last executing test programs:

7m57.44338257s ago: executing program 0 (id=111):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x0, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd35, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40018)
eventfd(0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x2, 0x0, 0x80, {0xffffffffffffffff, 0xd000, 0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})
syz_open_dev$tty1(0xc, 0x4, 0x3)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xf, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b583fb77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e924afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
r7 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x206800, 0x0)
sendto$inet6(r7, &(0x7f0000000440)="6b58121f2ebbf82d397b0c713da59556a379cb187439b3fcc273512b4a75aa22a18ff11aaea4585d748312b64e5632cf56b5470ebb104f542931969a6c65ae47acc4e8d69c2ed8854acb347d63d949cac9829ecc64cb34a370e7e8cbc62fa87689e5a1e0688c07b520bb3831aad1d3bc61e46921a0347c920dcbc73b041e7d02d96fa397e478894abec9d780aec371fe4deccb7b9f88e035c7dc509de8d385735903702cd144d22df02188c56988b278aff70061326e1f4dee14a9098ff9a213d5e5d9ad6ed8b8793aa080693cf5191f2be6a456c9591ad6a96a53076dc06ddc97b5d5ab4caec7b899", 0xe9, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
syz_open_procfs(0x0, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r8, 0x5608, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000000010104000000002100000002000000100001800c168164193e31c09bd3c70d02a10cde42a9205ed6abef888532d1bd8f82880db2af227241b2e9ed4c7013a524343fb4b2fa9ce5619985a4987f59aa929db44eeb0bafb0503fc31c22a81955ac93a8e5142ac8814a113631619802b6d04635ebb26ede08b2660d3a16c7658ac3e1987b24832205c3eb6ba6545e47dfbaa2cce72eb7bd1ff45ca5113f1ff067f9018243c6a2f10bba20599aff72c09e1d38ac2f2d672363ac"], 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

7m52.488948379s ago: executing program 0 (id=120):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000})
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
set_mempolicy(0x2, 0x0, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
clock_settime(0x5, &(0x7f00000000c0)={0x0, 0x989680})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040), 0x12)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettaction={0x30, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x629}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c041}, 0x20000000)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045518, &(0x7f0000002a40))
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f75547a4f49b418c217fee9ca2a74268e32cc137b651da2eee95a40d53dbb480f9d625131f139270b4ab21674f350300000000000000f90d9c4ffa3fe3dab121", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
gettid()

7m48.535533736s ago: executing program 0 (id=147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x20}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000008010800000000000000000200000206000240dada00000900010073797a300003003a000000000000000000000000f03d788fb1b9d681d806b7b31b6f8e45964de692d3b3fa1c4380c682309fc9c86509c5"], 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000)
unlink(&(0x7f0000000000)='./file0\x00')
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5)
r4 = socket$netlink(0x10, 0x3, 0x0)
mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})

7m46.319392348s ago: executing program 0 (id=159):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
chroot(&(0x7f0000000080)='./file0/file0\x00')
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x3c, 0x0, &(0x7f0000000280))
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f0300000000000003763022fafe4eba0d0000009ee5010000000100000052a705250e6182949a3651f60a84c9f5d1938037e786a6d4bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040044)

7m44.663572077s ago: executing program 0 (id=164):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000080}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4)
recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012101, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xe, 0x7, 0x1, 0x0, "5d8c16a82e284cd5a5c0"}]}], {0x14}}, 0x84}}, 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x7}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)

7m44.335500377s ago: executing program 0 (id=167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000008010800000000000000000200000206000240dada00000900010073797a300003003a000000000000000000000000f03d788fb1b9d681d806b7b31b6f8e45964de692d3b3fa1c4380c682309fc9c86509c5"], 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000)
unlink(&(0x7f0000000000)='./file0\x00')
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5)
r4 = socket$netlink(0x10, 0x3, 0x0)
mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})

7m43.525712691s ago: executing program 32 (id=167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000008010800000000000000000200000206000240dada00000900010073797a300003003a000000000000000000000000f03d788fb1b9d681d806b7b31b6f8e45964de692d3b3fa1c4380c682309fc9c86509c5"], 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000)
unlink(&(0x7f0000000000)='./file0\x00')
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5)
r4 = socket$netlink(0x10, 0x3, 0x0)
mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})

10.224678007s ago: executing program 2 (id=1904):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000fc0)={{@hyper, 0x2}, @hyper, 0x0, 0x7fffffffffffffff, 0x20005f, 0x8, 0x8, 0x0, 0x876})
r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0)
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)

10.171226216s ago: executing program 4 (id=1906):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d3050000400000007910a8000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
dup(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x11, 0x90, [], 0x0, 0x0, 0x20001100}, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
syz_open_dev$sg(0x0, 0x0, 0x8002)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)
r8 = eventfd(0x0)
read$eventfd(r8, &(0x7f0000000240), 0x8)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

9.881437314s ago: executing program 2 (id=1909):
r0 = socket$inet(0x2, 0xa, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e041f0204"], 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502)
dup2(r3, r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000]}})
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00')
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020)
write$dsp(0xffffffffffffffff, &(0x7f0000000000), 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000008000000000000000000000000000000004496861a760d166dae583b0e5d0d4222dcad5b317752302a53bcbd9264514e8402f460c812cb57ffb3dd85463c31d787382dbe77981302f282d3d9185c9398161cb6671f0f223c0f81f1a2c939ea186f235e2137964bca"], 0x48)
syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
epoll_create1(0x0)
pselect6(0x40, &(0x7f0000010140)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x40000000000000, 0x4, 0x4}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0x7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000060000000000000000000018110000", @ANYBLOB="0aa9be6cad7ac9bd49ba2c0e2c9cd32d91554ceeb6ba9f372e8421b7f6d4f9b1983d52305b65bc5227bef937f2c23dd9726835653a98c09c80c09014d2d73bfb127e250323e604bdfb34be6b899de8118e06d5254ea9ea68ec4f65d2e2e99a1b9fe10ab11eeee84b2f96bd7164138d5230a8f44d846f5f90bb9dff4caca1dfc9b0c763c54d43377aad3f6a4d417f9f687fe407ed2f57f88fb2aee9fed975abf1f67fbfe8b7", @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1006, &(0x7f0000001e40)=""/4102, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9.459173755s ago: executing program 1 (id=1910):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000084e040b1200000000000109022400010000200f090400040103000200092100000001220b000905810300"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r5 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000080)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) (async)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xca}, 0x1c) (async)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x9, 0x0, 0x8, 0xb, 0x7})
r8 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'geneve0\x00', <r9=>0x0})
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r9, 0x267a4e37}, 0xc) (async)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x50, 0x0, 0x101}, 0xc)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) (async)
ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x4, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x19, 0x3, 0x5}, {0x8, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x7f}, {}, {0x4, 0x65, 0xff}, {0x0, 0x0, 0x2f, '\x00', 0x7}, {0x0, 0x6}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x0, 0x8, 0x5, '\x00', 0x1}, {0x5e}, {0x3, 0x0, 0x0, '\x00', 0xc4}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x3, 0x86, 0x80, '\x00', 0x5}, {0x0, 0x2, 0x7f, '\x00', 0x7}, {0x0, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x0, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x9, 0x6, 0x0, '\x00', 0x5}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9, '\x00', 0x4}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) (async)
ioctl$KVM_IRQ_LINE_STATUS(r11, 0xc008ae67, &(0x7f0000000380)={0xa, 0x7}) (async)
syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="ff415e0e000000000000da20310b"], 0x0, 0x0, 0x0, 0x0}, 0x0)

8.294178487s ago: executing program 1 (id=1912):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x34, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000008010800000000000000000200000206000240dada00000900010073797a300003003a000000000000000000000000f03d788fb1b9d681d806b7b31b6f8e45964de692d3b3fa1c4380c682"], 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000)
unlink(0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5)
r4 = socket$netlink(0x10, 0x3, 0x0)
mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})

7.155987626s ago: executing program 5 (id=1916):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (fail_nth: 12)

6.779165384s ago: executing program 5 (id=1917):
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x4)
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, &(0x7f0000000080)=[{0x2, 0xc, 0xfffffffffffffc01}], 0x1, 0x0, 0x2, 0x40, 0x1, 0x20})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {0x6}}, './file0\x00'})
ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40408c1}, 0x41)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000340)={0x0, 'batadv_slave_1\x00', {0x1}, 0x7})
sendfile(r1, r2, &(0x7f0000000380), 0x7)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000480)={0x2, 0x2, {0xffffffffffffffff}, {<r4=>0xee01}, 0x6, 0xffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, <r5=>0x0}, &(0x7f0000000500)=0xc)
r6 = geteuid()
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000540)=<r7=>0x0)
mount$fuseblk(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1700}}, {@allow_other}, {@allow_other}, {@default_permissions}], [{@appraise_type}, {@permit_directio}, {@hash}, {@euid_lt={'euid<', r5}}, {@uid_gt={'uid>', r6}}, {@context={'context', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r7}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'batadv_slave_1\x00'}}]}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, <r8=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000007c0)={<r9=>0x0, 0xb999}, &(0x7f0000000800)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000840)={<r10=>r9, 0x81, 0x20}, &(0x7f0000000880)=0xc)
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000002900)={<r12=>r10, 0x5b, "dbf69c6a06ad6c2a4647879a5deae3bffeea93ddc87be06ad447ba20d17f162ede59791d291582fc2f100e49e4cf4def624c8f1b987a63f4f51683ec81ffd601b0fd73a809c2a48fb01dc56fb3139b1b35b6942f639c8e90c5d0ea"}, &(0x7f0000002980)=0x63)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f00000029c0)={r12, 0x1}, &(0x7f0000002a00)=0x8)
close_range(r2, r3, 0x2)
map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000002ac0))
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x18, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c845)

6.458978543s ago: executing program 3 (id=1918):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket(0x2, 0x80805, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8)
listen(r1, 0x3)
socket$vsock_stream(0x28, 0x1, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x5, 0x18, 0x2, 0xa2c1}, {0xf, 0x9, 0x2, 0x1}, {0xa212, 0x9, 0xa, 0x200}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000001c0))

6.081543673s ago: executing program 4 (id=1919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x0, 0xc7, 0xc7, 0xcd, 0x2}}]}}]}}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x63}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x4714, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x0)

5.803498815s ago: executing program 5 (id=1920):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r2 = syz_open_procfs(0x0, 0x0)
unshare(0xe010480)
syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xdb0e, 0x80, 0x2, 0x24000}, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x8, 0x3)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)})
r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000000)={"1b00", 0x3, 0x5, 0x2, 0x20800, 0x4, "0400", '\x00', "0300", "e8cc1304", ["8bbb00fda8e45cfe00000900", "ab5286400000000000001000", '\x00', "000b000000000000001000"]})
r6 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil)
shmat(r6, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000440000001a0a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000208000840000000013c0000000e0a01020000000000000000010000000900020073797a3200000000100003802f00008008000180040002800900010073797a300000"], 0xc8}}, 0x0)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000002a80)=""/42)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000240)={0x28, 0x2, 0x0, 0x0, &(0x7f0000d6c000/0x5000)=nil, 0x5000, 0x3})
setns(r9, 0x24020000)

5.443911916s ago: executing program 2 (id=1921):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80081)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000300)={0xa, {0x80800, 0x7b, 0x40000006}})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, 0x14, 0x1, 0x70bd36, 0x25dfdbfe, {0x2c, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000854)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x101}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r9, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x24}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rmdir(&(0x7f0000000000)='./file0\x00')
r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = syz_pidfd_open(r11, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0xc6}, {0x0, 0xfef2}, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0xe4)
ioctl$FS_IOC_GETVERSION(r12, 0xc040ff0b, &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f00000003c0)={0xffffffffffffff3d, 0x0, 0x0})
syz_usb_connect(0x3, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa94008191513"], 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000400)=0x3, 0x4)

4.762518217s ago: executing program 1 (id=1922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r1, 0x4, 0x0, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000804c}, 0x0)

4.487498397s ago: executing program 3 (id=1923):
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0)
dup(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xffff)
r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0x0, 0x1000000)

4.48646018s ago: executing program 1 (id=1924):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000084355810000000000000109022400abb000900009040d07010300010009210b00000122030009058103000202fc00aeca050752b427a343bc482bcb67c630b06ad0af34c04cdb78a70d20d43dda49eac8c3b426b249e555731344451b82aaf1e64b3209073228dc7897bdf7880d68aa8f829f87265ac32c3cb015f7750ad35630f11cb4b79fa6eb3e9b47d1ce56bc7530e7755d17a3acedd791f7070000008bd05212237c2a49c2da"], 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e)
syz_usb_connect$cdc_ncm(0x3, 0x13d, &(0x7f0000000640)={{0x12, 0x1, 0x301, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12b, 0x2, 0x1, 0x5, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "04cb531fa45c"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x7ff, 0xfff9, 0x7f}, {0x6, 0x24, 0x1a, 0xffff}, [@mdlm_detail={0x77, 0x24, 0x13, 0x4, "946c9c053f62119039c19ffd1ab6c08f237b3232ab290bfd8b98593d8f824271a20e50753cafc508a123690fce95616dcf742def3f7b5e6f0f717e34c834272cda12bf84abbe7f9be06b023c9a930c309b32eb2eef4ed37adc8ec16a76c7dbff9daad3441b8a965962e5e12db555aa839cf806"}, @mdlm_detail={0x26, 0x24, 0x13, 0x40, "21bcc2cd1e17e741c342170e276cce9f3c94548f06dc3f7b8e975a4441465a94f722"}, @country_functional={0x12, 0x24, 0x7, 0x0, 0xd97, [0xbf0, 0xfffb, 0x4, 0x9, 0x1, 0x7]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x8001, 0x2, 0xc, 0x3, 0xc}, @dmm={0x7, 0x24, 0x14, 0x10, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x7ee413464f9cc559, 0x4, 0x80, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x3, 0x40}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x2, 0x4, 0x5, 0x8, 0x6}, 0x1f, &(0x7f0000000280)=ANY=[@ANYBLOB="060f1f000000100400e1b79cf4174a32b066fee13262687a0c03100b03110b"], 0x1, [{0x9, &(0x7f00000005c0)=@string={0x9, 0x3, "7b6b70bd8f54f0"}}]})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3, r2})
pread64(0xffffffffffffffff, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)
madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb)
r4 = syz_open_dev$video(&(0x7f0000000340), 0x5, 0x8340)
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@mmap={0x5, 0x9, 0x4, 0x10, 0xa, {}, {0x5, 0xc, 0x3, 0x1b, 0x1, 0xa, "ac00"}, 0x0, 0x1, {}, 0x7})
pipe2$watch_queue(0x0, 0x80)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
keyctl$negate(0xd, r5, 0x8, r5)
sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="99742bbd7000fadbdf25150000004c0001"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
socket$inet6(0xa, 0x5, 0x0)

4.336541979s ago: executing program 3 (id=1925):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f00000000c0))
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r2, 0x8, 0x0)

4.226500137s ago: executing program 4 (id=1926):
socket$nl_netfilter(0x10, 0x3, 0xc)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000240)=0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r2, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)
r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000001300)="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", 0x1000, 0xfffffffffffffff9)
keyctl$instantiate(0xc, r5, 0x0, 0x0, 0xffffffffffffffff)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000300)=0x8, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0xc0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffe0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8c, 0x2, [@TCA_MATCHALL_ACT={0x88, 0x2, [@m_ife={0x84, 0x1, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x800, 0x861168966fa2e5c1, 0xc, 0x2}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x401}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xfffffffb}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x16ac}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e1a01010000000000000100021500050900020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004010)

3.155720422s ago: executing program 4 (id=1927):
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001340)={0x6, {{0xa, 0x4e21, 0x6, @mcast2, 0x8001}}, 0x1, 0x4000}, 0x90)

3.093165222s ago: executing program 4 (id=1928):
clock_getres(0x3, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0))
syz_io_uring_setup(0x3c63, &(0x7f0000000240)={0x0, 0x7b46, 0x27, 0x0, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000200)) (fail_nth: 19)

2.727169192s ago: executing program 4 (id=1929):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000001040)=0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su_\x17(y\xb6\xfb\xb2\x1b\v`\xd7:<\x16\x7f\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\x04\x00(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5S\xa8\xa9P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W', 0x3)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
write$char_usb(r8, &(0x7f0000000040)="e2", 0x2778)
syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @random="60c82553c54d", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x7, "0402000200"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x7}}}}}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0xa, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r10, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x2, 0x4)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000140)={0x0, 0x23, 0xd0, {0xd0, 0xf, "bbc516c955244d1b489b5f5a3b94e304e8b2ad4c51a04ec375044cc8599c206c73aa40c0a78adc347e809be02541b32b34b1f9a4040bf2c87cda8b9f23a0e886aa467f38f6148be981a55cf2a40f2f36b88afe4bc37e6f009b2725bfc8a86246588df8a8a23aa347e150e650aac83f80d956fb9658e7df920bc3a5416b5b6aa064a859c84e29b6721067ad04fd8818cce8c27d2cc5af595acaf1d2257574a3bd9dce2d088f1335644c58aa28513169597ad72ad71bfe941ca7ca882a02f4cf1ebd4a56f87492a829846e8bfa4bfe"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x24, &(0x7f0000000600)={0x40, 0x7, 0xfd, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xb75b, 0x14, 0xa, 0x6, 0x5, 0xe8, 0xe78, 0x4, 0x8, 0x8, 0x4, 0x9}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0xe}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}})
write$char_usb(r1, 0x0, 0x0)

2.4869211s ago: executing program 3 (id=1930):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x11, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

2.395824635s ago: executing program 3 (id=1931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r1, 0x303, 0x4, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004)
r2 = syz_open_dev$video(&(0x7f0000000300), 0x75aeaeb7, 0x0)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000200)={0x9, @win={{0x3, 0xff, 0x9, 0x10000002}, 0x8, 0x20000, 0x0, 0x80000002, 0x0, 0x9}})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
r4 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0xc, &(0x7f0000000080)={0x0, 0x21, 0x47, {0x47, 0x30, "b685259f10861e69857cb69daf63ec0eb8f5b24c2341eb0dfd86beb019012f50d68948c90b494760ae947d3aade0ff2c098a92e693f30de59200a99707854817d385046514"}}, &(0x7f0000000000)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "453f581f5aeca8f67111860d4109dc90dc4988fe5d9bd506cae1896533ea448c7d64fdfbabb36c8fd5767ab0debe3718ac9a1b0404a04123"}}}, &(0x7f00000003c0)={0x24, &(0x7f0000000140)={0x20, 0x18, 0x9d, "15392425b64c44e0196192b8b98490b5e50d93236217802d76c93710d367626fa1c2475266d9924b81ac372ba7b64e852f684ac3e294cf6ff70bb45770c85bec78250513aff99a7af7ab27d4c57de84f5c279df738e16b6fc9d6342195407e8cafce1c77f0a67bfc24bc395adb577d0139ceadb3bdb72636303aa37c30dae67812fa577022245e3cf73cdf099fa04f94a98866742e155ea6ec39beb964"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x81, 0x3, "be9b6b"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "ab"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "a9e604"}, &(0x7f0000000340)={0x20, 0x84, 0x2, "30a1"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "826a20"}})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000400)={0x3, 0x1, 'client0\x00', 0x80000000, "0c77c3b8cd40438e", "947142b4cba9c7702d9cb5966865652531d4061119207efec6c6bdc19aa267b2", 0x5bb, 0xdd})

2.27012968s ago: executing program 2 (id=1932):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r1}) (fail_nth: 1)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)
r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x82000006)
keyctl$instantiate(0xc, r1, &(0x7f0000000040)=@encrypted_update={'update ', 'default', 0x20, 'user:'}, 0x15, r3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0), 0x0)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a7", 0x1}], 0x1)

2.15165124s ago: executing program 5 (id=1933):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0)
lseek(r2, 0x101, 0x1)
getdents(r2, 0x0, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8, 0x0)
read$FUSE(r3, &(0x7f0000003a40)={0x2020}, 0x2020)

1.974234955s ago: executing program 2 (id=1934):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r1})
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)
r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x82000006)
keyctl$instantiate(0xc, r1, &(0x7f0000000040)=@encrypted_update={'update ', 'default', 0x20, 'user:'}, 0x15, r3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0), 0x0)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a7", 0x1}], 0x1)

1.693460647s ago: executing program 5 (id=1935):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x7, 0x6, 0x680, 0x0, 0x0, {0x6, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x8e}}, 0x40000)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0)

1.559436173s ago: executing program 2 (id=1936):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
open(0x0, 0x147842, 0x8c)
r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x10000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x1000, &(0x7f00004ee000/0x1000)=nil})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0)
r8 = shmget(0x1, 0x1000, 0x20, &(0x7f000005b000/0x1000)=nil)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
shmctl$IPC_RMID(r8, 0x0)
capset(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x20008042)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1.307221121s ago: executing program 1 (id=1937):
socket$nl_netfilter(0x10, 0x3, 0xc)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000240)=0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000001300)="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", 0x1000, 0xfffffffffffffff9)
keyctl$instantiate(0xc, r5, 0x0, 0x0, 0xffffffffffffffff)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000300)=0x8, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0xc0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffe0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8c, 0x2, [@TCA_MATCHALL_ACT={0x88, 0x2, [@m_ife={0x84, 0x1, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x800, 0x861168966fa2e5c1, 0xc, 0x2}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x401}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xfffffffb}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x16ac}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e1a01010000000000000100021500050900020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004010)

955.491804ms ago: executing program 1 (id=1938):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$hwrng(0xffffff9c, &(0x7f00000004c0), 0x254042, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000500)={0x9, 0x6})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$UHID_DESTROY(r3, &(0x7f0000000140), 0x4)
tee(r2, r1, 0x3, 0x0)
unshare(0x480)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d81"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0xb, 0xf8, 0x8, 0xbf84}, {0x9, 0xff, 0x2, 0x8}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000010000000000000060959789b2178e8d5f5cc3d43e00b8317520b93a082605fed83f42bd619b12b0e108fcda0c5ad75fea5644", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000f8ffffffb703000008000000b70400000000000081000000000000009500000000000000d301bda249d3a3b40a4f710516f4f87ea56c63fb8e0433a798f569378b912bfe0e1d3942b0b4f281cfdee85514ea18d8d8f1d6cd8b6abc210eeb188afbe1ffa1c24d5c8ace9c2f4a951995b4c556dc6c75edfae2b2e81ca3df42791ee85d7f5db6ab5652547f1f09260166bff30685ccc564124767d65634453cf52204a7f65b49010e03c4d2ca4623fe5525c5e41b9e96d9d22b87e5afc3cd0a1e903705d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
poll(&(0x7f0000000000), 0x20000000000000ea, 0x7)
tkill(0x0, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='kmem_cache_free\x00', r7}, 0x18)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
socket$inet6_sctp(0xa, 0x1, 0x84)

386.991649ms ago: executing program 3 (id=1939):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x8000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x8000)
pipe(&(0x7f0000000140))
r0 = socket(0x3, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x22020400) (async)
unshare(0x22020400)
fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1000000e, 0x0, 0x0, 0x0, 0x400f, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r5=>0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)={0x1c, r8, 0x1, 0x0, 0x40000000, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x20000010)
sendmsg$nl_route(r6, 0x0, 0x0) (async)
sendmsg$nl_route(r6, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x40c0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000380)={{r3}, r10, 0x16, @unused=[0x2, 0x0, 0x7], @subvolid=0x9})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0xc040}, 0x40)

0s ago: executing program 5 (id=1940):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r2 = socket(0x200000100000011, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r4=>0x0})
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "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"}, 0x2c9)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "000000000000ff03", "07080d7f4fcf00fd4ef2dece6c7c5800", "3875fa9c"}, 0x13)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000040)='posixacl\x00', 0x0, 0x0)
r10 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r10, &(0x7f00000000c0)={0x18, 0x0, {0x2, @local, 'ip6_vti0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r10, 0x4008b100, &(0x7f00000004c0)={0x18, 0x0, {0x2, @local, 'syz_tun\x00'}})
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r11, 0x6, 0x12, 0x0, 0x0)
ioctl$KVM_NMI(r8, 0xae9a)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  510.930466][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.962286][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.011023][   T30] audit: type=1326 audit(1749093436.043:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  511.199671][ T5920] usb 4-1: USB disconnect, device number 99
[  511.287764][   T30] audit: type=1326 audit(1749093436.043:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  511.321424][   T30] audit: type=1326 audit(1749093436.043:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  511.357561][   T30] audit: type=1326 audit(1749093436.043:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  511.386587][   T30] audit: type=1326 audit(1749093436.043:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  511.409599][   T30] audit: type=1326 audit(1749093436.043:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  511.434700][   T30] audit: type=1326 audit(1749093436.093:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000
[  511.465165][ T5892] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  511.631256][ T5892] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  511.647215][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.658183][ T5892] usb 6-1: Product: syz
[  511.662652][ T5892] usb 6-1: Manufacturer: syz
[  511.671954][ T5892] usb 6-1: SerialNumber: syz
[  511.701745][ T5892] usb 6-1: config 0 descriptor??
[  511.730519][ T5892] gspca_main: sunplus-2.14.0 probing 055f:c230
[  512.522350][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1611'.
[  512.556047][T11564] wireguard0: entered promiscuous mode
[  512.562938][T11564] wireguard0: entered allmulticast mode
[  512.701298][ T5895] usb 3-1: USB disconnect, device number 89
[  512.701441][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  513.200763][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.211577][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.232396][ T5892] gspca_sunplus: reg_r err -71
[  513.237390][ T5892] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  513.296949][ T5892] usb 6-1: USB disconnect, device number 59
[  513.682882][ T5833] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  513.886640][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.924988][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.987967][ T5833] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  514.032944][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.087334][ T5833] usb 3-1: config 0 descriptor??
[  514.418016][T11584] FAULT_INJECTION: forcing a failure.
[  514.418016][T11584] name failslab, interval 1, probability 0, space 0, times 0
[  514.527598][ T5833] elecom 0003:056E:010D.0015: item fetching failed at offset 5/8
[  514.568098][T11584] CPU: 1 UID: 0 PID: 11584 Comm: syz.3.1622 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  514.568131][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  514.568145][T11584] Call Trace:
[  514.568154][T11584]  <TASK>
[  514.568164][T11584]  dump_stack_lvl+0x189/0x250
[  514.568203][T11584]  ? __pfx____ratelimit+0x10/0x10
[  514.568235][T11584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.568269][T11584]  ? __pfx__printk+0x10/0x10
[  514.568300][T11584]  ? __pfx___might_resched+0x10/0x10
[  514.568320][T11584]  ? fs_reclaim_acquire+0x7d/0x100
[  514.568354][T11584]  should_fail_ex+0x414/0x560
[  514.568393][T11584]  should_failslab+0xa8/0x100
[  514.568427][T11584]  __kmalloc_noprof+0xcb/0x4f0
[  514.568449][T11584]  ? snd_pcm_hw_refine+0x967/0x1640
[  514.568481][T11584]  snd_pcm_hw_refine+0x967/0x1640
[  514.568526][T11584]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  514.568607][T11584]  snd_pcm_hw_param_first+0x3e9/0xaf0
[  514.568654][T11584]  snd_pcm_hw_params+0x549/0x1c90
[  514.568694][T11584]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.568734][T11584]  ? __pfx_snd_pcm_hw_params+0x10/0x10
[  514.568783][T11584]  snd_pcm_oss_change_params_locked+0x21cb/0x3e40
[  514.568856][T11584]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  514.568890][T11584]  ? snd_pcm_oss_get_active_substream+0x136/0x280
[  514.568935][T11584]  ? __fget_files+0x2a/0x420
[  514.568967][T11584]  snd_pcm_oss_get_active_substream+0x1e2/0x280
[  514.568997][T11584]  snd_pcm_oss_ioctl+0x93b/0xdd0
[  514.569036][T11584]  __ia32_compat_sys_ioctl+0x543/0x840
[  514.569076][T11584]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  514.569112][T11584]  ? __fget_files+0x3a0/0x420
[  514.569146][T11584]  ? fput+0xa0/0xd0
[  514.569176][T11584]  ? ksys_write+0x22a/0x250
[  514.569207][T11584]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  514.569242][T11584]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.569276][T11584]  __do_fast_syscall_32+0xb6/0x2b0
[  514.569311][T11584]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.569345][T11584]  do_fast_syscall_32+0x34/0x80
[  514.569379][T11584]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  514.569405][T11584] RIP: 0023:0xf7fc1539
[  514.569432][T11584] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  514.569452][T11584] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  514.569483][T11584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045004
[  514.569499][T11584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  514.569512][T11584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  514.569525][T11584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  514.569538][T11584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  514.569570][T11584]  </TASK>
[  514.852113][ T5833] elecom 0003:056E:010D.0015: probe with driver elecom failed with error -22
[  515.044961][ T5895] usb 3-1: USB disconnect, device number 90
[  515.501614][T11604] FAULT_INJECTION: forcing a failure.
[  515.501614][T11604] name failslab, interval 1, probability 0, space 0, times 0
[  515.525007][T11604] CPU: 0 UID: 0 PID: 11604 Comm: syz.5.1628 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  515.525039][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  515.525052][T11604] Call Trace:
[  515.525062][T11604]  <TASK>
[  515.525071][T11604]  dump_stack_lvl+0x189/0x250
[  515.525111][T11604]  ? __pfx____ratelimit+0x10/0x10
[  515.525142][T11604]  ? __pfx_dump_stack_lvl+0x10/0x10
[  515.525177][T11604]  ? __pfx__printk+0x10/0x10
[  515.525206][T11604]  ? __pfx___might_resched+0x10/0x10
[  515.525223][T11604]  ? fs_reclaim_acquire+0x7d/0x100
[  515.525252][T11604]  should_fail_ex+0x414/0x560
[  515.525287][T11604]  should_failslab+0xa8/0x100
[  515.525320][T11604]  __kmalloc_cache_noprof+0x70/0x3d0
[  515.525344][T11604]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  515.525373][T11604]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  515.525407][T11604]  sctp_association_new+0x15d3/0x25f0
[  515.525453][T11604]  sctp_connect_new_asoc+0x2c5/0x690
[  515.525485][T11604]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  515.525510][T11604]  ? __local_bh_enable_ip+0x12d/0x1c0
[  515.525554][T11604]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  515.525587][T11604]  ? security_sctp_bind_connect+0x7e/0x2e0
[  515.525621][T11604]  sctp_sendmsg+0x155c/0x2810
[  515.525660][T11604]  ? __pfx_sctp_sendmsg+0x10/0x10
[  515.525691][T11604]  ? aa_sk_perm+0x81e/0x950
[  515.525727][T11604]  ? __pfx_aa_sk_perm+0x10/0x10
[  515.525762][T11604]  ? sock_rps_record_flow+0x19/0x410
[  515.525798][T11604]  ? inet_sendmsg+0x2f4/0x370
[  515.525837][T11604]  __sock_sendmsg+0x19c/0x270
[  515.525875][T11604]  ____sys_sendmsg+0x52d/0x830
[  515.525908][T11604]  ? __pfx_____sys_sendmsg+0x10/0x10
[  515.525953][T11604]  ___sys_sendmsg+0x21f/0x2a0
[  515.525983][T11604]  ? __pfx____sys_sendmsg+0x10/0x10
[  515.526054][T11604]  ? __fget_files+0x2a/0x420
[  515.526079][T11604]  ? __fget_files+0x3a0/0x420
[  515.526116][T11604]  __sys_sendmmsg+0x28e/0x430
[  515.526149][T11604]  ? __pfx___sys_sendmmsg+0x10/0x10
[  515.526188][T11604]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  515.526242][T11604]  ? ksys_write+0x22a/0x250
[  515.526276][T11604]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  515.526318][T11604]  __do_fast_syscall_32+0xb6/0x2b0
[  515.526353][T11604]  ? lockdep_hardirqs_on+0x9c/0x150
[  515.526389][T11604]  do_fast_syscall_32+0x34/0x80
[  515.526423][T11604]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  515.526450][T11604] RIP: 0023:0xf710e539
[  515.526469][T11604] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  515.526488][T11604] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  515.526512][T11604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80
[  515.526528][T11604] RDX: 0000000000000001 RSI: 000000000004c040 RDI: 0000000000000000
[  515.526542][T11604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  515.526555][T11604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  515.526568][T11604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  515.526600][T11604]  </TASK>
[  516.285693][    C0] vkms_vblank_simulate: vblank timer overrun
[  516.580601][T11628] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer.
[  517.238309][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'.
[  517.351931][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  517.351954][   T30] audit: type=1326 audit(1749093442.733:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  517.432286][T11641] wireguard0: entered promiscuous mode
[  517.439408][T11641] wireguard0: entered allmulticast mode
[  517.532638][   T30] audit: type=1326 audit(1749093442.733:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc1558 code=0x7ffc0000
[  517.690438][   T30] audit: type=1326 audit(1749093442.733:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc1558 code=0x7ffc0000
[  517.921090][T11646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1641'.
[  518.093198][   T30] audit: type=1326 audit(1749093442.733:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  518.304324][   T30] audit: type=1326 audit(1749093442.733:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc1558 code=0x7ffc0000
[  518.397262][T11646] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.459834][   T30] audit: type=1326 audit(1749093442.733:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  518.744286][   T30] audit: type=1326 audit(1749093442.733:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc1558 code=0x7ffc0000
[  518.763827][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1643'.
[  518.859212][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'.
[  518.893227][   T30] audit: type=1326 audit(1749093442.733:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc1558 code=0x7ffc0000
[  518.966869][   T30] audit: type=1326 audit(1749093442.733:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  519.065610][   T30] audit: type=1326 audit(1749093442.733:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc1558 code=0x7ffc0000
[  519.239257][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.289197][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  519.303067][T11627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1637'.
[  519.843099][T11663] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  519.858077][T11646] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.872926][T11646] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.923175][T11646] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.932118][T11646] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.002811][T11663] usb 6-1: device descriptor read/64, error -71
[  520.252804][T11663] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  520.403146][T11663] usb 6-1: device descriptor read/64, error -71
[  520.461724][T11689] x_tables: ip_tables: icmp match: only valid for protocol 1
[  520.515851][T11663] usb usb6-port1: attempt power cycle
[  520.829593][T11697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer.
[  520.865450][T11663] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  520.934118][T11663] usb 6-1: device descriptor read/8, error -71
[  521.182874][T11663] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  521.220435][T11663] usb 6-1: device descriptor read/8, error -71
[  521.379294][T11663] usb usb6-port1: unable to enumerate USB device
[  521.863686][T11663] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  521.897796][T11722] FAULT_INJECTION: forcing a failure.
[  521.897796][T11722] name failslab, interval 1, probability 0, space 0, times 0
[  521.936044][T11722] CPU: 1 UID: 0 PID: 11722 Comm: syz.2.1658 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  521.936078][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  521.936092][T11722] Call Trace:
[  521.936102][T11722]  <TASK>
[  521.936112][T11722]  dump_stack_lvl+0x189/0x250
[  521.936147][T11722]  ? __pfx____ratelimit+0x10/0x10
[  521.936170][T11722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  521.936194][T11722]  ? __pfx__printk+0x10/0x10
[  521.936215][T11722]  ? __pfx___might_resched+0x10/0x10
[  521.936233][T11722]  should_fail_ex+0x414/0x560
[  521.936268][T11722]  should_failslab+0xa8/0x100
[  521.936294][T11722]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  521.936317][T11722]  ? __alloc_skb+0x112/0x2d0
[  521.936345][T11722]  __alloc_skb+0x112/0x2d0
[  521.936373][T11722]  netlink_sendmsg+0x5c6/0xb30
[  521.936426][T11722]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.936452][T11722]  ? __import_iovec+0x5d4/0x7f0
[  521.936470][T11722]  ? aa_sock_msg_perm+0x94/0x160
[  521.936495][T11722]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.936516][T11722]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.936534][T11722]  __sock_sendmsg+0x219/0x270
[  521.936560][T11722]  ____sys_sendmsg+0x505/0x830
[  521.936584][T11722]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.936616][T11722]  ___sys_sendmsg+0x21f/0x2a0
[  521.936637][T11722]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.936682][T11722]  ? __fget_files+0x2a/0x420
[  521.936699][T11722]  ? __fget_files+0x3a0/0x420
[  521.936724][T11722]  __sys_sendmsg+0x164/0x220
[  521.936745][T11722]  ? __pfx___sys_sendmsg+0x10/0x10
[  521.936774][T11722]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  521.936799][T11722]  ? lockdep_hardirqs_on+0x9c/0x150
[  521.936822][T11722]  __do_fast_syscall_32+0xb6/0x2b0
[  521.936853][T11722]  ? lockdep_hardirqs_on+0x9c/0x150
[  521.936878][T11722]  do_fast_syscall_32+0x34/0x80
[  521.936902][T11722]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  521.936932][T11722] RIP: 0023:0xf704e539
[  521.936952][T11722] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  521.936972][T11722] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  521.936995][T11722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  521.937010][T11722] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[  521.937019][T11722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  521.937028][T11722] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  521.937037][T11722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  521.937059][T11722]  </TASK>
[  522.023168][T11663] usb 5-1: Using ep0 maxpacket: 32
[  522.153646][    C0] vkms_vblank_simulate: vblank timer overrun
[  522.271790][T11663] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  522.493286][   T30] kauditd_printk_skb: 103 callbacks suppressed
[  522.493301][   T30] audit: type=1326 audit(1749093447.943:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.2.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  522.568262][   T30] audit: type=1326 audit(1749093447.963:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.2.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf704e539 code=0x7ffc0000
[  522.602585][T11663] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  522.612278][   T30] audit: type=1326 audit(1749093447.963:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.2.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  522.699528][T11663] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  522.749409][T11663] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  522.769182][   T30] audit: type=1326 audit(1749093447.963:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.2.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704e539 code=0x7ffc0000
[  522.801276][T11663] usb 5-1: config 1 has no interface number 0
[  522.816910][T11663] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  522.844700][   T30] audit: type=1326 audit(1749093447.963:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.2.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  522.873006][T11663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.919280][T11663] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  522.946235][   T30] audit: type=1326 audit(1749093447.963:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.2.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  522.968385][    C0] vkms_vblank_simulate: vblank timer overrun
[  523.354911][T11738] FAULT_INJECTION: forcing a failure.
[  523.354911][T11738] name failslab, interval 1, probability 0, space 0, times 0
[  523.378913][T11738] CPU: 0 UID: 0 PID: 11738 Comm: syz.5.1663 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  523.378944][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  523.378963][T11738] Call Trace:
[  523.378972][T11738]  <TASK>
[  523.378981][T11738]  dump_stack_lvl+0x189/0x250
[  523.379020][T11738]  ? __pfx____ratelimit+0x10/0x10
[  523.379052][T11738]  ? __pfx_dump_stack_lvl+0x10/0x10
[  523.379086][T11738]  ? __pfx__printk+0x10/0x10
[  523.379115][T11738]  ? __pfx___might_resched+0x10/0x10
[  523.379134][T11738]  ? fs_reclaim_acquire+0x7d/0x100
[  523.379165][T11738]  should_fail_ex+0x414/0x560
[  523.379205][T11738]  should_failslab+0xa8/0x100
[  523.379231][T11738]  __kmalloc_noprof+0xcb/0x4f0
[  523.379252][T11738]  ? kernfs_fop_write_iter+0x158/0x4f0
[  523.379292][T11738]  kernfs_fop_write_iter+0x158/0x4f0
[  523.379334][T11738]  vfs_write+0x548/0xa90
[  523.379361][T11738]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  523.379397][T11738]  ? __pfx_vfs_write+0x10/0x10
[  523.379432][T11738]  ? __fget_files+0x2a/0x420
[  523.379467][T11738]  ksys_write+0x145/0x250
[  523.379489][T11738]  ? __pfx_ksys_write+0x10/0x10
[  523.379526][T11738]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  523.379560][T11738]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.379593][T11738]  __do_fast_syscall_32+0xb6/0x2b0
[  523.379628][T11738]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.379664][T11738]  do_fast_syscall_32+0x34/0x80
[  523.379697][T11738]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  523.379724][T11738] RIP: 0023:0xf710e539
[  523.379743][T11738] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  523.379762][T11738] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  523.379785][T11738] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000
[  523.379800][T11738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  523.379813][T11738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  523.379826][T11738] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  523.379840][T11738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  523.379872][T11738]  </TASK>
[  523.433187][   T43] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  523.435724][    C0] vkms_vblank_simulate: vblank timer overrun
[  523.616348][    C0] vkms_vblank_simulate: vblank timer overrun
[  523.722372][    C0] vkms_vblank_simulate: vblank timer overrun
[  523.992833][   T43] usb 3-1: Using ep0 maxpacket: 8
[  524.001060][   T43] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  524.009580][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  524.019941][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  524.032413][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  524.059818][   T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  524.107153][   T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  524.135239][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.386508][   T43] usb 3-1: usb_control_msg returned -32
[  524.392297][   T43] usbtmc 3-1:16.0: can't read capabilities
[  524.629963][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'.
[  525.146997][T11759] random: crng reseeded on system resumption
[  525.177928][T11757] usbtmc 3-1:16.0: usb_control_msg returned -32
[  525.232800][   T43] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  525.315588][ T5891] usb 3-1: USB disconnect, device number 91
[  525.424073][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  525.454012][   T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  525.526204][   T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  525.746398][T11767] wireguard0: entered promiscuous mode
[  525.752033][T11767] wireguard0: entered allmulticast mode
[  525.820440][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.864399][   T43] usb 4-1: Product: syz
[  525.868660][   T43] usb 4-1: Manufacturer: syz
[  525.887201][   T43] usb 4-1: SerialNumber: syz
[  526.214157][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.496083][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.508833][T11663] snd_usb_pod 5-1:1.1: set_interface failed
[  526.516341][T11663] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  526.526925][T11663] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  526.664076][T11663] usb 5-1: USB disconnect, device number 88
[  526.715748][   T43] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  527.125805][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'.
[  527.172166][   T43] usb 4-1: USB disconnect, device number 100
[  527.607508][ T5891] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  527.752855][ T5891] usb 2-1: device descriptor read/64, error -71
[  528.022199][   T43] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  528.172850][ T5891] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  528.322914][ T5891] usb 2-1: device descriptor read/64, error -71
[  528.433231][ T5891] usb usb2-port1: attempt power cycle
[  528.729076][   T30] audit: type=1326 audit(1749093454.173:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  528.751323][    C0] vkms_vblank_simulate: vblank timer overrun
[  528.773292][ T5891] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  528.807252][   T30] audit: type=1326 audit(1749093454.213:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  528.830610][   T30] audit: type=1326 audit(1749093454.223:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  528.852731][    C0] vkms_vblank_simulate: vblank timer overrun
[  528.867758][ T5891] usb 2-1: device descriptor read/8, error -71
[  528.891360][   T30] audit: type=1326 audit(1749093454.223:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  529.102305][   T30] audit: type=1326 audit(1749093454.223:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  529.137680][   T30] audit: type=1326 audit(1749093454.223:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  529.182763][   T30] audit: type=1326 audit(1749093454.223:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  529.204962][    C0] vkms_vblank_simulate: vblank timer overrun
[  529.222791][   T43] usb 4-1: device descriptor read/64, error -71
[  529.273257][   T30] audit: type=1326 audit(1749093454.223:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  529.303823][   T30] audit: type=1326 audit(1749093454.223:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  529.327211][   T30] audit: type=1326 audit(1749093454.223:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  529.482807][   T43] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  529.632907][   T43] usb 4-1: Using ep0 maxpacket: 8
[  529.645787][   T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  529.670083][   T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  529.782419][   T43] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  529.854927][   T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  529.884814][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.934973][   T43] usbtmc 4-1:16.0: bulk endpoints not found
[  530.210311][T11787] batadv0: entered promiscuous mode
[  530.261317][T11787] vlan2: entered promiscuous mode
[  530.500466][   T43] usb 4-1: USB disconnect, device number 102
[  530.813461][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1680'.
[  530.942486][T11822] wireguard0: entered promiscuous mode
[  530.958590][T11822] wireguard0: entered allmulticast mode
[  531.043167][   T43] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  531.070437][T11828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1687'.
[  531.084604][T11828] netlink: 'syz.1.1687': attribute type 1 has an invalid length.
[  531.092576][T11828] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1687'.
[  531.193058][   T43] usb 3-1: Using ep0 maxpacket: 32
[  531.200048][   T43] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  531.222802][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.274544][   T43] usb 3-1: config 0 descriptor??
[  531.313024][   T43] gspca_main: sq930x-2.14.0 probing 041e:403c
[  531.542819][    T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  531.609518][ T5891] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  531.694917][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  531.704631][    T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  531.715487][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  531.724917][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  531.802873][ T5891] usb 2-1: Using ep0 maxpacket: 32
[  531.810377][ T5891] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  531.824984][ T5891] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  531.832182][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  531.850241][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  531.872860][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  531.888696][ T5891] usb 2-1: config 1 has no interface number 0
[  531.897468][ T5891] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  531.897569][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  531.920221][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.949326][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  531.969689][ T5891] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  531.982586][    T9] usb 4-1: Product: syz
[  532.000935][    T9] usb 4-1: Manufacturer: syz
[  532.050365][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  532.247572][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  532.313328][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.322389][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.338149][    T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  532.372789][    T9] cdc_wdm 4-1:1.0: Unknown control protocol
[  532.482780][   T43] gspca_sq930x: reg_w 0105 bf00 failed -110
[  532.543220][   T43] sq930x 3-1:0.0: probe with driver sq930x failed with error -110
[  532.554328][    T9] usb 4-1: USB disconnect, device number 103
[  533.930956][   T43] usb 3-1: USB disconnect, device number 92
[  534.271673][T11859] gtp0: entered promiscuous mode
[  534.290230][T11859] gtp0: entered allmulticast mode
[  535.115869][T11869] netlink: 'syz.2.1699': attribute type 9 has an invalid length.
[  535.873509][T11880] --map-set only usable from mangle table
[  535.894772][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.914256][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.439932][T11882] netlink: 'syz.2.1703': attribute type 10 has an invalid length.
[  536.478137][T11882] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  536.562864][T11882] bond0: (slave lo): refused to change device type
[  536.859105][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'.
[  537.042826][   T43] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  537.053072][ T5891] snd_usb_pod 2-1:1.1: set_interface failed
[  537.059256][ T5891] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  537.082939][ T5891] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -110
[  537.087157][T11886] wireguard0: entered promiscuous mode
[  537.099025][   T30] kauditd_printk_skb: 90 callbacks suppressed
[  537.099043][   T30] audit: type=1326 audit(1749093462.543:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.5.1704" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0
[  537.170213][T11886] wireguard0: entered allmulticast mode
[  537.206244][   T43] usb 3-1: device descriptor read/64, error -71
[  537.462835][   T43] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  537.545807][T11901] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  537.622909][   T43] usb 3-1: device descriptor read/64, error -71
[  537.742817][   T43] usb usb3-port1: attempt power cycle
[  538.116388][   T43] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  538.173907][   T43] usb 3-1: device descriptor read/8, error -71
[  538.211219][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'.
[  538.453675][   T43] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  538.493547][   T43] usb 3-1: device descriptor read/8, error -71
[  538.613602][   T43] usb usb3-port1: unable to enumerate USB device
[  538.622870][ T5891] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  538.805167][ T5891] usb 5-1: config 66 has an invalid interface number: 195 but max is 0
[  538.823726][ T5891] usb 5-1: config 66 has no interface number 0
[  538.844896][ T5891] usb 5-1: config 66 interface 195 has no altsetting 0
[  538.870581][ T5891] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49
[  538.884626][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.901308][ T5891] usb 5-1: Product: syz
[  538.918567][ T5891] usb 5-1: Manufacturer: syz
[  538.927505][ T5891] usb 5-1: SerialNumber: syz
[  539.041804][T11920] FAULT_INJECTION: forcing a failure.
[  539.041804][T11920] name failslab, interval 1, probability 0, space 0, times 0
[  539.090319][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.5.1715 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  539.090343][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  539.090353][T11920] Call Trace:
[  539.090360][T11920]  <TASK>
[  539.090367][T11920]  dump_stack_lvl+0x189/0x250
[  539.090403][T11920]  ? __pfx____ratelimit+0x10/0x10
[  539.090429][T11920]  ? __pfx_dump_stack_lvl+0x10/0x10
[  539.090454][T11920]  ? __pfx__printk+0x10/0x10
[  539.090475][T11920]  ? __pfx___might_resched+0x10/0x10
[  539.090490][T11920]  ? fs_reclaim_acquire+0x7d/0x100
[  539.090514][T11920]  should_fail_ex+0x414/0x560
[  539.090541][T11920]  should_failslab+0xa8/0x100
[  539.090560][T11920]  kmem_cache_alloc_noprof+0x73/0x3c0
[  539.090576][T11920]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  539.090603][T11920]  __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  539.090635][T11920]  mmu_topup_memory_caches+0x21/0x170
[  539.090659][T11920]  kvm_mmu_load+0x9d/0x21f0
[  539.090680][T11920]  ? __lock_acquire+0xab9/0xd20
[  539.090711][T11920]  ? kvm_vcpu_pre_fault_memory+0x15b/0x470
[  539.090734][T11920]  kvm_arch_vcpu_pre_fault_memory+0x33f/0x410
[  539.090759][T11920]  kvm_vcpu_pre_fault_memory+0x22e/0x470
[  539.090778][T11920]  ? kvm_vcpu_pre_fault_memory+0x15b/0x470
[  539.090799][T11920]  kvm_vcpu_ioctl+0x7f1/0xe90
[  539.090819][T11920]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  539.090835][T11920]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  539.090872][T11920]  ? __lock_acquire+0xab9/0xd20
[  539.090907][T11920]  kvm_vcpu_compat_ioctl+0x203/0x390
[  539.090926][T11920]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  539.090948][T11920]  ? __fget_files+0x3a0/0x420
[  539.090972][T11920]  ? __fget_files+0x2a/0x420
[  539.091002][T11920]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  539.091039][T11920]  __ia32_compat_sys_ioctl+0x543/0x840
[  539.091083][T11920]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  539.091120][T11920]  ? __fget_files+0x3a0/0x420
[  539.091151][T11920]  ? irqentry_exit+0x74/0x90
[  539.091182][T11920]  ? lockdep_hardirqs_on+0x9c/0x150
[  539.091239][T11920]  __do_fast_syscall_32+0xb6/0x2b0
[  539.091278][T11920]  ? lockdep_hardirqs_on+0x9c/0x150
[  539.091316][T11920]  do_fast_syscall_32+0x34/0x80
[  539.091352][T11920]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  539.091379][T11920] RIP: 0023:0xf710e539
[  539.091407][T11920] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  539.091426][T11920] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  539.091450][T11920] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c040aed5
[  539.091467][T11920] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  539.091481][T11920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  539.091494][T11920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  539.091508][T11920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  539.091541][T11920]  </TASK>
[  539.501064][ T5891] usb 5-1: Found UVC 0.00 device syz (1bcf:0b40)
[  539.507546][ T5891] usb 5-1: Forcing UVC version to 1.0a
[  539.513271][ T5891] usb 5-1: No valid video chain found.
[  539.520918][ T5891] usb 5-1: USB disconnect, device number 89
[  539.784759][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.809775][ T5891] usb 2-1: USB disconnect, device number 97
[  539.848002][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.510669][T11957] netlink: 'syz.5.1727': attribute type 10 has an invalid length.
[  541.520033][T11957] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  542.463914][T11965] FAULT_INJECTION: forcing a failure.
[  542.463914][T11965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.510505][T11965] CPU: 1 UID: 0 PID: 11965 Comm: syz.3.1730 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  542.510538][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  542.510553][T11965] Call Trace:
[  542.510563][T11965]  <TASK>
[  542.510573][T11965]  dump_stack_lvl+0x189/0x250
[  542.510613][T11965]  ? __pfx____ratelimit+0x10/0x10
[  542.510645][T11965]  ? __pfx_dump_stack_lvl+0x10/0x10
[  542.510680][T11965]  ? __pfx__printk+0x10/0x10
[  542.510705][T11965]  ? __might_fault+0xb0/0x130
[  542.510739][T11965]  should_fail_ex+0x414/0x560
[  542.510779][T11965]  _copy_from_user+0x2d/0xb0
[  542.510808][T11965]  get_compat_msghdr+0xad/0x4a0
[  542.510844][T11965]  ? __pfx_get_compat_msghdr+0x10/0x10
[  542.510874][T11965]  ? rcu_is_watching+0x15/0xb0
[  542.510894][T11965]  ? ___sys_recvmsg+0x1c4/0x510
[  542.510930][T11965]  ___sys_recvmsg+0x17f/0x510
[  542.510964][T11965]  ? __pfx____sys_recvmsg+0x10/0x10
[  542.511020][T11965]  ? __fget_files+0x3a0/0x420
[  542.511058][T11965]  do_recvmmsg+0x36a/0x770
[  542.511097][T11965]  ? __pfx_do_recvmmsg+0x10/0x10
[  542.511146][T11965]  ? __pfx_vfs_write+0x10/0x10
[  542.511186][T11965]  __sys_recvmmsg+0x19d/0x280
[  542.511216][T11965]  ? __pfx___sys_recvmmsg+0x10/0x10
[  542.511241][T11965]  ? ksys_write+0x22a/0x250
[  542.511272][T11965]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  542.511307][T11965]  __do_fast_syscall_32+0xb6/0x2b0
[  542.511343][T11965]  ? lockdep_hardirqs_on+0x9c/0x150
[  542.511379][T11965]  do_fast_syscall_32+0x34/0x80
[  542.511413][T11965]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  542.511441][T11965] RIP: 0023:0xf7fc1539
[  542.511459][T11965] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  542.511480][T11965] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  542.511507][T11965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400
[  542.511522][T11965] RDX: 0000000000000f00 RSI: 0000000000000000 RDI: 0000000000000000
[  542.511536][T11965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  542.511549][T11965] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  542.511562][T11965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  542.511594][T11965]  </TASK>
[  542.835541][T11977] loop6: detected capacity change from 0 to 524287999
[  543.000307][   T30] audit: type=1326 audit(1749093468.443:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.2.1733" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0
[  543.780445][T11993] FAULT_INJECTION: forcing a failure.
[  543.780445][T11993] name failslab, interval 1, probability 0, space 0, times 0
[  543.833334][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.3.1736 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  543.833367][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  543.833381][T11993] Call Trace:
[  543.833390][T11993]  <TASK>
[  543.833399][T11993]  dump_stack_lvl+0x189/0x250
[  543.833436][T11993]  ? __pfx____ratelimit+0x10/0x10
[  543.833467][T11993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  543.833500][T11993]  ? __pfx__printk+0x10/0x10
[  543.833529][T11993]  ? __pfx___might_resched+0x10/0x10
[  543.833554][T11993]  should_fail_ex+0x414/0x560
[  543.833592][T11993]  should_failslab+0xa8/0x100
[  543.833618][T11993]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  543.833641][T11993]  ? __alloc_skb+0x112/0x2d0
[  543.833668][T11993]  __alloc_skb+0x112/0x2d0
[  543.833695][T11993]  netlink_sendmsg+0x5c6/0xb30
[  543.833730][T11993]  ? __pfx_netlink_sendmsg+0x10/0x10
[  543.833757][T11993]  ? __import_iovec+0x5d4/0x7f0
[  543.833796][T11993]  ? aa_sock_msg_perm+0x94/0x160
[  543.833831][T11993]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  543.833860][T11993]  ? __pfx_netlink_sendmsg+0x10/0x10
[  543.833885][T11993]  __sock_sendmsg+0x219/0x270
[  543.833921][T11993]  ____sys_sendmsg+0x505/0x830
[  543.833955][T11993]  ? __pfx_____sys_sendmsg+0x10/0x10
[  543.833998][T11993]  ___sys_sendmsg+0x21f/0x2a0
[  543.834028][T11993]  ? __pfx____sys_sendmsg+0x10/0x10
[  543.834106][T11993]  ? __fget_files+0x2a/0x420
[  543.834130][T11993]  ? __fget_files+0x3a0/0x420
[  543.834166][T11993]  __sys_sendmsg+0x164/0x220
[  543.834195][T11993]  ? __pfx___sys_sendmsg+0x10/0x10
[  543.834238][T11993]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  543.834273][T11993]  ? lockdep_hardirqs_on+0x9c/0x150
[  543.834306][T11993]  __do_fast_syscall_32+0xb6/0x2b0
[  543.834339][T11993]  ? lockdep_hardirqs_on+0x9c/0x150
[  543.834374][T11993]  do_fast_syscall_32+0x34/0x80
[  543.834407][T11993]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  543.834434][T11993] RIP: 0023:0xf7fc1539
[  543.834453][T11993] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  543.834473][T11993] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  543.834497][T11993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  543.834512][T11993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  543.834525][T11993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  543.834538][T11993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  543.834551][T11993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  543.834582][T11993]  </TASK>
[  544.102533][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.976376][T11990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1734'.
[  545.006621][T12010] netlink: 'syz.3.1743': attribute type 10 has an invalid length.
[  545.040333][T12010] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  545.686068][T11663] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  546.432836][    T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  546.562839][    T9] usb 3-1: device descriptor read/64, error -71
[  546.812912][    T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  546.973083][    T9] usb 3-1: device descriptor read/64, error -71
[  547.083456][    T9] usb usb3-port1: attempt power cycle
[  547.289328][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'.
[  547.543082][    T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  547.659290][    T9] usb 3-1: device descriptor read/8, error -71
[  547.733256][T12045] wireguard0: entered promiscuous mode
[  547.741599][T12045] wireguard0: entered allmulticast mode
[  547.932875][    T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  547.966932][    T9] usb 3-1: device descriptor read/8, error -71
[  548.086973][    T9] usb usb3-port1: unable to enumerate USB device
[  548.542853][ T5891] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  548.935829][   T43] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  548.992937][ T5891] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  549.078514][ T5891] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  549.121271][   T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  549.143652][   T43] usb 5-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config
[  549.167047][ T5891] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  549.219291][   T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  549.242909][ T5891] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  549.305231][   T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11
[  549.322995][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.339288][   T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18261, setting to 1024
[  549.419210][   T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  549.429228][   T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  549.458492][ T5891] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  549.523234][   T43] usb 5-1: Product: syz
[  549.527503][   T43] usb 5-1: Manufacturer: syz
[  549.626675][ T5891] usb 6-1: invalid MIDI out EP 0
[  549.708867][T12059] delete_channel: no stack
[  549.730551][T12064] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  549.740561][   T43] cdc_wdm 5-1:1.0: skipping garbage
[  549.756832][   T43] cdc_wdm 5-1:1.0: skipping garbage
[  549.808214][   T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  549.832375][   T43] cdc_wdm 5-1:1.0: Unknown control protocol
[  549.842781][T11655] usb 2-1: new low-speed USB device number 98 using dummy_hcd
[  549.983485][T11655] usb 2-1: device descriptor read/64, error -71
[  550.233685][T11655] usb 2-1: new low-speed USB device number 99 using dummy_hcd
[  550.308301][ T5891] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  550.377075][ T5891] usb 6-1: USB disconnect, device number 65
[  550.492776][T11655] usb 2-1: device descriptor read/64, error -71
[  550.631817][T11655] usb usb2-port1: attempt power cycle
[  550.985012][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'.
[  551.185225][T11655] usb 2-1: new low-speed USB device number 100 using dummy_hcd
[  551.219083][T11655] usb 2-1: device descriptor read/8, error -71
[  551.425727][ T5891] usb 5-1: USB disconnect, device number 90
[  551.479483][T11655] usb 2-1: new low-speed USB device number 101 using dummy_hcd
[  551.525912][T11655] usb 2-1: device descriptor read/8, error -71
[  551.634048][T11655] usb usb2-port1: unable to enumerate USB device
[  551.841483][T12090] fuse: Bad value for 'fd'
[  552.595913][T12104] FAULT_INJECTION: forcing a failure.
[  552.595913][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.657081][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.5.1771 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  552.657105][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.657115][T12104] Call Trace:
[  552.657122][T12104]  <TASK>
[  552.657130][T12104]  dump_stack_lvl+0x189/0x250
[  552.657159][T12104]  ? __pfx____ratelimit+0x10/0x10
[  552.657182][T12104]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.657206][T12104]  ? __pfx__printk+0x10/0x10
[  552.657223][T12104]  ? __might_fault+0xb0/0x130
[  552.657246][T12104]  should_fail_ex+0x414/0x560
[  552.657273][T12104]  _copy_from_user+0x2d/0xb0
[  552.657294][T12104]  get_compat_msghdr+0xad/0x4a0
[  552.657317][T12104]  ? __pfx_get_compat_msghdr+0x10/0x10
[  552.657347][T12104]  ___sys_recvmsg+0x17f/0x510
[  552.657371][T12104]  ? __pfx____sys_recvmsg+0x10/0x10
[  552.657415][T12104]  ? __fget_files+0x3a0/0x420
[  552.657441][T12104]  do_recvmmsg+0x36a/0x770
[  552.657467][T12104]  ? __pfx_do_recvmmsg+0x10/0x10
[  552.657495][T12104]  ? __pfx_vfs_write+0x10/0x10
[  552.657522][T12104]  __sys_recvmmsg+0x19d/0x280
[  552.657543][T12104]  ? __pfx___sys_recvmmsg+0x10/0x10
[  552.657560][T12104]  ? ksys_write+0x22a/0x250
[  552.657582][T12104]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  552.657606][T12104]  __do_fast_syscall_32+0xb6/0x2b0
[  552.657630][T12104]  ? lockdep_hardirqs_on+0x9c/0x150
[  552.657655][T12104]  do_fast_syscall_32+0x34/0x80
[  552.657678][T12104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  552.657696][T12104] RIP: 0023:0xf710e539
[  552.657710][T12104] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  552.657724][T12104] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  552.657740][T12104] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080007680
[  552.657751][T12104] RDX: 0000000000000001 RSI: 0000000040012101 RDI: 0000000000000000
[  552.657761][T12104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  552.657770][T12104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  552.657779][T12104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  552.657800][T12104]  </TASK>
[  552.932864][T11655] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  553.262850][T11655] usb 5-1: Using ep0 maxpacket: 16
[  553.289814][T12114] binder: 12110:12114 unknown command 4030988323
[  553.296776][T12114] binder: 12110:12114 ioctl c0306201 80000440 returned -22
[  553.335431][T12072] delete_channel: no stack
[  553.442921][T11655] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  553.539060][T11655] usb 5-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config
[  553.567823][T11655] usb 5-1: config 0 has no interface number 0
[  553.577729][T11655] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  553.587149][T11655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.595394][T11655] usb 5-1: Product: syz
[  553.599681][T11655] usb 5-1: Manufacturer: syz
[  553.604471][T11655] usb 5-1: SerialNumber: syz
[  553.620632][T11655] usb 5-1: config 0 descriptor??
[  553.692801][T11663] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  553.791113][T11655] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  554.062884][T11655] usb 5-1: No valid video chain found.
[  554.174560][T11663] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  554.223032][T11663] usb 4-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config
[  554.258894][T11663] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  554.313139][T11663] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11
[  554.356180][T11663] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18261, setting to 1024
[  554.408869][T11663] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  554.425201][T11663] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  554.434304][T11663] usb 4-1: Product: syz
[  554.438517][T11663] usb 4-1: Manufacturer: syz
[  554.469065][T12117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  554.480257][T11663] cdc_wdm 4-1:1.0: skipping garbage
[  554.491005][T11663] cdc_wdm 4-1:1.0: skipping garbage
[  554.499525][T12123] tipc: Started in network mode
[  554.504659][T12123] tipc: Node identity 6, cluster identity 4711
[  554.511085][T12123] tipc: Node number set to 6
[  554.525984][T11663] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  554.541389][T11663] cdc_wdm 4-1:1.0: Unknown control protocol
[  554.671137][T12123] netlink: 'syz.1.1785': attribute type 10 has an invalid length.
[  554.773883][T12123] 8021q: adding VLAN 0 to HW filter on device team0
[  554.803843][T12123] team0: entered promiscuous mode
[  554.813558][T12123] team_slave_0: entered promiscuous mode
[  554.821030][T12123] team_slave_1: entered promiscuous mode
[  554.945636][T12123] bond0: (slave team0): Enslaving as an active interface with an up link
[  555.623028][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1778'.
[  555.663961][T12135] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  555.667656][T12137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1778'.
[  555.691868][T11663] usb 5-1: USB disconnect, device number 91
[  555.692914][T12137] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  555.752345][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'.
[  555.766604][T12138] usb usb1: check_ctrlrecip: process 12138 (syz.5.1779) requesting ep 01 but needs 81
[  555.868886][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'.
[  556.472829][T11655] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  556.520039][T11663] usb 4-1: USB disconnect, device number 105
[  556.694730][T11655] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  556.768001][T11655] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  556.838213][T11655] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  556.932805][T11655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.016148][T11655] usb 3-1: config 0 descriptor??
[  557.123743][T11655] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  557.413198][T11663] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  557.448133][    T9] usb 3-1: USB disconnect, device number 101
[  557.577424][T11663] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  557.586421][T11663] usb 4-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config
[  557.647790][T11663] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  557.710372][T11663] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11
[  557.857677][T11663] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18261, setting to 1024
[  558.025555][T11663] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  558.036105][T11663] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  558.055655][T11663] usb 4-1: Product: syz
[  558.066746][T11663] usb 4-1: Manufacturer: syz
[  558.104629][T12167] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  558.137653][T11663] cdc_wdm 4-1:1.0: skipping garbage
[  558.154882][T11663] cdc_wdm 4-1:1.0: skipping garbage
[  558.198580][T11650] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  558.243040][T11663] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  558.311973][T11663] cdc_wdm 4-1:1.0: Unknown control protocol
[  559.052887][T11663] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  559.082579][T11650] usb 5-1: config 0 has no interfaces?
[  559.292850][T11663] usb 3-1: device descriptor read/64, error -71
[  559.456085][T11650] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  559.489564][T11650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.517128][T12189] --map-set only usable from mangle table
[  559.678252][T11650] usb 5-1: Product: syz
[  559.682483][T11650] usb 5-1: Manufacturer: syz
[  559.723029][T11650] usb 5-1: SerialNumber: syz
[  559.737996][T11663] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  559.835678][T11650] usb 5-1: config 0 descriptor??
[  559.892938][T11663] usb 3-1: device descriptor read/64, error -71
[  559.910226][    T9] usb 4-1: USB disconnect, device number 106
[  560.007862][T11663] usb usb3-port1: attempt power cycle
[  560.523165][T11663] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  560.558884][T11663] usb 3-1: device descriptor read/8, error -71
[  560.802971][T11663] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  560.909608][T11663] usb 3-1: device descriptor read/8, error -71
[  561.113326][T11663] usb usb3-port1: unable to enumerate USB device
[  561.182814][T11655] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  561.548234][T11663] usb 5-1: USB disconnect, device number 92
[  561.700838][T11655] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  561.765594][T11655] usb 4-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config
[  561.784365][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  561.841638][T11655] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  561.889819][T11655] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11
[  561.947334][T11655] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18261, setting to 1024
[  561.970503][T11655] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  561.982470][T11655] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  561.994956][T11655] usb 4-1: Product: syz
[  561.999189][T11655] usb 4-1: Manufacturer: syz
[  562.016887][T12198] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  562.026771][T11655] cdc_wdm 4-1:1.0: skipping garbage
[  562.031993][T11655] cdc_wdm 4-1:1.0: skipping garbage
[  562.043335][T11655] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  562.049343][T11655] cdc_wdm 4-1:1.0: Unknown control protocol
[  562.243010][ T5891] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  562.331817][    C0] wdm_int_callback: 9435 callbacks suppressed
[  562.331848][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.344578][    C0] wdm_int_callback: 9435 callbacks suppressed
[  562.344597][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.357166][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.363813][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.370138][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.376770][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.383247][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.389890][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.396356][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.402982][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.409328][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.415972][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.422298][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.428915][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.435483][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.442131][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.448538][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.455178][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.461481][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  562.468091][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  562.499280][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  562.540159][ T5891] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  562.586040][ T5891] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  562.603114][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.721595][ T5891] usb 3-1: Product: syz
[  562.744234][ T5891] usb 3-1: Manufacturer: syz
[  562.748925][ T5891] usb 3-1: SerialNumber: syz
[  562.797823][ T5891] usb 3-1: config 0 descriptor??
[  562.803054][T11655] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  562.834206][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'.
[  562.854492][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1797'.
[  562.877678][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1797'.
[  563.260142][T11655] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  563.288432][T11655] usb 5-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config
[  563.451801][T11655] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  563.472285][T11655] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11
[  563.518003][T11655] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18261, setting to 1024
[  563.587196][T11655] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  563.629918][T11655] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  563.677390][T11655] usb 5-1: Product: syz
[  563.692151][T11655] usb 5-1: Manufacturer: syz
[  563.729828][T12213] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  563.766780][T11655] cdc_wdm 5-1:1.0: skipping garbage
[  563.789237][T11655] cdc_wdm 5-1:1.0: skipping garbage
[  563.814455][T11655] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device
[  563.846817][T11655] cdc_wdm 5-1:1.0: Unknown control protocol
[  564.098693][T12224] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1798'.
[  564.133657][T12224] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1798'.
[  564.436027][T12232] usb usb8: usbfs: process 12232 (syz.5.1799) did not claim interface 0 before use
[  564.749375][T11655] usb 4-1: USB disconnect, device number 107
[  564.749521][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  564.795472][    T9] usb 3-1: USB disconnect, device number 106
[  564.942938][T11663] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  565.030265][    T9] usb 5-1: USB disconnect, device number 93
[  565.113599][T11663] usb 2-1: Using ep0 maxpacket: 32
[  565.143641][T11663] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  565.166901][T11663] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  565.231069][T11663] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  565.297910][T12237] syzkaller1: entered promiscuous mode
[  565.311031][T11663] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  565.329654][T11663] usb 2-1: Product: syz
[  565.337725][T11663] usb 2-1: Manufacturer: syz
[  565.342929][T12237] syzkaller1: entered allmulticast mode
[  565.398798][T11663] hub 2-1:4.0: USB hub found
[  565.591223][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1802'.
[  565.867712][T12254] program syz.4.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  566.172885][    T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  566.252955][   T43] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  566.418391][    T9] usb 5-1: config index 0 descriptor too short (expected 3133, got 61)
[  566.429735][T11663] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[  566.438816][    T9] usb 5-1: config 0 has an invalid interface number: 156 but max is 1
[  566.438853][   T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  566.467829][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.493816][   T43] usb 3-1: Product: syz
[  566.527246][   T43] usb 3-1: Manufacturer: syz
[  566.537614][   T43] usb 3-1: SerialNumber: syz
[  566.567766][   T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  566.594524][T11655] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  566.661073][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  566.674963][T11663] usb 2-1: USB disconnect, device number 102
[  566.793572][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  566.883400][    T9] usb 5-1: config 0 has no interface number 0
[  566.889691][    T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  567.562840][    T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  567.671420][    T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  567.683019][T11655] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  567.720640][T11655] ath9k_htc: Failed to initialize the device
[  567.722567][    T9] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  567.785915][T11650] usb 3-1: USB disconnect, device number 107
[  567.818186][T11650] usb 3-1: ath9k_htc: USB layer deinitialized
[  567.829192][    T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  567.865208][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.930920][    T9] usb 5-1: config 0 descriptor??
[  567.969565][    T9] gspca_main: spca561-2.14.0 probing abcd:cdee
[  568.253303][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'.
[  568.322628][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  568.329281][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  568.355710][T12278] FAULT_INJECTION: forcing a failure.
[  568.355710][T12278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.515425][    T9] spca561 5-1:0.156: probe with driver spca561 failed with error -22
[  568.532921][T12278] CPU: 1 UID: 0 PID: 12278 Comm: syz.1.1811 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  568.532946][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  568.532956][T12278] Call Trace:
[  568.532963][T12278]  <TASK>
[  568.532970][T12278]  dump_stack_lvl+0x189/0x250
[  568.533000][T12278]  ? __pfx____ratelimit+0x10/0x10
[  568.533023][T12278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  568.533057][T12278]  ? __pfx__printk+0x10/0x10
[  568.533075][T12278]  ? __might_fault+0xb0/0x130
[  568.533099][T12278]  should_fail_ex+0x414/0x560
[  568.533127][T12278]  _copy_from_user+0x2d/0xb0
[  568.533147][T12278]  kstrtouint_from_user+0xc4/0x170
[  568.533165][T12278]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  568.533193][T12278]  proc_fail_nth_write+0x88/0x240
[  568.533214][T12278]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  568.533238][T12278]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  568.533259][T12278]  vfs_write+0x27b/0xa90
[  568.533280][T12278]  ? __pfx_vfs_write+0x10/0x10
[  568.533297][T12278]  ? __fget_files+0x2a/0x420
[  568.533318][T12278]  ? __fget_files+0x3a0/0x420
[  568.533340][T12278]  ? __fget_files+0x2a/0x420
[  568.533365][T12278]  ksys_write+0x145/0x250
[  568.533382][T12278]  ? __pfx_ksys_write+0x10/0x10
[  568.533399][T12278]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  568.533423][T12278]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.533448][T12278]  __do_fast_syscall_32+0xb6/0x2b0
[  568.533472][T12278]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.533498][T12278]  do_fast_syscall_32+0x34/0x80
[  568.533522][T12278]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  568.533541][T12278] RIP: 0023:0xf704e539
[  568.533555][T12278] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  568.533568][T12278] RSP: 002b:00000000f501d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  568.533589][T12278] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f501d620
[  568.533599][T12278] RDX: 0000000000000001 RSI: 00000000f73b2ff4 RDI: 0000000000000000
[  568.533609][T12278] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  568.533618][T12278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  568.533627][T12278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  568.533649][T12278]  </TASK>
[  568.771752][    C1] vkms_vblank_simulate: vblank timer overrun
[  568.778252][T11655] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  568.860508][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  568.997256][    T9] usb 5-1: MIDIStreaming interface descriptor not found
[  569.223189][T11655] usb 4-1: config 0 has no interfaces?
[  569.275842][    T9] usb 5-1: USB disconnect, device number 94
[  569.312494][T11655] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  569.363800][T11655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.396573][T11655] usb 4-1: Product: syz
[  569.423841][T11655] usb 4-1: Manufacturer: syz
[  569.446922][T11655] usb 4-1: SerialNumber: syz
[  569.553388][T11655] usb 4-1: config 0 descriptor??
[  569.766027][   T43] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  570.112502][   T43] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  570.306243][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.406515][   T43] usb 2-1: config 0 descriptor??
[  570.444715][   T43] gspca_main: sunplus-2.14.0 probing 055f:c420
[  570.474729][T12307] netlink: 'syz.2.1819': attribute type 10 has an invalid length.
[  570.780794][T12307] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  570.929414][T12307] bond0: (slave lo): refused to change device type
[  570.972393][T12287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  571.273082][   T43] gspca_sunplus: reg_w_riv err -110
[  571.278501][   T43] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  571.323021][ T5891] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  571.474421][ T5891] usb 3-1: device descriptor read/64, error -71
[  571.643029][    T9] usb 2-1: USB disconnect, device number 103
[  571.742824][ T5891] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  571.912833][ T5891] usb 3-1: device descriptor read/64, error -71
[  572.028678][    T9] usb 4-1: USB disconnect, device number 108
[  572.034357][ T5891] usb usb3-port1: attempt power cycle
[  572.084115][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1820'.
[  572.147339][T12320] wireguard0: entered promiscuous mode
[  572.171580][T12320] wireguard0: entered allmulticast mode
[  572.385680][ T5891] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  572.414428][ T5891] usb 3-1: device descriptor read/8, error -71
[  572.652840][ T5891] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  572.682869][   T43] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  572.691881][ T5891] usb 3-1: device descriptor read/8, error -71
[  572.813322][ T5891] usb usb3-port1: unable to enumerate USB device
[  572.922800][   T43] usb 2-1: Using ep0 maxpacket: 8
[  572.930737][   T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  572.952541][   T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  572.977466][   T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  573.142408][   T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  573.166195][   T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  573.195662][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.313133][ T5891] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  573.455196][   T43] usb 2-1: GET_CAPABILITIES returned 0
[  573.476991][ T5891] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  573.515068][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  573.529358][   T43] usbtmc 2-1:16.0: can't read capabilities
[  573.564342][ T5891] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  573.595328][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  573.606199][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.358559][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  574.400299][T12334] delete_channel: no stack
[  574.429606][ T5891] usb 5-1: invalid MIDI out EP 0
[  574.631074][ T6161] udevd[6161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  574.689521][ T5891] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  574.730224][ T5891] usb 5-1: USB disconnect, device number 95
[  575.879691][ T5891] usb 2-1: USB disconnect, device number 104
[  576.238849][T12363] fuse: Bad value for 'rootmode'
[  576.437141][T12371] input: syz0 as /devices/virtual/input/input49
[  576.703857][    T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  576.984530][    T9] usb 6-1: config 0 has no interfaces?
[  577.020690][    T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  577.068332][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.116983][    T9] usb 6-1: Product: syz
[  577.121209][    T9] usb 6-1: Manufacturer: syz
[  577.157829][    T9] usb 6-1: SerialNumber: syz
[  577.181528][    T9] usb 6-1: config 0 descriptor??
[  577.426481][T12387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1842'.
[  577.841112][ T5891] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  578.002944][ T5891] usb 3-1: Using ep0 maxpacket: 16
[  578.014235][ T5891] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  578.034871][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.055609][ T5891] usb 3-1: Product: syz
[  578.078127][ T5891] usb 3-1: Manufacturer: syz
[  578.091915][ T5891] usb 3-1: SerialNumber: syz
[  578.128246][ T5891] r8152-cfgselector 3-1: Unknown version 0x0000
[  578.134858][ T5891] r8152-cfgselector 3-1: config 0 descriptor??
[  578.567097][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1844'.
[  578.576244][T12401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1844'.
[  579.187931][T12404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.212429][T12404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.500069][    T9] r8152-cfgselector 3-1: USB disconnect, device number 112
[  579.923261][T12407] fuse: Bad value for 'rootmode'
[  579.971450][    T9] usb 6-1: USB disconnect, device number 66
[  580.442982][ T5891] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  580.481245][T12417] netlink: 'syz.2.1850': attribute type 10 has an invalid length.
[  580.559423][T12417] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  580.592364][T12417] bond0: (slave lo): refused to change device type
[  580.607374][ T5891] usb 5-1: config 0 has no interfaces?
[  580.626901][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  580.636493][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.656681][ T5891] usb 5-1: Product: syz
[  580.660976][ T5891] usb 5-1: Manufacturer: syz
[  580.669571][ T5891] usb 5-1: SerialNumber: syz
[  580.677801][ T5891] usb 5-1: config 0 descriptor??
[  580.899126][T12413] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1848'.
[  580.930916][T12413] misc userio: No port type given on /dev/userio
[  580.938113][T12413] misc userio: The device must be registered before sending interrupts
[  581.607832][   T30] audit: type=1326 audit(1749093507.053:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  581.782209][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1855'.
[  581.798895][   T30] audit: type=1326 audit(1749093507.053:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.008246][   T30] audit: type=1326 audit(1749093507.053:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.072942][   T30] audit: type=1326 audit(1749093507.053:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.103234][   T30] audit: type=1326 audit(1749093507.053:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.127278][   T30] audit: type=1326 audit(1749093507.053:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.149784][   T30] audit: type=1326 audit(1749093507.053:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.192847][    T9] usb 6-1: new full-speed USB device number 67 using dummy_hcd
[  582.298923][   T30] audit: type=1326 audit(1749093507.053:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.332896][    T9] usb 6-1: device descriptor read/64, error -71
[  582.400366][   T30] audit: type=1326 audit(1749093507.053:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.438501][   T30] audit: type=1326 audit(1749093507.643:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  582.612777][    T9] usb 6-1: new full-speed USB device number 68 using dummy_hcd
[  582.667448][T12447] fuse: Bad value for 'rootmode'
[  582.772933][    T9] usb 6-1: device descriptor read/64, error -71
[  582.976095][    T9] usb usb6-port1: attempt power cycle
[  582.999213][T12456] FAULT_INJECTION: forcing a failure.
[  582.999213][T12456] name failslab, interval 1, probability 0, space 0, times 0
[  583.235912][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'.
[  583.294943][T12456] CPU: 1 UID: 0 PID: 12456 Comm: syz.3.1861 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  583.294972][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  583.294983][T12456] Call Trace:
[  583.294990][T12456]  <TASK>
[  583.294998][T12456]  dump_stack_lvl+0x189/0x250
[  583.295028][T12456]  ? __pfx____ratelimit+0x10/0x10
[  583.295053][T12456]  ? __pfx_dump_stack_lvl+0x10/0x10
[  583.295077][T12456]  ? __pfx__printk+0x10/0x10
[  583.295103][T12456]  ? __pfx___might_resched+0x10/0x10
[  583.295121][T12456]  should_fail_ex+0x414/0x560
[  583.295149][T12456]  should_failslab+0xa8/0x100
[  583.295169][T12456]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  583.295193][T12456]  ? __alloc_skb+0x112/0x2d0
[  583.295221][T12456]  __alloc_skb+0x112/0x2d0
[  583.295250][T12456]  netlink_sendmsg+0x5c6/0xb30
[  583.295280][T12456]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.295300][T12456]  ? __import_iovec+0x5d4/0x7f0
[  583.295318][T12456]  ? aa_sock_msg_perm+0x94/0x160
[  583.295344][T12456]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  583.295365][T12456]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.295388][T12456]  __sock_sendmsg+0x219/0x270
[  583.295419][T12456]  ____sys_sendmsg+0x505/0x830
[  583.295443][T12456]  ? __pfx_____sys_sendmsg+0x10/0x10
[  583.295474][T12456]  ___sys_sendmsg+0x21f/0x2a0
[  583.295495][T12456]  ? __pfx____sys_sendmsg+0x10/0x10
[  583.295540][T12456]  ? __fget_files+0x2a/0x420
[  583.295558][T12456]  ? __fget_files+0x3a0/0x420
[  583.295583][T12456]  __sys_sendmsg+0x164/0x220
[  583.295603][T12456]  ? __pfx___sys_sendmsg+0x10/0x10
[  583.295634][T12456]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  583.295670][T12456]  ? lockdep_hardirqs_on+0x9c/0x150
[  583.295704][T12456]  __do_fast_syscall_32+0xb6/0x2b0
[  583.295737][T12456]  ? lockdep_hardirqs_on+0x9c/0x150
[  583.295772][T12456]  do_fast_syscall_32+0x34/0x80
[  583.295806][T12456]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  583.295834][T12456] RIP: 0023:0xf7fc1539
[  583.295853][T12456] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  583.295874][T12456] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  583.295907][T12456] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  583.295923][T12456] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000
[  583.295937][T12456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  583.295950][T12456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  583.295963][T12456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  583.295994][T12456]  </TASK>
[  583.895469][T11650] usb 5-1: USB disconnect, device number 96
[  583.926841][    T9] usb 6-1: new full-speed USB device number 69 using dummy_hcd
[  584.014800][    T9] usb 6-1: device descriptor read/8, error -71
[  584.273362][    T9] usb 6-1: new full-speed USB device number 70 using dummy_hcd
[  584.333807][    T9] usb 6-1: device descriptor read/8, error -71
[  584.503820][    T9] usb usb6-port1: unable to enumerate USB device
[  584.662902][T11650] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  584.910886][T11650] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  584.973170][T11650] usb 5-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config
[  585.072323][T11650] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  585.122801][T11650] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11
[  585.152800][T11650] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18261, setting to 1024
[  585.242293][T11650] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  585.332166][T11650] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  585.386669][T11650] usb 5-1: Product: syz
[  585.399674][T11650] usb 5-1: Manufacturer: syz
[  585.533397][T12469] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  585.582927][ T5891] usb 6-1: new low-speed USB device number 71 using dummy_hcd
[  585.628113][T11650] cdc_wdm 5-1:1.0: skipping garbage
[  585.653298][T11650] cdc_wdm 5-1:1.0: skipping garbage
[  585.680682][T11650] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  585.724099][T11650] cdc_wdm 5-1:1.0: Unknown control protocol
[  585.747365][ T5891] usb 6-1: config 65 has an invalid interface number: 95 but max is 0
[  585.758429][ T5891] usb 6-1: config 65 has no interface number 0
[  585.789761][ T5891] usb 6-1: string descriptor 0 read error: -22
[  585.796397][ T5891] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6
[  585.836878][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.881348][ T5891] usbtest 6-1:65.95: Linux gadget zero
[  585.905747][ T5891] usbtest 6-1:65.95: low-speed {control in/out} tests (+alt)
[  586.067759][T12487] veth0: entered promiscuous mode
[  586.084179][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'.
[  586.845869][T11650] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  587.015708][T11650] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.026436][T11650] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  587.043962][T11650] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  587.067040][T11650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.092142][T11650] usb 4-1: config 0 descriptor??
[  587.537940][T12501] netlink: 'syz.3.1871': attribute type 21 has an invalid length.
[  587.572989][T12501] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1871'.
[  587.594121][ T5891] usb 5-1: USB disconnect, device number 97
[  587.604324][T12501] netlink: 'syz.3.1871': attribute type 4 has an invalid length.
[  587.637891][T12501] netlink: 'syz.3.1871': attribute type 3 has an invalid length.
[  587.698546][T12501] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1871'.
[  588.278596][    T9] usb 6-1: USB disconnect, device number 71
[  588.608060][T11650] Bluetooth: Can't get state to change to load configuration err
[  588.637003][T11650] Bluetooth: Loading sysconfig file failed
[  588.656885][T11650] ath3k 4-1:0.0: probe with driver ath3k failed with error -16
[  588.724121][T11650] usb 4-1: USB disconnect, device number 109
[  589.193058][T11650] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  589.342886][T11650] usb 4-1: device descriptor read/64, error -71
[  589.578922][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1882'.
[  589.622944][T11650] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  590.086262][T11650] usb 4-1: device descriptor read/64, error -71
[  590.233028][T11650] usb usb4-port1: attempt power cycle
[  590.572820][T11650] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  590.594389][T11650] usb 4-1: device descriptor read/8, error -71
[  590.732948][   T43] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[  590.842935][T11650] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  590.896543][T11650] usb 4-1: device descriptor read/8, error -71
[  591.123098][T11650] usb usb4-port1: unable to enumerate USB device
[  591.132503][T12547] FAULT_INJECTION: forcing a failure.
[  591.132503][T12547] name failslab, interval 1, probability 0, space 0, times 0
[  591.172866][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.4.1883 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  591.172899][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  591.172914][T12547] Call Trace:
[  591.172924][T12547]  <TASK>
[  591.172934][T12547]  dump_stack_lvl+0x189/0x250
[  591.172974][T12547]  ? __pfx____ratelimit+0x10/0x10
[  591.173007][T12547]  ? __pfx_dump_stack_lvl+0x10/0x10
[  591.173042][T12547]  ? __pfx__printk+0x10/0x10
[  591.173075][T12547]  ? ref_tracker_alloc+0x318/0x460
[  591.173097][T12547]  should_fail_ex+0x414/0x560
[  591.173134][T12547]  should_failslab+0xa8/0x100
[  591.173161][T12547]  kmem_cache_alloc_noprof+0x73/0x3c0
[  591.173181][T12547]  ? skb_clone+0x212/0x3a0
[  591.173218][T12547]  skb_clone+0x212/0x3a0
[  591.173251][T12547]  __netlink_deliver_tap+0x404/0x850
[  591.173291][T12547]  ? netlink_deliver_tap+0x2e/0x1b0
[  591.173324][T12547]  netlink_deliver_tap+0x19c/0x1b0
[  591.173379][T12547]  netlink_unicast+0x72f/0x8d0
[  591.173414][T12547]  netlink_sendmsg+0x805/0xb30
[  591.173450][T12547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.173479][T12547]  ? __import_iovec+0x5d4/0x7f0
[  591.173505][T12547]  ? aa_sock_msg_perm+0x94/0x160
[  591.173539][T12547]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  591.173569][T12547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.173596][T12547]  __sock_sendmsg+0x219/0x270
[  591.173634][T12547]  ____sys_sendmsg+0x505/0x830
[  591.173669][T12547]  ? __pfx_____sys_sendmsg+0x10/0x10
[  591.173714][T12547]  ___sys_sendmsg+0x21f/0x2a0
[  591.173745][T12547]  ? __pfx____sys_sendmsg+0x10/0x10
[  591.173810][T12547]  ? __fget_files+0x2a/0x420
[  591.173835][T12547]  ? __fget_files+0x3a0/0x420
[  591.173871][T12547]  __sys_sendmsg+0x164/0x220
[  591.173901][T12547]  ? __pfx___sys_sendmsg+0x10/0x10
[  591.173945][T12547]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  591.173980][T12547]  ? lockdep_hardirqs_on+0x9c/0x150
[  591.174013][T12547]  __do_fast_syscall_32+0xb6/0x2b0
[  591.174056][T12547]  do_fast_syscall_32+0x34/0x80
[  591.174091][T12547]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  591.174117][T12547] RIP: 0023:0xf7fc8539
[  591.174136][T12547] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  591.174155][T12547] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  591.174179][T12547] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000680
[  591.174195][T12547] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  591.174208][T12547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  591.174221][T12547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  591.174234][T12547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  591.174266][T12547]  </TASK>
[  591.179857][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  591.437461][T12555] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1886'.
[  591.565987][   T43] usb 5-1: unable to read config index 0 descriptor/start: -71
[  591.613400][   T43] usb 5-1: can't read configurations, error -71
[  591.743199][T11650] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  591.954486][T11650] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  591.968811][T11650] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  591.984036][T11650] usb 6-1: config 220 interface 0 has no altsetting 0
[  591.996772][T11650] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  592.025093][T11650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.067009][T11650] usb 6-1: Product: syz
[  592.071317][T11650] usb 6-1: Manufacturer: syz
[  592.095021][T11650] usb 6-1: SerialNumber: syz
[  592.198669][T12563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.282977][   T43] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  592.354346][T11650] usb 6-1: Found UVC 0.00 device syz (8086:0b07)
[  592.361560][T11650] usb 6-1: No valid video chain found.
[  592.410931][T11650] usb 6-1: USB disconnect, device number 72
[  592.453064][   T43] usb 5-1: Using ep0 maxpacket: 16
[  592.528293][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1887'.
[  592.602974][T11656] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  592.766906][T11656] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.782284][T11656] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  592.792044][T11656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.811114][T11656] usb 2-1: config 0 descriptor??
[  592.826372][T11656] pwc: Askey VC010 type 2 USB webcam detected.
[  593.023021][T11656] pwc: send_video_command error -71
[  593.036530][T11656] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  593.056497][T11656] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  593.087135][T11656] usb 2-1: USB disconnect, device number 105
[  593.313006][ T5891] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  593.485948][ T5891] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  593.508796][ T5891] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  593.542971][T11656] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  593.560199][ T5891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  593.589735][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  593.615476][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  593.669848][ T5891] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  593.699634][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  593.728332][T11656] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.746485][ T5891] usb 6-1: Product: syz
[  593.761212][ T5891] usb 6-1: Manufacturer: syz
[  593.769782][T11656] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  593.799683][T11656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.809768][ T5891] cdc_wdm 6-1:1.0: skipping garbage
[  593.828972][ T5891] cdc_wdm 6-1:1.0: skipping garbage
[  593.838849][T11656] usb 2-1: config 0 descriptor??
[  593.855882][ T5891] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  593.868344][ T5891] cdc_wdm 6-1:1.0: Unknown control protocol
[  593.880462][T11656] pwc: Askey VC010 type 2 USB webcam detected.
[  594.042337][    C1] wdm_int_callback: 11586 callbacks suppressed
[  594.042366][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  594.055224][    C1] wdm_int_callback: 11586 callbacks suppressed
[  594.055245][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  594.069601][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  594.076885][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  594.083672][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  594.090499][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  594.096918][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  594.103549][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  594.112814][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  594.119574][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  594.120236][    T9] usb 6-1: USB disconnect, device number 73
[  594.126451][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  594.243128][T11650] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  594.395495][T11656] pwc: recv_control_msg error -32 req 02 val 2b00
[  594.438315][T11656] pwc: recv_control_msg error -32 req 02 val 2700
[  594.446582][T11650] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.457580][T11656] pwc: recv_control_msg error -32 req 02 val 2c00
[  594.485585][T11656] pwc: recv_control_msg error -32 req 04 val 1000
[  594.485610][T11650] usb 4-1: config 0 has no interfaces?
[  594.524983][T11650] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  594.537759][T11650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.548172][T11656] pwc: recv_control_msg error -32 req 04 val 1300
[  594.560015][T11650] usb 4-1: config 0 descriptor??
[  594.577802][T11656] pwc: recv_control_msg error -32 req 04 val 1400
[  594.586327][T11656] pwc: recv_control_msg error -32 req 02 val 2000
[  594.637181][T11656] pwc: recv_control_msg error -32 req 02 val 2100
[  594.648672][T11656] pwc: recv_control_msg error -32 req 04 val 1500
[  594.657286][T11656] pwc: recv_control_msg error -32 req 02 val 2500
[  594.665823][T11656] pwc: recv_control_msg error -32 req 02 val 2400
[  594.675381][T11656] pwc: recv_control_msg error -32 req 02 val 2600
[  594.692267][T11656] pwc: recv_control_msg error -71 req 02 val 2900
[  594.700188][T11656] pwc: recv_control_msg error -71 req 02 val 2800
[  594.708519][T11656] pwc: recv_control_msg error -71 req 04 val 1100
[  594.721364][T11656] pwc: recv_control_msg error -71 req 04 val 1200
[  594.745872][T11656] pwc: Registered as video103.
[  594.791864][T11656] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51
[  594.836445][T11650] usb 4-1: USB disconnect, device number 114
[  594.916133][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  594.938743][T11656] usb 2-1: USB disconnect, device number 106
[  594.971361][   T43] usb 5-1: unable to read config index 0 descriptor/start: -71
[  595.027327][   T43] usb 5-1: can't read configurations, error -71
[  595.124223][   T43] usb usb5-port1: attempt power cycle
[  595.202955][T11650] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  595.379002][T11650] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  595.398375][T11650] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  595.409591][T11650] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  595.462976][T11650] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  595.482895][   T43] usb 5-1: new full-speed USB device number 100 using dummy_hcd
[  595.495775][T11650] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  595.529911][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  595.535757][T11650] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  595.552777][T11650] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  595.570822][T11650] usb 4-1: Product: syz
[  595.601309][T11650] usb 4-1: Manufacturer: syz
[  595.642363][T11650] cdc_wdm 4-1:1.0: skipping garbage
[  595.652948][T11650] cdc_wdm 4-1:1.0: skipping garbage
[  595.673728][T11650] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  595.679733][T11650] cdc_wdm 4-1:1.0: Unknown control protocol
[  595.691863][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'.
[  595.703647][   T43] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  595.780398][T12600] wireguard0: entered promiscuous mode
[  595.787762][T12600] wireguard0: entered allmulticast mode
[  595.834191][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.086452][   T43] usb 5-1: Product: syz
[  596.116454][   T43] usb 5-1: Manufacturer: syz
[  596.129864][   T43] usb 5-1: SerialNumber: syz
[  596.144738][   T43] usb 5-1: config 0 descriptor??
[  596.197477][   T43] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  596.210398][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  596.243094][T11656] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  596.262890][   T43] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  596.282306][   T43] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  596.320183][   T43] usb 5-1: media controller created
[  596.358955][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  596.394973][T11656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.406828][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  596.413936][T12593] Invalid logical block size (-4)
[  596.442482][T11656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.453679][   T43] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  596.460467][T12593] program syz.4.1897 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  596.487849][T11656] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  596.508416][T11656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.520698][   T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52
[  596.544004][T11656] usb 2-1: config 0 descriptor??
[  596.583760][   T43] dvb-usb: schedule remote query interval to 150 msecs.
[  596.591489][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  596.617019][   T43] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  596.742957][   T43] dvb-usb: bulk message failed: -22 (1/0)
[  596.749469][   T43] dvb-usb: error while querying for an remote control event.
[  596.933054][   T43] dvb-usb: bulk message failed: -22 (1/0)
[  596.945521][   T43] dvb-usb: error while querying for an remote control event.
[  597.122801][   T43] dvb-usb: bulk message failed: -22 (1/0)
[  597.129511][   T43] dvb-usb: error while querying for an remote control event.
[  597.138971][T11650] usb 4-1: USB disconnect, device number 115
[  597.215326][T11656] elecom 0003:056E:010D.0016: item fetching failed at offset 5/8
[  597.237127][T11656] elecom 0003:056E:010D.0016: probe with driver elecom failed with error -22
[  597.343030][T11656] dvb-usb: bulk message failed: -22 (1/0)
[  597.359385][T11656] dvb-usb: error while querying for an remote control event.
[  597.513883][T11650] usb 2-1: USB disconnect, device number 107
[  597.542947][T11656] dvb-usb: bulk message failed: -22 (1/0)
[  597.563247][T11656] dvb-usb: error while querying for an remote control event.
[  597.793027][T11656] dvb-usb: bulk message failed: -22 (1/0)
[  597.871105][T11656] dvb-usb: error while querying for an remote control event.
[  597.953422][T12615] binder: 12614:12615 ioctl c0306201 80000640 returned -22
[  598.752306][   T43] dvb-usb: bulk message failed: -22 (1/0)
[  598.792917][   T43] dvb-usb: error while querying for an remote control event.
[  598.826993][T11650] usb 5-1: USB disconnect, device number 100
[  598.908960][T11650] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  598.991265][T12623] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  599.074216][T12625] netlink: 'syz.5.1907': attribute type 10 has an invalid length.
[  599.089714][T12625] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  599.182749][    T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  599.354165][    T9] usb 4-1: Using ep0 maxpacket: 16
[  599.365388][T11650] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  599.381134][    T9] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  599.407623][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  599.438317][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.462952][    T9] usb 4-1: Product: syz
[  599.467392][    T9] usb 4-1: Manufacturer: syz
[  599.482746][    T9] usb 4-1: SerialNumber: syz
[  599.490778][    T9] usb 4-1: config 0 descriptor??
[  599.538237][T11650] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  599.558397][T11650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.578178][T11650] usb 5-1: Product: syz
[  599.588350][T11650] usb 5-1: Manufacturer: syz
[  599.602815][T11650] usb 5-1: SerialNumber: syz
[  599.615049][T11650] usb 5-1: config 0 descriptor??
[  599.743570][    T9] usb 4-1: USB disconnect, device number 116
[  599.873116][   T43] usb 2-1: new full-speed USB device number 108 using dummy_hcd
[  600.072767][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  600.156423][   T43] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  600.188879][   T43] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.229798][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  600.254627][   T43] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  600.290429][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.403450][   T43] usb 2-1: config 0 descriptor??
[  600.665926][   T43] usbhid 2-1:0.0: can't add hid device: -71
[  600.807525][   T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  600.878869][   T43] usb 2-1: USB disconnect, device number 108
[  601.112741][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  601.952019][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'.
[  601.996297][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'.
[  602.040318][T12659] FAULT_INJECTION: forcing a failure.
[  602.040318][T12659] name failslab, interval 1, probability 0, space 0, times 0
[  602.079948][T12659] CPU: 1 UID: 0 PID: 12659 Comm: syz.5.1916 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  602.079974][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  602.079984][T12659] Call Trace:
[  602.079993][T12659]  <TASK>
[  602.080001][T12659]  dump_stack_lvl+0x189/0x250
[  602.080041][T12659]  ? __pfx____ratelimit+0x10/0x10
[  602.080073][T12659]  ? __pfx_dump_stack_lvl+0x10/0x10
[  602.080106][T12659]  ? __pfx__printk+0x10/0x10
[  602.080135][T12659]  ? xfrm_nlmsg_multicast+0x18f/0x1f0
[  602.080163][T12659]  should_fail_ex+0x414/0x560
[  602.080204][T12659]  should_failslab+0xa8/0x100
[  602.080232][T12659]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  602.080257][T12659]  ? __alloc_skb+0x112/0x2d0
[  602.080287][T12659]  __alloc_skb+0x112/0x2d0
[  602.080316][T12659]  pfkey_send_policy_notify+0x145/0x990
[  602.080354][T12659]  ? __pfx_pfkey_send_policy_notify+0x10/0x10
[  602.080391][T12659]  km_policy_notify+0x11e/0x200
[  602.080413][T12659]  ? km_policy_notify+0x28/0x200
[  602.080444][T12659]  xfrm_add_policy+0x4c7/0x800
[  602.080468][T12659]  ? __pfx_xfrm_add_policy+0x10/0x10
[  602.080497][T12659]  ? __nla_parse+0x40/0x60
[  602.080527][T12659]  xfrm_user_rcv_msg+0x7a3/0xab0
[  602.080559][T12659]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  602.080608][T12659]  ? __mutex_trylock_common+0x153/0x260
[  602.080627][T12659]  ? __pfx___mutex_trylock_common+0x10/0x10
[  602.080655][T12659]  ? rcu_is_watching+0x15/0xb0
[  602.080678][T12659]  ? trace_contention_end+0x39/0x120
[  602.080708][T12659]  netlink_rcv_skb+0x208/0x470
[  602.080733][T12659]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  602.080753][T12659]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  602.080783][T12659]  ? netlink_deliver_tap+0x2e/0x1b0
[  602.080808][T12659]  ? netlink_deliver_tap+0x2e/0x1b0
[  602.080835][T12659]  xfrm_netlink_rcv+0x79/0x90
[  602.080860][T12659]  netlink_unicast+0x75b/0x8d0
[  602.080891][T12659]  netlink_sendmsg+0x805/0xb30
[  602.080917][T12659]  ? __pfx_netlink_sendmsg+0x10/0x10
[  602.080944][T12659]  ? __import_iovec+0x5d4/0x7f0
[  602.080973][T12659]  ? aa_sock_msg_perm+0x94/0x160
[  602.081184][T12659]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  602.081217][T12659]  ? __pfx_netlink_sendmsg+0x10/0x10
[  602.081244][T12659]  __sock_sendmsg+0x219/0x270
[  602.081279][T12659]  ____sys_sendmsg+0x505/0x830
[  602.081308][T12659]  ? __pfx_____sys_sendmsg+0x10/0x10
[  602.081351][T12659]  ___sys_sendmsg+0x21f/0x2a0
[  602.081382][T12659]  ? __pfx____sys_sendmsg+0x10/0x10
[  602.081443][T12659]  ? __fget_files+0x2a/0x420
[  602.081467][T12659]  ? __fget_files+0x3a0/0x420
[  602.081503][T12659]  __sys_sendmsg+0x164/0x220
[  602.081533][T12659]  ? __pfx___sys_sendmsg+0x10/0x10
[  602.081578][T12659]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  602.081614][T12659]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.081646][T12659]  __do_fast_syscall_32+0xb6/0x2b0
[  602.081677][T12659]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.081714][T12659]  do_fast_syscall_32+0x34/0x80
[  602.081756][T12659]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  602.081781][T12659] RIP: 0023:0xf710e539
[  602.081795][T12659] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  602.081810][T12659] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  602.081827][T12659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  602.081842][T12659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  602.081856][T12659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  602.081870][T12659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  602.081882][T12659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  602.081912][T12659]  </TASK>
[  602.152812][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  602.465653][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'.
[  602.608596][T12662] wireguard0: entered promiscuous mode
[  602.626446][T12662] wireguard0: entered allmulticast mode
[  603.001742][T11650] mos7840 5-1:0.0: required endpoints missing
[  603.427093][T11650] usb 5-1: USB disconnect, device number 101
[  603.717918][T12679] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  603.736271][T12679] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  603.756695][    T9] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  603.772961][T12679] bond0: (slave lo): refused to change device type
[  603.942845][T11650] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  604.132839][T11650] usb 5-1: Using ep0 maxpacket: 16
[  604.138268][    T9] usb 6-1: config 0 has no interfaces?
[  604.142927][T11656] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  604.232843][    T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  604.262241][T11650] usb 5-1: unable to get BOS descriptor or descriptor too short
[  604.282884][T11656] usb 3-1: device descriptor read/64, error -71
[  604.313026][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.375061][T11650] usb 5-1: unable to read config index 0 descriptor/start: -71
[  604.382903][    T9] usb 6-1: Product: syz
[  604.413985][    T9] usb 6-1: Manufacturer: syz
[  604.418751][T11650] usb 5-1: can't read configurations, error -71
[  604.429591][    T9] usb 6-1: SerialNumber: syz
[  604.457009][    T9] usb 6-1: config 0 descriptor??
[  604.523046][T11656] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  604.672945][T11656] usb 3-1: device descriptor read/64, error -71
[  604.778761][T12677] netlink: 'syz.5.1920': attribute type 2 has an invalid length.
[  604.792086][T11656] usb usb3-port1: attempt power cycle
[  604.852777][    T9] usb 2-1: new full-speed USB device number 109 using dummy_hcd
[  605.005131][    T9] usb 2-1: config 176 has too many interfaces: 171, using maximum allowed: 32
[  605.014628][    T9] usb 2-1: config 176 has 1 interface, different from the descriptor's value: 171
[  605.029166][    T9] usb 2-1: config 176 has no interface number 0
[  605.040208][    T9] usb 2-1: config 176 interface 13 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  605.042960][   T43] usb 4-1: new full-speed USB device number 117 using dummy_hcd
[  605.069108][    T9] usb 2-1: config 176 interface 13 has no altsetting 0
[  605.081908][    T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  605.102115][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.126419][T12684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  605.152886][T11656] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  605.221613][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  605.237765][T11656] usb 3-1: device descriptor read/8, error -71
[  605.244082][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.259480][   T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  605.268719][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.281517][   T43] usb 4-1: config 0 descriptor??
[  605.295333][   T43] hub 4-1:0.0: USB hub found
[  605.351271][T12684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.368427][T12684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.492818][T11656] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  605.513735][T11656] usb 3-1: device descriptor read/8, error -71
[  605.520201][   T43] hub 4-1:0.0: 1 port detected
[  605.540446][T12693] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1924'.
[  605.633298][T11656] usb usb3-port1: unable to enumerate USB device
[  605.736862][   T43] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  605.748196][   T43] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  605.760577][   T43] usbhid 4-1:0.0: can't add hid device: -71
[  605.773420][   T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  605.805890][   T43] usb 4-1: USB disconnect, device number 117
[  605.986388][T12697] FAULT_INJECTION: forcing a failure.
[  605.986388][T12697] name failslab, interval 1, probability 0, space 0, times 0
[  606.007052][T12697] CPU: 1 UID: 0 PID: 12697 Comm: syz.4.1928 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  606.007085][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  606.007100][T12697] Call Trace:
[  606.007112][T12697]  <TASK>
[  606.007122][T12697]  dump_stack_lvl+0x189/0x250
[  606.007168][T12697]  ? __pfx____ratelimit+0x10/0x10
[  606.007195][T12697]  ? __pfx_dump_stack_lvl+0x10/0x10
[  606.007220][T12697]  ? __pfx__printk+0x10/0x10
[  606.007251][T12697]  ? __pfx___might_resched+0x10/0x10
[  606.007272][T12697]  ? fs_reclaim_acquire+0x7d/0x100
[  606.007303][T12697]  should_fail_ex+0x414/0x560
[  606.007338][T12697]  should_failslab+0xa8/0x100
[  606.007356][T12697]  kmem_cache_alloc_noprof+0x73/0x3c0
[  606.007372][T12697]  ? security_inode_alloc+0x39/0x330
[  606.007399][T12697]  security_inode_alloc+0x39/0x330
[  606.007424][T12697]  inode_init_always_gfp+0x9ed/0xdc0
[  606.007458][T12697]  alloc_inode+0x82/0x1b0
[  606.007484][T12697]  alloc_anon_inode+0x1f/0x360
[  606.007513][T12697]  __anon_inode_getfile+0x11c/0x360
[  606.007541][T12697]  ? __pfx___anon_inode_getfile+0x10/0x10
[  606.007581][T12697]  io_uring_create+0x703/0xb60
[  606.007614][T12697]  __se_sys_io_uring_setup+0x264/0x270
[  606.007645][T12697]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  606.007684][T12697]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  606.007708][T12697]  ? lockdep_hardirqs_on+0x9c/0x150
[  606.007745][T12697]  __do_fast_syscall_32+0xb6/0x2b0
[  606.007779][T12697]  ? lockdep_hardirqs_on+0x9c/0x150
[  606.007813][T12697]  do_fast_syscall_32+0x34/0x80
[  606.007837][T12697]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.007864][T12697] RIP: 0023:0xf7fc8539
[  606.007885][T12697] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  606.007905][T12697] RSP: 002b:00000000f50e650c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  606.007927][T12697] RAX: ffffffffffffffda RBX: 0000000000003c63 RCX: 0000000080000240
[  606.007942][T12697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  606.007954][T12697] RBP: 00000000800002c0 R08: 0000000000000000 R09: 0000000000000000
[  606.007968][T12697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  606.007977][T12697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.007998][T12697]  </TASK>
[  606.248108][    C1] vkms_vblank_simulate: vblank timer overrun
[  606.556950][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'.
[  606.567819][T12702] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1930'.
[  606.577835][T12702] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1930'.
[  606.587526][T11650] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  606.800568][T11650] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  606.823973][T11650] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  606.831157][ T5891] usb 6-1: USB disconnect, device number 75
[  606.855360][T11650] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  606.879172][T11650] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  606.898968][T11650] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  606.917748][T11650] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  606.922864][   T43] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  606.933846][T11650] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  606.947973][T12706] FAULT_INJECTION: forcing a failure.
[  606.947973][T12706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.964298][T11650] usb 5-1: Product: syz
[  606.968585][T11650] usb 5-1: Manufacturer: syz
[  606.984451][T11650] cdc_wdm 5-1:1.0: skipping garbage
[  606.988510][T12706] CPU: 1 UID: 0 PID: 12706 Comm: syz.2.1932 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  606.988546][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  606.988563][T12706] Call Trace:
[  606.988574][T12706]  <TASK>
[  606.988585][T12706]  dump_stack_lvl+0x189/0x250
[  606.988631][T12706]  ? __pfx____ratelimit+0x10/0x10
[  606.988668][T12706]  ? __pfx_dump_stack_lvl+0x10/0x10
[  606.988705][T12706]  ? __pfx__printk+0x10/0x10
[  606.988750][T12706]  should_fail_ex+0x414/0x560
[  606.988791][T12706]  strncpy_from_user+0x36/0x290
[  606.988820][T12706]  keyctl_restrict_keyring+0xc7/0x210
[  606.988847][T12706]  ? __pfx_keyctl_restrict_keyring+0x10/0x10
[  606.988898][T12706]  ? __ia32_compat_sys_keyctl+0x2e2/0x630
[  606.988927][T12706]  __do_fast_syscall_32+0xb6/0x2b0
[  606.988966][T12706]  ? lockdep_hardirqs_on+0x9c/0x150
[  606.989006][T12706]  do_fast_syscall_32+0x34/0x80
[  606.989054][T12706]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.989085][T12706] RIP: 0023:0xf704e539
[  606.989106][T12706] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  606.989129][T12706] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000120
[  606.989154][T12706] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000025ad659b
[  606.989172][T12706] RDX: 0000000080000200 RSI: 0000000080000080 RDI: 0000000000000000
[  606.989189][T12706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.989205][T12706] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  606.989219][T12706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.989254][T12706]  </TASK>
[  607.094408][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  607.184894][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  607.234725][T11650] cdc_wdm 5-1:1.0: skipping garbage
[  607.268398][T11650] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  607.275260][T11650] cdc_wdm 5-1:1.0: Unknown control protocol
[  607.306794][   T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  607.322899][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  607.341982][   T43] usb 4-1: SerialNumber: syz
[  607.609970][    T9] usbhid 2-1:176.13: can't add hid device: -71
[  607.611900][   T43] usb 4-1: skipping empty audio interface (v1)
[  607.623074][    T9] usbhid 2-1:176.13: probe with driver usbhid failed with error -71
[  607.650312][    T9] usb 2-1: USB disconnect, device number 109
[  607.662971][ T5891] usb 6-1: new full-speed USB device number 76 using dummy_hcd
[  607.786577][   T43] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  607.809090][   T43] usb 4-1: USB disconnect, device number 118
[  607.856380][ T5891] usb 6-1: config 0 has an invalid interface number: 107 but max is 0
[  607.868404][ T5891] usb 6-1: config 0 has no interface number 0
[  607.880570][ T5891] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 31092, setting to 64
[  607.934212][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  607.957528][ T5891] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  607.971028][ T5891] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  608.002165][ T5891] usb 6-1: Product: syz
[  608.011210][ T5891] usb 6-1: Manufacturer: syz
[  608.021073][ T5891] usb 6-1: SerialNumber: syz
[  608.037291][ T5891] usb 6-1: config 0 descriptor??
[  608.107041][T12714] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  608.126071][ T5891] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected
[  608.146550][ T5891] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81
[  608.159824][ T5891] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1
[  608.180718][ T5891] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  608.201265][ T5891] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2
[  608.240258][ T5891] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  608.263458][ T5891] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4
[  608.293894][ T5891] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  608.325853][ T5891] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6
[  608.338777][ T5891] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  608.355436][ T5891] usb 6-1: USB disconnect, device number 76
[  608.369073][ T5891] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  608.409753][ T5891] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  608.647526][ T5891] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  608.676491][ T5891] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  608.704917][ T5891] keyspan 6-1:0.107: device disconnected
[  609.371120][    C1] 
[  609.373539][    C1] =============================
[  609.378410][    C1] [ BUG: Invalid wait context ]
[  609.383273][    C1] 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 Not tainted
[  609.390051][    C1] -----------------------------
[  609.394989][    C1] syz.5.1940/12737 is trying to lock:
[  609.400364][    C1] ffffc9000bd50410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9b0
[  609.410057][    C1] other info that might help us debug this:
[  609.415959][    C1] context-{2:2}
[  609.419457][    C1] 2 locks held by syz.5.1940/12737:
[  609.424765][    C1]  #0: ffff8880244747d8 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e2/0xde0
[  609.434677][    C1]  #1: ffffc9000bd50960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9b0
[  609.444684][    C1] stack backtrace:
[  609.448486][    C1] CPU: 1 UID: 0 PID: 12737 Comm: syz.5.1940 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) 
[  609.448516][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  609.448538][    C1] Call Trace:
[  609.448548][    C1]  <IRQ>
[  609.448557][    C1]  dump_stack_lvl+0x189/0x250
[  609.448598][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  609.448632][    C1]  ? __pfx__printk+0x10/0x10
[  609.448658][    C1]  ? print_lock_name+0xde/0x100
[  609.448681][    C1]  __lock_acquire+0xbcb/0xd20
[  609.448716][    C1]  ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0
[  609.448744][    C1]  lock_acquire+0x120/0x360
[  609.448774][    C1]  ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0
[  609.448811][    C1]  _raw_read_lock_irqsave+0xaf/0x100
[  609.448840][    C1]  ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0
[  609.448870][    C1]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[  609.448899][    C1]  ? xa_load+0x1ea/0x210
[  609.448922][    C1]  kvm_xen_set_evtchn_fast+0x1fb/0x9b0
[  609.448951][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  609.448977][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  609.449006][    C1]  ? kvm_xen_set_evtchn_fast+0x1c3/0x9b0
[  609.449037][    C1]  xen_timer_callback+0x109/0x220
[  609.449068][    C1]  ? __pfx_xen_timer_callback+0x10/0x10
[  609.449098][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  609.449141][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  609.449174][    C1]  ? read_tsc+0x9/0x20
[  609.449204][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  609.449249][    C1]  __sysvec_apic_timer_interrupt+0x108/0x410
[  609.449272][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  609.449302][    C1]  </IRQ>
[  609.449310][    C1]  <TASK>
[  609.449319][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  609.449343][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  609.449373][    C1] Code: 74 05 e8 3b ac 60 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e3 9a 29 f6 65 8b 05 ac 03 35 07 85 c0 74 40 48 c7 04 24 0e 36
[  609.449420][    C1] RSP: 0018:ffffc9000402f520 EFLAGS: 00000206
[  609.449441][    C1] RAX: 1dd32e5a5bc1f300 RBX: 0000000000000a02 RCX: 1dd32e5a5bc1f300
[  609.449458][    C1] RDX: 0000000000000006 RSI: ffffffff8d979f2e RDI: 0000000000000001
[  609.449472][    C1] RBP: ffffc9000402f5b8 R08: ffffffff8fa0f5f7 R09: 1ffffffff1f41ebe
[  609.449489][    C1] R10: dffffc0000000000 R11: fffffbfff1f41ebf R12: dffffc0000000000
[  609.449506][    C1] R13: 1ffff1100488e86d R14: ffff888024474300 R15: 1ffff92000805ea4
[  609.449539][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  609.449575][    C1]  __skb_try_recv_datagram+0x17c/0x4e0
[  609.449607][    C1]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  609.449632][    C1]  __unix_dgram_recvmsg+0x2d5/0xde0
[  609.449662][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  609.449686][    C1]  ? __lock_acquire+0xab9/0xd20
[  609.449721][    C1]  ? unix_dgram_recvmsg+0xb1/0xd0
[  609.449747][    C1]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  609.449775][    C1]  sock_recvmsg_nosec+0x186/0x1c0
[  609.449811][    C1]  ____sys_recvmsg+0x3aa/0x460
[  609.449842][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[  609.449867][    C1]  ? get_compat_msghdr+0x37e/0x4a0
[  609.449898][    C1]  ? rcu_is_watching+0x15/0xb0
[  609.449917][    C1]  ? ___sys_recvmsg+0x1c4/0x510
[  609.449946][    C1]  ___sys_recvmsg+0x1b5/0x510
[  609.449975][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[  609.450020][    C1]  do_recvmmsg+0x36a/0x770
[  609.450051][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[  609.450076][    C1]  ? kcov_ioctl+0x200/0x640
[  609.450103][    C1]  ? kfree+0x4d/0x440
[  609.450126][    C1]  ? fput+0xa0/0xd0
[  609.450156][    C1]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  609.450194][    C1]  __sys_recvmmsg+0x19d/0x280
[  609.450220][    C1]  ? __pfx___sys_recvmmsg+0x10/0x10
[  609.450247][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  609.450273][    C1]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  609.450305][    C1]  __do_fast_syscall_32+0xb6/0x2b0
[  609.450342][    C1]  do_fast_syscall_32+0x34/0x80
[  609.450374][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  609.450400][    C1] RIP: 0023:0xf710e539
[  609.450417][    C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  609.450436][    C1] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  609.450458][    C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  609.450474][    C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000
[  609.450487][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  609.450500][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  609.450513][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  609.450541][    C1]  </TASK>
[  609.914622][    C1] vkms_vblank_simulate: vblank timer overrun
[  610.302749][    T9] usb 5-1: USB disconnect, device number 104
[  610.362841][T11655] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  610.512850][T11655] usb 2-1: Using ep0 maxpacket: 8
[  610.521413][T11655] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  610.530458][T11655] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  610.541230][T11655] usb 2-1: config 179 has no interface number 0
[  610.548712][T11655] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  610.562613][T11655] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  610.592809][T11655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.823188][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  610.823206][   T30] audit: type=1326 audit(1749093536.273:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.1.1938" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0
[  610.826950][T11655] usb 2-1: USB disconnect, device number 110