10136] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 3040.883215][T12871] syz_tun: entered allmulticast mode
[ 3040.944175][T12711] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3040.951689][T10136] usb 6-1: device descriptor read/64, error -71
[ 3041.015125][T12711] 8021q: adding VLAN 0 to HW filter on device team0
[ 3041.040136][T29830] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3041.047404][T29830] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3041.058821][T10136] usb usb6-port1: attempt power cycle
[ 3041.123184][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3041.130408][ T9740] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3041.409865][T12881] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 3041.418735][T10136] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 3041.423336][T12881] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 3041.440450][T10136] usb 6-1: device descriptor read/8, error -71
[ 3041.508774][T12879] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3041.520615][T12879] syzkaller0: entered promiscuous mode
[ 3041.585177][T12879] syzkaller0: entered allmulticast mode
[ 3041.630359][T12879] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 3041.768923][T10136] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 3041.841669][T10136] usb 6-1: device descriptor read/8, error -71
[ 3041.849732][T10127] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 3041.907684][T12886] tipc: Resetting bearer <eth:syzkaller0>
[ 3041.946452][T12878] tipc: Resetting bearer <eth:syzkaller0>
[ 3041.951463][T10136] usb usb6-port1: unable to enumerate USB device
[ 3042.028477][T10127] usb 5-1: Using ep0 maxpacket: 16
[ 3042.034549][T12878] tipc: Disabling bearer <eth:syzkaller0>
[ 3042.044149][T10127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[ 3042.061371][T10127] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[ 3042.078806][T10127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3042.095288][T10127] usb 5-1: Product: syz
[ 3042.112093][T10127] usb 5-1: Manufacturer: syz
[ 3042.116762][T10127] usb 5-1: SerialNumber: syz
[ 3042.149490][T10127] usb 5-1: config 0 descriptor??
[ 3042.169720][T10127] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected
[ 3042.209136][T10127] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 3042.264867][T12711] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3042.386639][T12711] veth0_vlan: entered promiscuous mode
[ 3042.417137][T12711] veth1_vlan: entered promiscuous mode
[ 3042.468788][T10127] usb 5-1: USB disconnect, device number 101
[ 3042.499500][T10127] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 3042.511927][T12711] veth0_macvtap: entered promiscuous mode
[ 3042.524251][T12711] veth1_macvtap: entered promiscuous mode
[ 3042.544621][T10127] kobil_sct 5-1:0.0: device disconnected
[ 3042.552633][T12711] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3042.565871][T12711] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3042.605969][T26255] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3042.635998][T26255] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3042.705010][  T684] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3042.720061][T12898] input: syz1 as /devices/virtual/input/input216
[ 3042.742278][  T684] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3042.836306][  T684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3042.844496][  T684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3042.902204][  T684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3042.911088][  T684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3043.337958][T12920] FAULT_INJECTION: forcing a failure.
[ 3043.337958][T12920] name failslab, interval 1, probability 0, space 0, times 0
[ 3043.372162][T12920] CPU: 0 UID: 0 PID: 12920 Comm: syz.6.10543 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3043.372197][T12920] Tainted: [L]=SOFTLOCKUP
[ 3043.372205][T12920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3043.372218][T12920] Call Trace:
[ 3043.372227][T12920]  <TASK>
[ 3043.372236][T12920]  dump_stack_lvl+0xe8/0x150
[ 3043.372269][T12920]  should_fail_ex+0x412/0x560
[ 3043.372304][T12920]  should_failslab+0xa8/0x100
[ 3043.372331][T12920]  __kmalloc_cache_noprof+0x83/0x6e0
[ 3043.372353][T12920]  ? nfnetlink_rcv+0xfe1/0x27b0
[ 3043.372388][T12920]  nfnetlink_rcv+0xfe1/0x27b0
[ 3043.372454][T12920]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 3043.372503][T12920]  ? ref_tracker_free+0x693/0x840
[ 3043.372563][T12920]  ? __netlink_deliver_tap+0x807/0x850
[ 3043.372585][T12920]  ? netlink_deliver_tap+0x2e/0x1b0
[ 3043.372626][T12920]  netlink_unicast+0x80f/0x9b0
[ 3043.372666][T12920]  ? __pfx_netlink_unicast+0x10/0x10
[ 3043.372696][T12920]  ? __alloc_skb+0x193/0x390
[ 3043.372726][T12920]  ? netlink_sendmsg+0x650/0xb40
[ 3043.372746][T12920]  ? skb_put+0x11b/0x210
[ 3043.372780][T12920]  netlink_sendmsg+0x813/0xb40
[ 3043.372813][T12920]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3043.372850][T12920]  ? __asan_memset+0x22/0x50
[ 3043.372877][T12920]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 3043.372908][T12920]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3043.372927][T12920]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3043.372950][T12920]  __sock_sendmsg+0x21c/0x270
[ 3043.372979][T12920]  ____sys_sendmsg+0x4d7/0x810
[ 3043.373008][T12920]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3043.373034][T12920]  ? kstrtoull+0x12f/0x1d0
[ 3043.373072][T12920]  ___sys_sendmsg+0x2a5/0x360
[ 3043.373091][T12920]  ? __lock_acquire+0x6b5/0x2cf0
[ 3043.373117][T12920]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3043.373139][T12920]  ? get_pid_task+0x20/0x1f0
[ 3043.373167][T12920]  ? get_pid_task+0x20/0x1f0
[ 3043.373191][T12920]  ? get_pid_task+0x20/0x1f0
[ 3043.373246][T12920]  ? __fget_files+0x2a/0x420
[ 3043.373271][T12920]  ? __fget_files+0x3a0/0x420
[ 3043.373308][T12920]  __sys_sendmsg+0x183/0x260
[ 3043.373331][T12920]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3043.373365][T12920]  ? __pfx_ksys_write+0x10/0x10
[ 3043.373394][T12920]  __do_fast_syscall_32+0x1d2/0x540
[ 3043.373413][T12920]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3043.373441][T12920]  ? do_fast_syscall_32+0x33/0x70
[ 3043.373470][T12920]  ? asm_int80_emulation+0x1a/0x20
[ 3043.373489][T12920]  ? do_int80_emulation+0x20e/0x400
[ 3043.373524][T12920]  do_fast_syscall_32+0x33/0x70
[ 3043.373557][T12920]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3043.373583][T12920] RIP: 0023:0xf73bd539
[ 3043.373601][T12920] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3043.373620][T12920] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 3043.373642][T12920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[ 3043.373657][T12920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3043.373669][T12920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3043.373682][T12920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3043.373694][T12920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3043.373725][T12920]  </TASK>
[ 3044.056877][T12908] vivid-000: kernel_thread() failed
[ 3044.933941][   T30] audit: type=1800 audit(1769406926.381:6212): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10544" name="bus" dev="tmpfs" ino=28 res=0 errno=0
[ 3045.526526][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10552'.
[ 3046.058523][T10119] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 3046.209926][T10119] usb 5-1: device descriptor read/64, error -71
[ 3046.468516][T10119] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 3046.638481][T10119] usb 5-1: device descriptor read/64, error -71
[ 3046.751070][T10119] usb usb5-port1: attempt power cycle
[ 3047.108474][T10119] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 3047.163169][T10119] usb 5-1: device descriptor read/8, error -71
[ 3047.418518][T10119] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 3047.442015][T10119] usb 5-1: device descriptor read/8, error -71
[ 3047.589336][T10119] usb usb5-port1: unable to enumerate USB device
[ 3048.433724][T12993] FAULT_INJECTION: forcing a failure.
[ 3048.433724][T12993] name failslab, interval 1, probability 0, space 0, times 0
[ 3048.447397][T12993] CPU: 1 UID: 0 PID: 12993 Comm: syz.0.10561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3048.447422][T12993] Tainted: [L]=SOFTLOCKUP
[ 3048.447428][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3048.447438][T12993] Call Trace:
[ 3048.447444][T12993]  <TASK>
[ 3048.447451][T12993]  dump_stack_lvl+0xe8/0x150
[ 3048.447476][T12993]  should_fail_ex+0x412/0x560
[ 3048.447502][T12993]  should_failslab+0xa8/0x100
[ 3048.447522][T12993]  __kmalloc_cache_noprof+0x83/0x6e0
[ 3048.447539][T12993]  ? bcm_tx_setup+0x3ab/0x1bc0
[ 3048.447572][T12993]  bcm_tx_setup+0x3ab/0x1bc0
[ 3048.447601][T12993]  ? __local_bh_enable_ip+0xd0/0x130
[ 3048.447621][T12993]  bcm_sendmsg+0x46e/0x6c0
[ 3048.447646][T12993]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 3048.447670][T12993]  ? __asan_memset+0x22/0x50
[ 3048.447691][T12993]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 3048.447713][T12993]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3048.447727][T12993]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 3048.447748][T12993]  __sock_sendmsg+0x21c/0x270
[ 3048.447769][T12993]  ____sys_sendmsg+0x4d7/0x810
[ 3048.447791][T12993]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3048.447809][T12993]  ? kstrtoull+0x12f/0x1d0
[ 3048.447835][T12993]  ___sys_sendmsg+0x2a5/0x360
[ 3048.447849][T12993]  ? __lock_acquire+0x6b5/0x2cf0
[ 3048.447868][T12993]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3048.447884][T12993]  ? get_pid_task+0x20/0x1f0
[ 3048.447903][T12993]  ? get_pid_task+0x20/0x1f0
[ 3048.447920][T12993]  ? get_pid_task+0x20/0x1f0
[ 3048.447959][T12993]  ? __fget_files+0x2a/0x420
[ 3048.447977][T12993]  ? __fget_files+0x3a0/0x420
[ 3048.448002][T12993]  __sys_sendmsg+0x183/0x260
[ 3048.448019][T12993]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3048.448042][T12993]  ? __pfx_ksys_write+0x10/0x10
[ 3048.448062][T12993]  __do_fast_syscall_32+0x1d2/0x540
[ 3048.448076][T12993]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3048.448095][T12993]  ? do_fast_syscall_32+0x33/0x70
[ 3048.448117][T12993]  ? asm_int80_emulation+0x1a/0x20
[ 3048.448131][T12993]  ? do_int80_emulation+0x20e/0x400
[ 3048.448156][T12993]  do_fast_syscall_32+0x33/0x70
[ 3048.448179][T12993]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3048.448197][T12993] RIP: 0023:0xf739d539
[ 3048.448210][T12993] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3048.448223][T12993] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 3048.448239][T12993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[ 3048.448250][T12993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3048.448259][T12993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3048.448268][T12993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3048.448277][T12993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3048.448298][T12993]  </TASK>
[ 3048.980293][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10564'.
[ 3049.724485][T13015] FAULT_INJECTION: forcing a failure.
[ 3049.724485][T13015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3049.750517][T13015] CPU: 1 UID: 0 PID: 13015 Comm: syz.6.10570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3049.750552][T13015] Tainted: [L]=SOFTLOCKUP
[ 3049.750559][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3049.750578][T13015] Call Trace:
[ 3049.750586][T13015]  <TASK>
[ 3049.750593][T13015]  dump_stack_lvl+0xe8/0x150
[ 3049.750618][T13015]  should_fail_ex+0x412/0x560
[ 3049.750643][T13015]  _copy_to_user+0x31/0xb0
[ 3049.750662][T13015]  simple_read_from_buffer+0xe1/0x170
[ 3049.750689][T13015]  proc_fail_nth_read+0x1bb/0x230
[ 3049.750708][T13015]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3049.750726][T13015]  ? rw_verify_area+0x2a6/0x4d0
[ 3049.750749][T13015]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3049.750765][T13015]  vfs_read+0x20c/0xa70
[ 3049.750777][T13015]  ? fdget_pos+0x246/0x320
[ 3049.750800][T13015]  ? __pfx___mutex_lock+0x10/0x10
[ 3049.750823][T13015]  ? __pfx_vfs_read+0x10/0x10
[ 3049.750841][T13015]  ? __fget_files+0x2a/0x420
[ 3049.750863][T13015]  ? __fget_files+0x3a0/0x420
[ 3049.750880][T13015]  ? __fget_files+0x2a/0x420
[ 3049.750904][T13015]  ksys_read+0x150/0x270
[ 3049.750920][T13015]  ? __pfx_ksys_read+0x10/0x10
[ 3049.750937][T13015]  ? asm_int80_emulation+0x1a/0x20
[ 3049.750953][T13015]  ? asm_int80_emulation+0x1a/0x20
[ 3049.750967][T13015]  do_int80_emulation+0x111/0x400
[ 3049.750990][T13015]  ? clear_bhb_loop+0x60/0xb0
[ 3049.751005][T13015]  ? clear_bhb_loop+0x60/0xb0
[ 3049.751022][T13015]  asm_int80_emulation+0x1a/0x20
[ 3049.751036][T13015] RIP: 0023:0xf712572b
[ 3049.751050][T13015] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 3049.751063][T13015] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 3049.751079][T13015] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53e65d0
[ 3049.751090][T13015] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 3049.751098][T13015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3049.751107][T13015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3049.751115][T13015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3049.751137][T13015]  </TASK>
[ 3050.658817][T10136] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 3050.681365][T13013] netlink: 180 bytes leftover after parsing attributes in process `syz.5.10567'.
[ 3050.739993][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10567'.
[ 3050.760474][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10567'.
[ 3050.798551][T10136] usb 5-1: device descriptor read/64, error -71
[ 3051.065555][T10136] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 3051.198527][T10136] usb 5-1: device descriptor read/64, error -71
[ 3051.319512][T10136] usb usb5-port1: attempt power cycle
[ 3051.608000][T13041] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.10577'.
[ 3051.621482][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10577'.
[ 3051.652986][T13041] macsec1: entered promiscuous mode
[ 3051.658747][T13041] hsr0: entered promiscuous mode
[ 3051.666271][T13041] macsec1: entered allmulticast mode
[ 3051.672038][T13041] hsr0: entered allmulticast mode
[ 3051.678553][T10136] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 3051.687507][T13041] hsr_slave_0: entered allmulticast mode
[ 3051.698618][T13041] hsr_slave_1: entered allmulticast mode
[ 3051.711103][T10136] usb 5-1: device descriptor read/8, error -71
[ 3051.721466][T13041] hsr0: left allmulticast mode
[ 3051.728104][T13041] hsr_slave_0: left allmulticast mode
[ 3051.735552][T13041] hsr_slave_1: left allmulticast mode
[ 3051.743292][T13041] hsr0: left promiscuous mode
[ 3051.817791][T13045] netlink: 'syz.5.10578': attribute type 4 has an invalid length.
[ 3051.948847][T10136] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 3051.980155][T10136] usb 5-1: device descriptor read/8, error -71
[ 3052.099029][T10136] usb usb5-port1: unable to enumerate USB device
[ 3052.784197][T13059] syzkaller0: entered promiscuous mode
[ 3052.790018][T13059] syzkaller0: entered allmulticast mode
[ 3054.888683][T13091] geneve2: entered allmulticast mode
[ 3055.455078][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10593'.
[ 3055.464632][T13104] bridge0: entered allmulticast mode
[ 3055.517070][T13106] netlink: 'syz.2.10594': attribute type 8 has an invalid length.
[ 3055.542828][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10594'.
[ 3055.578135][T13106] bond0: entered promiscuous mode
[ 3055.606767][T13106] gretap0: entered promiscuous mode
[ 3055.621066][T13106] ip6gretap0: entered promiscuous mode
[ 3055.639605][T13106] hsr1: entered promiscuous mode
[ 3057.119686][T13128] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 3057.170734][T13130] fuse: Bad value for 'group_id'
[ 3057.175908][T13130] fuse: Bad value for 'group_id'
[ 3058.228495][T10117] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 3058.388774][T10117] usb 6-1: Using ep0 maxpacket: 16
[ 3058.414564][T10117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[ 3058.433584][T10117] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[ 3058.446541][T10117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3058.454968][T10117] usb 6-1: Product: syz
[ 3058.459517][T10117] usb 6-1: Manufacturer: syz
[ 3058.464150][T10117] usb 6-1: SerialNumber: syz
[ 3058.472848][T10117] usb 6-1: config 0 descriptor??
[ 3058.487012][T10117] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected
[ 3058.503727][T10117] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 3058.797886][T29182] usb 6-1: USB disconnect, device number 10
[ 3058.816686][T29182] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 3058.839137][T29182] kobil_sct 6-1:0.0: device disconnected
[ 3087.292806][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 3087.300031][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 3140.569529][T25234] Bluetooth: hci2: command 0x0406 tx timeout
[ 3148.732251][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 3148.740622][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 3155.938499][T25234] Bluetooth: hci0: command 0x0406 tx timeout
[ 3210.173854][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 3210.181703][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 3213.368785][   T31] INFO: task kworker/0:3:21277 blocked for more than 143 seconds.
[ 3213.376739][   T31]       Tainted: G             L      syzkaller #0
[ 3213.383419][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3213.392269][   T31] task:kworker/0:3     state:D stack:21408 pid:21277 tgid:21277 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 3213.404481][   T31] Workqueue: usb_hub_wq hub_event
[ 3213.409637][   T31] Call Trace:
[ 3213.412952][   T31]  <TASK>
[ 3213.415952][   T31]  __schedule+0x14ef/0x4fb0
[ 3213.420621][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3213.425876][   T31]  ? __pfx___schedule+0x10/0x10
[ 3213.431728][   T31]  ? schedule+0x90/0x360
[ 3213.436044][   T31]  schedule+0x164/0x360
[ 3213.440390][   T31]  usb_kill_urb+0x1cf/0x2f0
[ 3213.444946][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 3213.450054][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 3213.456241][   T31]  usb_start_wait_urb+0x1a3/0x510
[ 3213.461939][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 3213.467527][   T31]  usb_control_msg+0x232/0x3e0
[ 3213.472378][   T31]  hub_port_init+0xb1e/0x28d0
[ 3213.477108][   T31]  hub_event+0x2593/0x4f30
[ 3213.482411][   T31]  ? __pfx_hub_event+0x10/0x10
[ 3213.487229][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3213.493026][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 3213.499256][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3213.505001][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3213.510843][   T31]  process_scheduled_works+0xaec/0x17a0
[ 3213.516441][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3213.522532][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3213.527603][   T31]  ? assign_work+0x3d3/0x440
[ 3213.532871][   T31]  worker_thread+0x89f/0xd90
[ 3213.537551][   T31]  kthread+0x726/0x8b0
[ 3213.541726][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 3213.546911][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.551616][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3213.556877][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.561612][   T31]  ret_from_fork+0x51b/0xa40
[ 3213.566240][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3213.571480][   T31]  ? __switch_to+0xc82/0x1410
[ 3213.576219][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.580900][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3213.585742][   T31]  </TASK>
[ 3213.588948][   T31] INFO: task kworker/1:13:29185 blocked for more than 143 seconds.
[ 3213.596872][   T31]       Tainted: G             L      syzkaller #0
[ 3213.603516][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3213.612317][   T31] task:kworker/1:13    state:D stack:21568 pid:29185 tgid:29185 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 3213.624462][   T31] Workqueue: usb_hub_wq hub_event
[ 3213.629571][   T31] Call Trace:
[ 3213.633437][   T31]  <TASK>
[ 3213.636412][   T31]  __schedule+0x14ef/0x4fb0
[ 3213.641057][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3213.646126][   T31]  ? __pfx___schedule+0x10/0x10
[ 3213.651070][   T31]  ? schedule+0x90/0x360
[ 3213.655362][   T31]  schedule+0x164/0x360
[ 3213.659626][   T31]  usb_kill_urb+0x1cf/0x2f0
[ 3213.664253][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 3213.669352][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 3213.675476][   T31]  usb_start_wait_urb+0x1a3/0x510
[ 3213.680691][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 3213.686300][   T31]  usb_control_msg+0x232/0x3e0
[ 3213.691339][   T31]  hub_port_init+0xb1e/0x28d0
[ 3213.696099][   T31]  hub_event+0x2593/0x4f30
[ 3213.700692][   T31]  ? __pfx_hub_event+0x10/0x10
[ 3213.705510][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3213.711331][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3213.717167][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3213.723162][   T31]  process_scheduled_works+0xaec/0x17a0
[ 3213.728854][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3213.735455][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3213.740732][   T31]  ? assign_work+0x3d3/0x440
[ 3213.745382][   T31]  worker_thread+0x89f/0xd90
[ 3213.750087][   T31]  kthread+0x726/0x8b0
[ 3213.754200][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 3213.759425][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.764060][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3213.769395][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.774049][   T31]  ret_from_fork+0x51b/0xa40
[ 3213.778744][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3213.783888][   T31]  ? __switch_to+0xc82/0x1410
[ 3213.788651][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.793284][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3213.798074][   T31]  </TASK>
[ 3213.801371][   T31] 
[ 3213.801371][   T31] Showing all locks held in the system:
[ 3213.809186][   T31] 1 lock held by khungtaskd/31:
[ 3213.814046][   T31]  #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 3213.824038][   T31] 2 locks held by getty/5588:
[ 3213.828811][   T31]  #0: ffff888030f8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 3213.839305][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 3213.849517][   T31] 1 lock held by ipvs-e:31:0/19144:
[ 3213.854731][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140
[ 3213.865037][   T31] 5 locks held by kworker/0:3/21277:
[ 3213.870415][   T31]  #0: ffff88801ead9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 3213.881941][   T31]  #1: ffffc90004f5fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 3213.893898][   T31]  #2: ffff888029a3f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[ 3213.902913][   T31]  #3: ffff8881447eb518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[ 3213.912977][   T31]  #4: ffff8880298df768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[ 3213.922819][   T31] 5 locks held by kworker/1:13/29185:
[ 3213.928240][   T31]  #0: ffff88801ead9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 3213.940336][   T31]  #1: ffffc900041cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 3213.952350][   T31]  #2: ffff888144b6f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[ 3213.961407][   T31]  #3: ffff888144b92518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[ 3213.971540][   T31]  #4: ffff888143ff2568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[ 3213.981343][   T31] 5 locks held by kworker/u8:5/29828:
[ 3213.986786][   T31] 
[ 3213.989299][   T31] =============================================
[ 3213.989299][   T31] 
[ 3213.997749][   T31] NMI backtrace for cpu 1
[ 3213.997770][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3213.997790][   T31] Tainted: [L]=SOFTLOCKUP
[ 3213.997795][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3213.997804][   T31] Call Trace:
[ 3213.997811][   T31]  <TASK>
[ 3213.997817][   T31]  dump_stack_lvl+0xe8/0x150
[ 3213.997842][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 3213.997860][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3213.997877][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 3213.997901][   T31]  sys_info+0x135/0x170
[ 3213.997915][   T31]  watchdog+0xf90/0xfe0
[ 3213.997939][   T31]  ? watchdog+0x209/0xfe0
[ 3213.997964][   T31]  kthread+0x726/0x8b0
[ 3213.997987][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3213.998007][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.998028][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3213.998047][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.998067][   T31]  ret_from_fork+0x51b/0xa40
[ 3213.998085][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3213.998099][   T31]  ? __switch_to+0xc82/0x1410
[ 3213.998123][   T31]  ? __pfx_kthread+0x10/0x10
[ 3213.998144][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3213.998175][   T31]  </TASK>
[ 3213.998181][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 3214.124502][    C0] NMI backtrace for cpu 0
[ 3214.124523][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3214.124547][    C0] Tainted: [L]=SOFTLOCKUP
[ 3214.124554][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3214.124570][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 3214.124604][    C0] Code: 28 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 3214.124620][    C0] RSP: 0018:ffffffff8e007dc0 EFLAGS: 00000246
[ 3214.124637][    C0] RAX: 00000000026467ff RBX: ffffffff8198427d RCX: 0000000080000001
[ 3214.124650][    C0] RDX: 0000000000000001 RSI: ffffffff8dacfb53 RDI: ffffffff8be73880
[ 3214.124663][    C0] RBP: ffffffff8e007eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[ 3214.124677][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fceef70
[ 3214.124690][    C0] R13: 1ffffffff1c12a78 R14: 0000000000000000 R15: 0000000000000000
[ 3214.124703][    C0] FS:  0000000000000000(0000) GS:ffff888125926000(0000) knlGS:0000000000000000
[ 3214.124717][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3214.124729][    C0] CR2: 00005631eab86168 CR3: 000000000e146000 CR4: 00000000003526f0
[ 3214.124745][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3214.124756][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3214.124767][    C0] Call Trace:
[ 3214.124775][    C0]  <TASK>
[ 3214.124782][    C0]  default_idle+0x9/0x20
[ 3214.124799][    C0]  default_idle_call+0x72/0xb0
[ 3214.124817][    C0]  do_idle+0x1bd/0x500
[ 3214.124840][    C0]  ? __pfx_do_idle+0x10/0x10
[ 3214.124859][    C0]  ? do_idle+0x4cf/0x500
[ 3214.124882][    C0]  cpu_startup_entry+0x43/0x60
[ 3214.124902][    C0]  rest_init+0x2de/0x300
[ 3214.124921][    C0]  start_kernel+0x380/0x3d0
[ 3214.124941][    C0]  x86_64_start_reservations+0x24/0x30
[ 3214.124965][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 3214.124989][    C0]  common_startup_64+0x13e/0x147
[ 3214.125021][    C0]  </TASK>
[ 3214.329515][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 3214.336404][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3214.347366][   T31] Tainted: [L]=SOFTLOCKUP
[ 3214.351701][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3214.361872][   T31] Call Trace:
[ 3214.365353][   T31]  <TASK>
[ 3214.368321][   T31]  vpanic+0x1e0/0x670
[ 3214.372720][   T31]  panic+0xc5/0xd0
[ 3214.376452][   T31]  ? __pfx_panic+0x10/0x10
[ 3214.380986][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 3214.386366][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 3214.392549][   T31]  watchdog+0xfda/0xfe0
[ 3214.396794][   T31]  ? watchdog+0x209/0xfe0
[ 3214.401173][   T31]  kthread+0x726/0x8b0
[ 3214.405269][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3214.409976][   T31]  ? __pfx_kthread+0x10/0x10
[ 3214.414595][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3214.419815][   T31]  ? __pfx_kthread+0x10/0x10
[ 3214.424444][   T31]  ret_from_fork+0x51b/0xa40
[ 3214.429063][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3214.434286][   T31]  ? __switch_to+0xc82/0x1410
[ 3214.439086][   T31]  ? __pfx_kthread+0x10/0x10
[ 3214.443719][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3214.448526][   T31]  </TASK>
[ 3214.452192][   T31] Kernel Offset: disabled
[ 3214.456534][   T31] Rebooting in 86400 seconds..