last executing test programs:

14m26.852795068s ago: executing program 1 (id=2277):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfff5, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0)

14m26.807137427s ago: executing program 1 (id=2278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x2f, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0xfffffe9d, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x0, 0x8, "f47bcbd88dd4e6303f0f2f50dfeec789c35902ef7cf5d11018927bec6097187dd1e783175a6d7fa5e2c31528ae169e16c29710298430100a8f2afc4e54b7fed8976586f51af37d11c2ef312afcc549ae2ee44e3cb495c46191a63513f941e97fae39c8862d55d41a76799a7644a7cf3649674128055b66572dc593c80da57bbc32db6706c508451b2fd75041404924f7"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}}, 0x40004)

14m26.620294179s ago: executing program 1 (id=2280):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
unshare(0x22020600)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

14m25.670580419s ago: executing program 1 (id=2281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000200000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x400)

14m25.402617404s ago: executing program 1 (id=2285):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x5, 0x5, 'T'}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

14m25.284930928s ago: executing program 1 (id=2288):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x54, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xf7, 0x19, 0x48, 0x8, 0xf755, 0x92f0, 0xec60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x3, 0x1, 0x3, 0x19, 0x0, [@uac_control={{}, [@selector_unit={0x5, 0x24, 0x5, 0x4}]}], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x1, 0xc5d})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

14m10.151035159s ago: executing program 32 (id=2288):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x54, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xf7, 0x19, 0x48, 0x8, 0xf755, 0x92f0, 0xec60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x3, 0x1, 0x3, 0x19, 0x0, [@uac_control={{}, [@selector_unit={0x5, 0x24, 0x5, 0x4}]}], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x1, 0xc5d})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

8.967153995s ago: executing program 3 (id=5322):
r0 = syz_usb_connect$uac1(0x3, 0xfd, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0xb, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4cb}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x2, 0x0, "a4f2c69f"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x3, 0x3e, "43e5d81a4fc3"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x6, 0x7, "1f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x6, 0x6, "efe59342a94c9c"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x4, 0x5, "11beedf58ec709"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7f, 0x8, 0x7, "19"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x58, 0x4, 0x3, 0x8, "34165dd4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0xff, 0x0, "a6771a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xc, 0x65, 0x80, {0x7, 0x25, 0x1, 0x2, 0x4, 0x5efb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x2, "a43372317d"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x3, 0xa, "8d406ac4101d67"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0xfa, 0x1e, "", "e9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf9, 0x8, 0x81, {0x7, 0x25, 0x1, 0x41, 0x4, 0x3}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x27, 0x6, 0x10, 0xff}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "38d8c14cd46d9f7c4fa34b31fc5218d9"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41c}}]})
syz_usb_connect$uac1(0x9eaba1e4262ca812, 0xdb, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x80, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x9}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0x9, 0x7, 0x8, 0x1, 0x2]}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0xc, '9'}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x5, 0x9, "1c"}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x6, 0x6, [0x1, 0x6, 0x6, 0x0, 0x5, 0x3], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0xe0, 0x7, "", '4b'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8a, 0x4, 0x37, 0x3, 'q'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe8, 0x3, 0x8, 0x6, "f7", "a19e5e"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x3}, @as_header={0x7, 0x24, 0x1, 0x10, 0x5, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xc6, 0x6, {0x7, 0x25, 0x1, 0x1, 0x6, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x2, 0x80, "1c", "8347"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd, 0xff, 0x87, {0x7, 0x25, 0x1, 0x81, 0xcb}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x3, 0x39, 0x96, 0x40, 0x50}, 0x1df, &(0x7f0000000440)={0x5, 0xf, 0x1df, 0x6, [@generic={0x35, 0x10, 0x2, "4b0037036cad386efd2d2e60db26dd9a5684495ebb4f5ccbaa047b8b0e04737752085ad18fb61399c680873bc3e78e351870"}, @generic={0x11, 0x10, 0x1, "f618fb08b70dc257c9f2abcf88d0"}, @generic={0xae, 0x10, 0x2, "24a0eb309d78c75b8c23669e044ceb8408ee930ad56dd76a52b289a8a493b52024e48659d255005c9e2e339a67de56c796982bac2d4f3d29ed16785efd33634e00a1711dfd7727e7edfeb614c47b700bf2d6895597067616a5fa6fb9cf4853e9ff06dbf280d79acd2bdc92a68f7be3a84d004b5ec228859fb21d8cb71f8a8ec48fc4e9585d872f2349682999960938b0fbd9cc5c21964da9d209b0474a9be75f8d0bbbabbf1b81a5d221f9"}, @generic={0xc8, 0x10, 0xa, "f3c2ab66080b3ab004d3ffb917436dd03e857bda4a516a2f42f8404eeeb429a4d0ed477ecfdaa0a6c46212e81d7157ab917f62439694955c898dad670691505e7ca16cf02c2bb2becd832f6aa410d636626273c8cb53c531c3130d5891344dfffdd2e4b0d8f33409932c762a56d91d40dd3fd476095b5a8a6483af630858f4382b5df6ef98be96008196097cb48b5a254d8f21e2726ffe831e7e3a76949b57d7b20c97b677e0ec87b35dfe51624de3d1ad11b7a05bc16d0c63a519a2bde4fe1c8af6040c08"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "abec385fd435c82bc75a0ec51e3791cd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x29}]}, 0x7, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x140c}}, {0x5, &(0x7f0000000680)=@string={0x5, 0x3, "9391c2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x402}}, {0xd0, &(0x7f0000000700)=@string={0xd0, 0x3, "92711fb254687c559991e3fd81d75a630eab89f7469bbfc09cf3189485518d764dcee4bc3d715307fe45f97cb6aefdca57bb66c174487e420bdf8596b1c3bbbc207ad43861cadb75006fdb89d1b6a548d9a20f9ae2c6f881250ceaf0a7ae157dabbb4c2eaf5add6fc017989fed7c5f34eed093536e3c8ae2964e4b11e57b7920390b6446d5edddb5aefb894d163e0c554cd11c17f27359f16037d85bea9a348787752bd3f3439a468b8cff48825a51e1eea61be921f20e4b15b1f75a39c7a26a57efe0f661ab364fdc154c56f4bd"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42d}}, {0x56, &(0x7f0000000840)=@string={0x56, 0x3, "40b90bf88185916e99e4822dae703bbb92a5e2530810cce0cf2efaa488ab801ca49b9a8efc3d2b0b5a1ee6158eb7bf6e54c07074ceb5f843168e5499a4510686090db81c72c2109b43bb6b32b91a9004e85933fc"}}, {0x65, &(0x7f00000008c0)=@string={0x65, 0x3, "59d36f643265107a034f48e0e1db44b9b97516d6e867466a78215e9ed9d29319eeb0e3253a416d048b7ad36e95a0152475865f1eeae5343028c31e4c39df5cd8ba4e9802cafd89fb8334232a80bd5ed40ac66d32d7ea03d1e76c24fbb21876cbd79cda"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7)
r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000002000), 0x880800, 0x0)
sendfile(r1, r2, &(0x7f0000002040)=0x1, 0x40)
r3 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x8280)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f00000018c0)=""/174, 0xae}], 0x6}, 0x60}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x42, 0x0)
r5 = syz_usb_connect(0x2, 0xccd, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x25, 0xe2, 0xe1, 0x40, 0x3340, 0x71c, 0xdf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcbb, 0x3, 0x4, 0x83, 0x80, 0x2, [{{0x9, 0x4, 0x29, 0x4, 0xa, 0x15, 0x23, 0xde, 0xb5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "265127424602"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x800, 0x4, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x2, 0xb1, [0x2, 0x0]}]}], [{{0x9, 0x5, 0x9, 0x8, 0x20, 0x4, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x6}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0xbb, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0x2, 0xab8162df2bac3921, 0x200, 0xc, 0x4, 0x1, [@generic={0xcd, 0xb, "46d5dcb2f5e6fafcbabc6cd4f0325bc0350817d565cc403f7904dec015fc379330094aa770bb77c40d28c098b3ce464b62ffbc3f9e599929d337f3b903d9ff9cedf85d8d8217c50c4ccdcc23de3010169258e3387ee02474e91711591a9fc7ad753eae84bca228f165bb3089c60314fa47a23b5b88879b6eafc0703f8ddfd8f4db38f1b58f040df7b629e77f21bce5db214260b35100f973e68029c6d05639d09400073e349e53c971f5898d4d00182ef753b5c5a695ed65bb50b654e042a80e7c26e7739f419c1596ed8a"}, @generic={0xe2, 0x10, "c2e3cf77ac544624d9ef747af45c13cf0cf54e03b02f5bdb048a7ce4d84348b7bdeb2cf19b8591310b8a5ce5f2154f7a0856d495296bed9f64cc08e3aec3bda1b44ed05d506fbb5d0857225d50b25c1d5a8c14112522be3d6875894168804ff17e2cc914526ff4a064716bd170eabf774efdccd42a1c50858c689c3b5aff7fb4382237fc949a6b0e03f5514fd9211370df5ca668b6f8b8ccd7b851e535c49627f5d0adbc0c17b6e373cfc9e3b966a552edd9c939e0531cae9948ce9309affd63199aa4ef2f8d8a2b0342e25a81e98227dc29b48a5a4300e1bd95fb46e6107ed8"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0xfe, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xbd, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x7, 0xe4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0x6}, @generic={0x93, 0x21, "30fe14b6df5afb48cb0c3f535e39d0fe859c0014ed2d4783ec846efc511c88f84bd920e3c3c116e74fddb0504dbef89ab06a7364478130dc31aa1e1d34b7510740fe35501184e139e8d5ac9de6e1bbd778e2d4f0e5153f0e3d97b14771c935d74e9641151446b923e5f04772f20c1846d6b172486b81020c8ae53060b03bfd5aae093452f8ecd9cdbaa6bd4e287372555a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x1, 0xf2, 0xde, [@generic={0x1c, 0xe, "8d260a79fff730774070923750c8f049dd553b1b264b7178d9d9"}, @uac_iso={0x7, 0x25, 0x1, 0xc3, 0x2, 0x747e}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x4, 0x2, 0x0, [@generic={0xb, 0x5, "d7b06098d6aeb904d5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x3c}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0xb, 0x8, 0x8, [@generic={0xd7, 0x23, "65308d6a60c69ae1bdd53cc0021385fe053071e3bc1b9d0f5d9dd23e4dada26a01b744ad1d2df44ba70b5da35a832c1a004aac174c2504212b3f2d124d42926d514db4d343866d7fae71e2c1a7921d9f25e3b3b9fe04384f659bc3dea06f7f7db851fe28caf9a88d815b7a8252ecb8394b1826070ac5766a4b53366ed55f172d58438fce3632540d7e766bb1dde1271fabb65b314f0b603d93c68ac8dc4d31b950830eaf202972275c79aa060e5f3d7379d3f07b86c26ebb4b86578e6eb9f80b93facd82c6ffad3b63e5542478489b4fe090dc86f6"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x7, 0x14, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x563}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1ef}]}}]}}, {{0x9, 0x4, 0x3c, 0x4, 0x9, 0xfb, 0x6e, 0x38, 0x4b, [@hid_hid={0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x41c}}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0xfd, 0xa, 0x62, [@generic={0x3e, 0x21, "682997653eaa071f9fddaa18282020a29e9ce93d3d5e282ebc57292c96ad0ee034245f70be8c93637329ba6d0394160cfbc683fd5d0d6fa56855524e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x30, 0x357}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0xa, 0xe, 0x10, [@generic={0x14, 0x5, "29665bff8891dddddee5627a9ee52ed7fabf"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x0, 0x3, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xffb7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xa, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x440, 0x2, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xc7}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8a4666c3e695b3e3, 0xc, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbf, 0x9}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x5, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x8, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x40}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0x9a, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x4b, 0xfd, 0xc, 0xff, 0x6, 0x5, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x40, 0x1, {0x22, 0x6a1}}], [{{0x9, 0x5, 0x8e, 0x0, 0x20, 0x6, 0x71, 0x1c, [@generic={0xa5, 0x21, "3b45be6d0e78fa10a2e8c87bcf0401f4908dbc6567a7bf9cc96a9907026c0d38130ac0c2e970331086c1e3c5980895df128c8b343bd7399ec384a0d4c3894dbdc13ac768719a9e037dd1f52b9c474f03fa9f8470149aab391e605f80a0b64ef50c52dc6ef127792ed3c0cd60778f52066f4cd2ce814094da7712f39a96b77c43e7005d5c251ca12009244978b6d1869cd6061867ed3273f4b33300673eb6099366bb65"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x8, 0x6f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x34}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xa8, 0x7, 0x70, [@generic={0xf7, 0x0, "3896910c3ea1684ba97e7ec86bd8b5e7fa194ee897089c4a0b1b7859b57cf20242406a10526a79556f12e980c36b453e2385510adef3adebb390cebd287dcfd3cf5fcc72bd4adf673e83c433c6b4ae27440709b87a53d4ef9be5cc38c8cf8336e294fe670eda7fb1f061c3da5e155c59b64eceb60378036223814db5608d105049ac3db3ddd425cc1fd1be0d1d4504ceb3a509f08f59041113158f99bb335b485d3452bc831e0031bd6114e8fdea7855ab42d9d755def9f536c75f15992306a09e989a8725f6468b005a9275e014b3ada168cecfe7e4b66d513805a79f645e694dde28099a68b474ee05ec09520b50c16d6e02237a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xfb, 0x4, 0xe, [@generic={0xa6, 0xc, "ac071c42719f6a4d260f26e81a07fafef62e1fa134d919920d7a881629ea05cbaf50fb250c55552bd1ed723651e18c475a367b9510a394b6399f53bbcdca674d93a8ba8979bcba5ed36ba6c1908f19ae08f44532d8716cfe5e640268036b0d6e56c86b9afadec7f3be513ac43c8c0d23e66bbde87113d2340e444648bce6b157530c9647bc09886f8769923e4c1b3ed87b872a38bfb12c3e89d09a0b8619a0b52d75ae94"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0xd, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xa2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x4}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xfb, 0x81, 0xfc, [@generic={0xa7, 0x21, "074dfc17c4f9772ba40f406928b13740be6afca429ccc14cc6746ddc2a4845ddf5231973e5cc5c13923f61b7d3acbc02ae5ddb9a352762a9c225dbb3ac696fb76de158da1f57d68bd7e039014c45c92f2e71273f9ef2a3933bb844e33100810190282325351c87d24af5e44e8f7840e4e6123cb624a5b34ff9bcf593c13cf0de758b380a017908d3c3f190bf2783e2e70829ae0ecd1e5a1914a0173f73acb1ecfe00f88663"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x81, 0x2, 0x2, [@generic={0x60, 0x11, "9c6ac79aad0297250387850515b1f85c7aed7b2e761edc93545c4eea1c256c69095ba646d18c1abbf2189f586927d1cd44ce4ca11351979f1628e2a3a89fd6b8d93d86df632df2098d87ca8aa0d178e06952b80d6792c96ccce92f06022a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x4, 0x7, 0x8, [@generic={0xfe, 0x2, "27f285e057e7248a7053fb972d3664d23ab700810ffe6f99d46d39a4df4dfb1cd0543dcf5b8f71b9ddd6114c07b04222fa1f0174752ceabf19ebe6286a29f4f2263f58e1e099a660c9e4a2cea2b8847e79bea6249437d1f438dc438a28724c4eb7f2faa8e4b250d970b223b52297f9c7d53d6adafa8f1559548480d806d0465387a08f9e31311d2a924fd32710ce5295aa2ad34d8271d42c3e8ca478ef24e9ec8a57514a4326b22a2abd26e0f92faa97a4cc1db7e572bdc6fd79b2e73e50f795e09ba388d75aa37ed4c124e6953c9a133399903b43c73287e260f7aac7c3fd41b1f3b45c24612590745eb887c51b58bc016e76a948c7d2aea8595879"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x8, 0x34, 0x9, [@generic={0x45, 0x23, "756a7db4273b5a2134ad11bc784462ae4960e8ce753d15f16850adbe84efdffdcd5e4f10611121c3ad0b031ed65d61ddac3a39bab8fe3655bc8207a305c947a9ec174c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xa, 0x4, 0xa, [@generic={0xde, 0x22, "326613c4b8cff5d6779233fcfb903ef38757a144902f97969d77565143c989ce0723d5356b399b54c332ac6df4c43e170e17cf56f00908fd18f8b334f0d37744bcc4c91982ff0335c03530b63ecb4c379c94585325b43e2bb8d0cf48b080af10ac99ca229120c29f8d8d88319c61672b17d02b25bed5ebc4cbe5a95e5d8076b3207c0667f5ec3afc11a023025f643a36bed314d8742b4f6b7d9d44e23766e42e3d852c118ecb19b0b5872fa9e0d5ee6127b5769afb5d9b67c1851b84b729a1c55825a1494a70e0fd4fe7be04225d45295132ede9b96c764081472afc"}, @generic={0xd5, 0xe, "49ca2874a00d88deb23dc3c442728f03c9dc932191092e99a80071cda6f3cce965c38cb8c29c47f5b37c9bfc7bd434b57d3c4d6f941db6c734cd8476cfcbe2c9b7dc7e4f8898203b0393a3fa802bd8f8cc640171922d0ca6fc091e929c8ef0d527365d8f9da796e4660efd09948febdae7d595ae609382b22713f88ac4400c47780fa0c983091a136e63abd9cdd27ac4523bb7676cab456ea3592865a4cab86a76b56acc5f6f6e80b900fe4a7444639ba390ff6d95a1dc66c992ec1d96b57edc9c716c015e32f968435cf6588cf60cf12ce788"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x1, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5a, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x0, 0xef, 0x0, [@generic={0x7d, 0x11, "d25138573c59830695188135029b0a911d42e7c7b1d55b294e080cbbec45eb00043d7c447368f3d7092ab6a92258b0c42b361bcabe70b9b9a1f5b2c26c2098a53070a753a3aaddab0d40938f7e4365067fe165859c760fa53e41d95b5edcf831b3fda308e5fded907b9918183933e271367c7420a8737eb283c412"}, @generic={0x34, 0x1, "5de69ba7c5bfa2c6581a3215ca88b1ef09a491da9c24d12e7baae9f36da3f157199d12ef8615a8a75dcddad8de9b67e6a5ed"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x201, 0x8, 0x7, 0x5a, 0x40, 0x4f}, 0x8, &(0x7f0000001700)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x182a}}, {0x6, &(0x7f00000017c0)=@string={0x6, 0x3, "b9319d4a"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x41c}}]})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x7}]}, 0x8)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000001ac0)={0x18, &(0x7f00000018c0)={0x0, 0x21, 0x2f, {0x2f, 0xb, "eeb3df117cfed0ca5b91ea6e2a08b04376cc800e50fc15691259505223c97e6b1f02043081fd717b3e3ca776e9"}}, &(0x7f0000001900)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "5dd1e0f74c402bf65ac44bc8dcd54bc32f3c79f45f2dd761145ff27ff2b1ded69bd54afe5f22a8a6be144351750ec46c4a47ded10d4f2b5af70a6d523ad94afb1845bb305526532579802e2aa08ec9be3681b332a41f2eec41e90d95cd3b766c1b6bd9ca56f2c1ed160127023d83651f501ba2bcf2425184a49729f0d9ee055f9612c83ca4f9d0d0b815abeccc9bee99b7be235dd1e03217681c4705edf82b59e9a3f5d5e791f143cb0502c9324422bda980dcb08e2f0dc3acfbe548cbc671fb819bb15e"}}, &(0x7f0000001a00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x2, 0x2, "3593d38b", "ca029796"}}, &(0x7f0000001a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x7, 0xe, 0x7, 0x3, 0x100}}}, &(0x7f0000001f80)={0x44, &(0x7f0000001b00)={0x0, 0x13, 0x8f, "a2436739934e594af2842f2e234904c8220789d852c817c5087cab298f2bba0097720302edc618a31382aa809d9fc222663d96b9e3a3bce634aa81f44e5bad915870e5f98a4a1de23e48cade7e5219596945f00ad92749e49939baf785c7c49a5540b655f5e3f8c86eabe82d634531ba8efc47bf29ebea2b76757e8af83e4899c082a20eadc1520fb4a8df4f44f6fc"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001c40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001c80)={0x20, 0x0, 0x8, {0xa0, 0x10, [0xf0]}}, &(0x7f0000001cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001d00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001d40)={0x40, 0xb, 0x2, 'EP'}, &(0x7f0000001d80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001dc0)={0x40, 0x13, 0x6}, &(0x7f0000001e00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, &(0x7f0000001e40)={0x40, 0x19, 0x2, "a115"}, &(0x7f0000001e80)={0x40, 0x1a, 0x2, 0xb2}, &(0x7f0000001ec0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001f00)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000001f40)={0x40, 0x21, 0x1, 0x3}})
r7 = getpgrp(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x2, &(0x7f0000000000))
ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000001c0)={0x9, {0xe, 0x7, 0xc647, 0x40008}})

8.564903644s ago: executing program 2 (id=5323):
r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0xa02, 0x1)
ioctl$FS_IOC_GETVERSION(r0, 0x545d, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x20000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x3, 0xffffffffffffffff, 0x3})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x0, 0x22, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4)
r4 = syz_open_dev$video(&(0x7f0000000000), 0xffffffff, 0x8340)
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@mmap={0x5, 0x9, 0x4, 0x100000, 0x9, {0x0, 0xea60}, {0x5, 0xc, 0x3, 0x1b, 0x1, 0xa, "c754e8ac"}, 0x0, 0x1, {}, 0x7})

7.634292818s ago: executing program 2 (id=5325):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x4000800)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c)
munmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04"], 0xa8}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmmsg(r2, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, &(0x7f0000000440)})
io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

6.948936395s ago: executing program 3 (id=5328):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) (fail_nth: 44)

6.579668968s ago: executing program 3 (id=5329):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x3, @output={0x0, 0x1, {0x1, 0x2}, 0x4, 0x7}})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x12}]}}]}, 0x48}}, 0x84)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r7)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

6.566123027s ago: executing program 2 (id=5330):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x11e}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mmap$IORING_OFF_SQ_RING(&(0x7f000034d000/0x3000)=nil, 0x3000, 0x3000008, 0x110, r0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r1, 0x47bc, 0xef89, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5.788888624s ago: executing program 5 (id=5331):
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000026c0)=""/100, 0x0, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x2002)
shutdown(r1, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}}}}}}}, 0x0)

5.468433766s ago: executing program 5 (id=5333):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0xffffffffffffffd2}}, 0x0)

4.920644112s ago: executing program 5 (id=5336):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x80001088, 0x73}, 0x2c)
openat$full(0xffffff9c, &(0x7f0000000200), 0x40080, 0x0)
r2 = eventfd2(0x0, 0x80001)
read$eventfd(r2, &(0x7f0000000240), 0x8)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20)
r5 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000540)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47bc, 0x0, 0x21, 0x0, 0x0)

4.323311141s ago: executing program 4 (id=5338):
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff034}, {0x80000006}]}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r2, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r6], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r8}, 0x38)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/67, &(0x7f0000000580)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})

4.090162416s ago: executing program 2 (id=5339):
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x32c00, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ustat(0x2, &(0x7f0000000080))
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x2)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/100, &(0x7f0000000500)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0xc040)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000300))
unshare(0x64000600)
syz_usb_connect(0x3, 0x24, 0x0, 0x0)
ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180))
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b00130000009cf8b991d39c2d800d527c9bdae28a65ea9954a71b3db016d9d90d64b3691413af77a8a96e484aab333922953d3c4d1010f3158f1d31cb79eeb922981f41e8233bbcb0cc62a9249826af"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x1f3e82, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x45, 0x0, "872e447304eeb9f6ba13919a2d1757a525924fbf9f31340c56b841fc7bc0e23100e75ec1698870da9b0ba691a24ec887d51c9a1f7fbcc31b8173ab259d88b1a3569ffe69233c11c13563ae7684c672ba"}, 0xd8)

3.795358367s ago: executing program 5 (id=5340):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x88001)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000340)={[{0x6, 0xb, 0xa, 0x3, 0x8, 0xb, 0x4d, 0xa, 0x6, 0x4, 0x9, 0xed, 0x5}, {0x6, 0x0, 0x8, 0x80, 0xa7, 0x1, 0x2, 0xe, 0x8, 0xff, 0x1, 0x1, 0xfffffffffffffffb}, {0x8, 0x7, 0x2, 0x8, 0x3, 0x4, 0x4, 0xe, 0x9, 0x88, 0x80, 0x4, 0xdab}], 0x594e})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0xb911a40c51e811b3, 0x4}, 0xfe}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="2a68a509bb129a3c042d360548216fd9ebb2d00ab062efc984e6e557b06caccd49ea069a0dc3121f9f9c6a440a1b603103983b6b982810fa4de82d67dbe9db84ef420a144e7e207051a8845b17d60cc53594737aa9a4e634c81975ce99d1298aa9c63b8045b8ea43bcd3ae346f6fd5ddf68967d17806be7def9d7ad913f5d951172d262a3c04a4773e86552b3ea5b8e0828e77ecf48d71b5b8a1b9f779465bb95ffd937ef727fb4f941e7e35a558c9fe0bcfcc401ea31dac302f1797a4d16abf787d6a8b06885deb03a0dbc56ec24d208bfe", 0xd2}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r7, &(0x7f00000004c0)="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", 0x109f7, 0x484c, 0x0, 0x6)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5)

3.096850537s ago: executing program 4 (id=5341):
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1c0000005e0071029ea698", 0xb}], 0x1}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT=r3], 0x68}, 0x1, 0x0, 0x0, 0x8005}, 0x40080)
openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80002, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0x1c, 0x0}}], 0x1, 0x931766f6119eed40)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90)
getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f0000009a80))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000))

2.91064252s ago: executing program 4 (id=5342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xfdfdffff, 0xffffffff})
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x5, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x56, '\x00', 0x0, @xdp}, 0x94)
r3 = syz_io_uring_setup(0x7787, &(0x7f0000000240)={0x0, 0xfb6b, 0x1000, 0x200, 0x3c4}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x35e4, 0x3180, 0x8000, 0x400252}, &(0x7f0000002340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r10, 0x0, 0x0, 0x0, 0x20008891, 0x1})
io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4008804)

2.873693371s ago: executing program 5 (id=5343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006578746864720000140002800800074000000015080006400000000414000000110001000000000000aa11071326eed7"], 0x7c}}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0cc5604, &(0x7f0000000240)={0x1, @win={{0xc9a1097, 0x2, 0x1, 0x1}, 0x7, 0x4, 0x0, 0x2, 0x0, 0xf}})

2.715043582s ago: executing program 5 (id=5344):
r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000))
syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e01000008240301"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
finit_module(0xffffffffffffffff, 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000b700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000b500060000000000b7020000000000007b2af0ff00000000d609080008000000db9af0ff4100e8ffbe8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_wait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
r6 = socket(0x21, 0x80005, 0xb2d3)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
getsockopt(r6, 0x200000000114, 0x5, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$media(0x0, 0x0, 0x101d01)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb)
dup(r7)
ftruncate(0xffffffffffffffff, 0xc17a)
prlimit64(0x0, 0xe, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8)

2.709824455s ago: executing program 2 (id=5345):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, 0x0, 0x0, 0xa0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c80fe00", @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0)

2.554060365s ago: executing program 3 (id=5346):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x5, "5d8c3dda"}]}}, 0x0}, 0x0)
socket$inet6(0xa, 0xf, 0x8001)

2.420713941s ago: executing program 2 (id=5347):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
munlockall()
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
socketpair(0x1, 0x100000005, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r4}})
syz_io_uring_submit(0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1bc, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x1a0, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f0000000040)={0x1d, r9}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4)

1.995951174s ago: executing program 4 (id=5348):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
creat(0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9e, 0x1a002)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x1)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000180)="a99c383d33b6c627b1b9d49686a8834a88a8", 0x12, 0x48004, &(0x7f0000000000)={0x11, 0x81f4, r3}, 0x14)

1.420799304s ago: executing program 4 (id=5350):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x80001088, 0x73}, 0x2c)
openat$full(0xffffff9c, &(0x7f0000000200), 0x40080, 0x0)
r2 = eventfd2(0x0, 0x80001)
read$eventfd(r2, &(0x7f0000000240), 0x8)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20)
r5 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000540)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47bc, 0x0, 0x21, 0x0, 0x0)

1.301419626s ago: executing program 0 (id=5351):
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002080), 0x8)
epoll_wait(r2, &(0x7f00000020c0)=[{}, {}], 0x2, 0x6)
r3 = syz_open_dev$media(&(0x7f0000002100), 0x2, 0x40000)
write$FUSE_DIRENT(r2, &(0x7f0000002140)={0xa0, 0x0, r1, [{0x1, 0x0, 0x1, 0xa, '('}, {0x3, 0x78, 0xc, 0xffff, '/dev/media#\x00'}, {0x6, 0x80, 0x2, 0x7, '$+'}, {0x0, 0x800, 0xc, 0x1, '/dev/media#\x00'}]}, 0xa0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r4, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3f5, 0x8, 0x70bd28, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x20005001)
r5 = signalfd4(r2, &(0x7f0000002300)={[0x1, 0x4]}, 0x8, 0x80000)
ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f0000002340), 0xa0080, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002400)={r2, 0x58, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002440)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@bloom_filter={0x1e, 0xfffffff5, 0x7, 0x2, 0x6200, r2, 0x9, '\x00', r7, r8, 0x3, 0x6, 0x1, 0x5}, 0x50)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002500)={0x2, 0x3, "15b381d78cfcf4e17e3c21b06f941da5fc3a52ffd2b34ee5251b65213042364864c10853232372ed5ad82e806b605da0838dadd763ee862168a6380184e54da9a225ca20701ef3b293cb3cb1b0b40371b288696a8dd6e561146a293fe999133da3d5abe9b04e3c15c9e23c5017896c5d03fa4fcc054831615546718712d75c0311b3363b8d8e70bcda4111d454fe6f556b129783b243dcd176cfe450f056d104d6eff30dd831be4fa613026125a06f08048f8be5b3cb2a9327437be19c30cdd5c7ecd0cbb605ece2475b90db6b196f78214f8084db0389ca9f99f8fc3cc2e0d274fa25af0a86a7c1f598540e8cdb81f090a6908b712684b796382cd146a06698"})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000002640)={0x0, 0x0, 0x1, 'queue0\x00', 0x10000})
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000002700)={0x40, 0x4, 0x1}, 0x10)
pwritev(r0, &(0x7f0000004a00)=[{&(0x7f0000002740)="3da25875dbbdb1989a5e3430f8d6bf10123fc4d2bab224d48745e769e00f937a8efa31b7433116090d376f4758c0f7ec9ec2747d3ecf34edb85b5a86fe30813da04d6134a2987ace8e54547da46e64e5fc9f770d2dd93d2439e2201d5a047798ed3508e55d42584d9b0c90feedb1e130336999a47e69ae5015f7f6afd3552e0f6f24e397d5f73c37f5a650588cc2a30edcf5e62592cb268faebb64f81de1f502d37115683ee3657bc5648fcf501734c64ea8d6d3884f7f204ec64ca6272849a6710a3350385e6a5dbd665085e2c5571fed306bf99beb71902c6895e3", 0xdc}, {&(0x7f0000002840)="81ee03f044fb29a55903b17047b2f47586a50a1c2da62cf3e542157f968233b95a806ba1b8ecc188c3d1f23bda624e04e7705b4854af2ebd844ce9435a4b5ef8ef5348882894c30647f7f93242410f90ffdaec9ab545f0097af89358d7ed91c17bd1eb6b17a208f0a40bac0ded513be132f2a3bf14bd0b0208a573b568e7cdad4d7f0fdc1be2d9c3ee7376f8ea0097558f2159930bdfac0f5e95cc6de5455e38f307906daa58b5a53cdf85b4d1f0e42a830ede7a4ea96d7aee7bd277c627", 0xbe}, {&(0x7f0000002900)="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", 0x1000}, {&(0x7f0000003900)="385bdf6a4eec2c0d75bb1f818a1569c332981f560d6006da510c5a82179dee3610b8686030917bcaac4c6b3bb4f359", 0x2f}, {&(0x7f0000003940)="17b1b7eec2f9685794e9e3fb604176bd4fb8984eb4c338a711937935ab731b482a1ca7278d98e356bd69f8b2c8601544348dbe1fbd8be2c3b5f202a39be2bb3b80fc7426a4b61b2d5c7f7f", 0x4b}, {&(0x7f00000039c0)="bed0ff43827a2d338b9014ec17a2e8c0cf28f5545eb658cfb1e5339e51e8bc274dad2f5dea221a9f29f087f0bcebf8c3130efe4b3674dc3f831dd5e0864361", 0x3f}, {&(0x7f0000003a00)="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", 0x1000}], 0x7, 0x9, 0x8)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000004a40)={<r9=>0x0, "58748ba77d240dab399077ea15dccaa0"})
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000005a40)={<r10=>0x0, 0x2, 0x9})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000005e40)={0x1, 0xb, {0xfff, @usage=0x5, r9, 0xb7, 0x7, 0x1000, 0x401, 0x6c63a86, 0x21, @struct={0x4, 0xb}, 0x6, 0x4, [0x2, 0x0, 0xfffffffffffffffc, 0x2a, 0x7, 0x2]}, {0x3, @struct={0x692b, 0x2}, 0x0, 0x2d92, 0x8, 0x93cc, 0x1, 0x3, 0x40, @struct={0x9, 0x1}, 0x2156e616, 0x10000, [0x7, 0x8, 0x4, 0xfffffffffffffc00, 0x7f, 0x58]}, {0x92, @usage=0x709, r10, 0x5, 0xd0, 0xfffffffffffffffd, 0x6, 0x0, 0x1, @usage=0xfffffffffffffffb, 0x6, 0x26, [0x9, 0x9, 0x7, 0x1ff, 0x7fffffff, 0xfffffffffffffff9]}, {0x9, 0x7, 0x4}})
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000006240)={0x1, 0x0, {0xb9, 0x3, 0x100f, 0x3, 0x6, 0x3, 0x0, 0x6}})
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000062c0)={0xc, 0xb5a})
socket$nl_route(0x10, 0x3, 0x0)
splice(r4, &(0x7f0000006300)=0x9, r3, &(0x7f0000006340)=0x9, 0x1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000006380)={r2}, 0x8)
readv(r3, &(0x7f00000064c0)=[{&(0x7f00000063c0)=""/170, 0xaa}, {&(0x7f0000006480)=""/62, 0x3e}], 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000006500)={0xd8c, 0x0, 0x4})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000006680)={&(0x7f0000006580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9e9595921e465dcb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4000000)

1.141758388s ago: executing program 0 (id=5352):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x0, 0x4000000, {}, {0x4, 0x1}, {0x4000000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})

840.877108ms ago: executing program 0 (id=5353):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
lseek(r0, 0xffffffff, 0x0)
r1 = shmget(0x0, 0x1000, 0x28, &(0x7f0000ffe000/0x1000)=nil)
shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x5000)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r3 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x35, 0x86cc4097e8288a3a, 0x65, 0x61, 0x33, 0x34, 0x63, 0x0, 0x0, 0x38, 0x63, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x1b}, 0x48, 0xfffffffffffffffe)
keyctl$update(0x2, r3, &(0x7f0000000540)='#', 0x1)
add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)={0x1, 0x0, @b}, 0x48, r3)
r4 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e57, 0x7, 0x0, 0x3})
close_range(r2, 0xffffffffffffffff, 0x0)

547.279692ms ago: executing program 0 (id=5354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x700}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0)

434.084496ms ago: executing program 4 (id=5355):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x9, 0xb, 0x1, 0x5, 0x9, 0x800, 0x7, 0xb00}, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0/../file0/file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioperm(0x0, 0x9d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x200, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8001000, 0x0, 0xa000, 0x10000, 0x0, r2, 0x738}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006680)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7966de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x0, 0x16, 0x0, 0x12754f40, 0x0, {0x1, 0x7, 0x2, 0x4, 0x3, 0x100000000000008, 0x80000000, 0x800, 0x3, 0xa000, 0x1, 0x0, r2, 0x0, 0x8049}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140), 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r5 = socket(0x10, 0x802, 0x0)
write(r5, &(0x7f0000000140)="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", 0xfc)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1020, 0x3a}, 0x1c)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4})
openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x80080, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r7=>0x0], &(0x7f0000000340)=[<r8=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2, 0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000180)={r10})

292.970704ms ago: executing program 0 (id=5356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001fff5000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c000280080001400000000308000240000000001000000000000023090001"], 0xcc}}, 0x0)

193.302399ms ago: executing program 3 (id=5357):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [0x0, 0xe0000000], 0x0, 0x0, 0x0}, 0x1e8)

103.943102ms ago: executing program 0 (id=5358):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xf4, 0x9c, 0x43, 0x8, 0x1ae7, 0x525, 0x637b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x7f, 0x80, 0x1, [{{0x9, 0x4, 0x46, 0x76, 0x1, 0xc4, 0x49, 0xc8, 0x55, [], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x6, 0x3, 0xf3}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000377a4440ba0d00100900010203010902121001000000000904", @ANYRES16=0x0, @ANYRESDEC=0x0], 0x0)

0s ago: executing program 3 (id=5359):
openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r5, 0x303, 0x70bd2a, 0x25dfdbff}, 0xec0}}, 0x80)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0xf000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

Comm: syz.2.4977 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1510.243742][T25559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1510.243756][T25559] Call Trace:
[ 1510.243767][T25559]  <TASK>
[ 1510.243778][T25559]  dump_stack_lvl+0x189/0x250
[ 1510.243810][T25559]  ? __pfx____ratelimit+0x10/0x10
[ 1510.243845][T25559]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1510.243870][T25559]  ? __pfx__printk+0x10/0x10
[ 1510.243903][T25559]  ? __pfx___might_resched+0x10/0x10
[ 1510.243931][T25559]  ? fs_reclaim_acquire+0x7d/0x100
[ 1510.243970][T25559]  should_fail_ex+0x414/0x560
[ 1510.244027][T25559]  should_failslab+0xa8/0x100
[ 1510.244059][T25559]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1510.244086][T25559]  ? snd_mixer_oss_get_volume1_sw+0xf6/0x470
[ 1510.244146][T25559]  snd_mixer_oss_get_volume1_sw+0xf6/0x470
[ 1510.244189][T25559]  snd_mixer_oss_get_recsrc1_sw+0x8f/0x140
[ 1510.244226][T25559]  ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10
[ 1510.244259][T25559]  snd_mixer_oss_ioctl1+0x13b0/0x18b0
[ 1510.244301][T25559]  ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10
[ 1510.244355][T25559]  ? __fget_files+0x2a/0x420
[ 1510.244392][T25559]  ? __fget_files+0x3a0/0x420
[ 1510.244433][T25559]  snd_mixer_oss_ioctl_compat+0x46/0x60
[ 1510.244467][T25559]  __ia32_compat_sys_ioctl+0x540/0x840
[ 1510.244497][T25559]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1510.244524][T25559]  ? __fget_files+0x3a0/0x420
[ 1510.244565][T25559]  ? fput+0xa0/0xd0
[ 1510.244585][T25559]  ? ksys_write+0x22a/0x250
[ 1510.244623][T25559]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1510.244647][T25559]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1510.244673][T25559]  __do_fast_syscall_32+0xb6/0x2b0
[ 1510.244698][T25559]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1510.244738][T25559]  do_fast_syscall_32+0x34/0x80
[ 1510.244779][T25559]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1510.244810][T25559] RIP: 0023:0xf709e539
[ 1510.244830][T25559] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1510.244850][T25559] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1510.244875][T25559] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080044dff
[ 1510.244892][T25559] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1510.244906][T25559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1510.244920][T25559] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1510.244936][T25559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1510.244969][T25559]  </TASK>
[ 1510.868731][T20645] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1510.886302][T20645] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1510.911320][T20645] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=4d.40
[ 1510.953669][T20645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.964498][T20645] usb 1-1: Product: syz
[ 1510.976844][T20645] usb 1-1: Manufacturer: syz
[ 1511.069148][T20645] usb 1-1: SerialNumber: syz
[ 1511.178810][T25573] binder: 25565:25573 ioctl c0189378 80000240 returned -22
[ 1511.304507][T25554] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1512.097385][T25584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1512.155991][T25584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1512.161179][T25554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1512.176859][T25554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1512.513926][T20645] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[ 1512.522944][T20645] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[ 1512.558948][T20645] cdc_ncm 1-1:1.0: bind() failure
[ 1512.579043][T20645] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 1512.608427][T20645] cdc_ncm 1-1:1.1: bind() failure
[ 1512.628792][T20645] usb 1-1: USB disconnect, device number 3
[ 1512.819153][T25591] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1513.010294][T25594] kvm: user requested TSC rate below hardware speed
[ 1514.181692][T25603] FAULT_INJECTION: forcing a failure.
[ 1514.181692][T25603] name failslab, interval 1, probability 0, space 0, times 0
[ 1514.195208][T25603] CPU: 0 UID: 0 PID: 25603 Comm: syz.0.4991 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1514.195235][T25603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1514.195248][T25603] Call Trace:
[ 1514.195257][T25603]  <TASK>
[ 1514.195266][T25603]  dump_stack_lvl+0x189/0x250
[ 1514.195297][T25603]  ? __pfx____ratelimit+0x10/0x10
[ 1514.195334][T25603]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1514.195359][T25603]  ? __pfx__printk+0x10/0x10
[ 1514.195404][T25603]  should_fail_ex+0x414/0x560
[ 1514.195453][T25603]  should_failslab+0xa8/0x100
[ 1514.195482][T25603]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[ 1514.195509][T25603]  ? nf_ct_ext_add+0x1ab/0x450
[ 1514.195537][T25603]  ? rcu_is_watching+0x15/0xb0
[ 1514.195564][T25603]  ? nf_ct_ext_add+0x1ab/0x450
[ 1514.195592][T25603]  krealloc_noprof+0x124/0x340
[ 1514.195622][T25603]  nf_ct_ext_add+0x1ab/0x450
[ 1514.195658][T25603]  init_conntrack+0x680/0xef0
[ 1514.195683][T25603]  ? __pfx_init_conntrack+0x10/0x10
[ 1514.195733][T25603]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[ 1514.195758][T25603]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1514.195781][T25603]  ? __siphash_unaligned+0x232/0x3b0
[ 1514.195811][T25603]  nf_conntrack_in+0xbf2/0x1600
[ 1514.195863][T25603]  ? __pfx_nf_conntrack_in+0x10/0x10
[ 1514.195902][T25603]  ? ipt_do_table+0x2a3/0x1640
[ 1514.195938][T25603]  ? ipv4_conntrack_defrag+0x2a0/0x5b0
[ 1514.195958][T25603]  ? ipv4_conntrack_local+0x126/0x210
[ 1514.195982][T25603]  ? __pfx_ipv4_conntrack_local+0x10/0x10
[ 1514.196010][T25603]  nf_hook_slow+0xc5/0x220
[ 1514.196040][T25603]  NF_HOOK+0x24c/0x380
[ 1514.196058][T25603]  ? NF_HOOK+0x101/0x380
[ 1514.196075][T25603]  ? __pfx_NF_HOOK+0x10/0x10
[ 1514.196096][T25603]  ? __pfx_dst_output+0x10/0x10
[ 1514.196119][T25603]  ? __ip_select_ident+0x1b7/0x2d0
[ 1514.196144][T25603]  ? ip_fast_csum+0x1ee/0x2b0
[ 1514.196171][T25603]  raw_send_hdrinc+0xc00/0x1470
[ 1514.196219][T25603]  ? __pfx_raw_send_hdrinc+0x10/0x10
[ 1514.196260][T25603]  raw_sendmsg+0x1356/0x18b0
[ 1514.196307][T25603]  ? __pfx_raw_sendmsg+0x10/0x10
[ 1514.196359][T25603]  ? aa_sk_perm+0x81e/0x950
[ 1514.196393][T25603]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1514.196419][T25603]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[ 1514.196445][T25603]  ? sock_rps_record_flow+0x19/0x410
[ 1514.196468][T25603]  ? inet_sendmsg+0x2f4/0x370
[ 1514.196487][T25603]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1514.196510][T25603]  __sock_sendmsg+0x19c/0x270
[ 1514.196534][T25603]  sock_sendmsg+0x158/0x230
[ 1514.196567][T25603]  ? __pfx_sock_sendmsg+0x10/0x10
[ 1514.196599][T25603]  ? __asan_memset+0x22/0x50
[ 1514.196618][T25603]  ? iov_iter_bvec+0xb8/0x180
[ 1514.196643][T25603]  splice_to_socket+0x8ff/0xf10
[ 1514.196690][T25603]  ? __pfx_splice_to_socket+0x10/0x10
[ 1514.196716][T25603]  ? aa_file_perm+0x3e7/0xed0
[ 1514.196760][T25603]  ? get_pid_task+0x20/0x1f0
[ 1514.196801][T25603]  ? bpf_lsm_file_permission+0x9/0x20
[ 1514.196821][T25603]  ? security_file_permission+0x75/0x290
[ 1514.196847][T25603]  ? rw_verify_area+0x258/0x650
[ 1514.196871][T25603]  ? __pfx_splice_to_socket+0x10/0x10
[ 1514.196895][T25603]  do_splice+0xc79/0x1660
[ 1514.196945][T25603]  ? __pfx_do_splice+0x10/0x10
[ 1514.196980][T25603]  __se_sys_splice+0x2e1/0x460
[ 1514.197010][T25603]  ? __pfx___se_sys_splice+0x10/0x10
[ 1514.197039][T25603]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1514.197059][T25603]  ? __ia32_sys_splice+0x21/0xf0
[ 1514.197087][T25603]  __do_fast_syscall_32+0xb6/0x2b0
[ 1514.197108][T25603]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1514.197131][T25603]  do_fast_syscall_32+0x34/0x80
[ 1514.197151][T25603]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1514.197174][T25603] RIP: 0023:0xf7f51539
[ 1514.197190][T25603] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1514.197206][T25603] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000139
[ 1514.197226][T25603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 1514.197239][T25603] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000008000
[ 1514.197250][T25603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1514.197261][T25603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1514.197272][T25603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1514.197300][T25603]  </TASK>
[ 1516.422279][T25612] loop8: detected capacity change from 0 to 7
[ 1516.455970][T25612] Dev loop8: unable to read RDB block 7
[ 1516.481594][T25612]  loop8: unable to read partition table
[ 1516.510613][T25612] loop8: partition table beyond EOD, truncated
[ 1516.537861][T25612] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1516.838546][T15462] usb 4-1: new full-speed USB device number 124 using dummy_hcd
[ 1516.838794][T15458] usb 3-1: new low-speed USB device number 114 using dummy_hcd
[ 1516.998691][T15458] usb 3-1: device descriptor read/64, error -71
[ 1517.036780][T15462] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1517.045554][T15462] usb 4-1: not running at top speed; connect to a high speed hub
[ 1517.062780][T15462] usb 4-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config
[ 1517.077744][T15462] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1517.089825][T15462] usb 4-1: config 1 has no interface number 1
[ 1517.096091][T15462] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1517.114446][T15462] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4
[ 1517.125865][T15462] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023
[ 1517.148534][T15462] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1517.158038][T15462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.173100][T15462] usb 4-1: Product: syz
[ 1517.181685][T15462] usb 4-1: Manufacturer: syz
[ 1517.187295][T15462] usb 4-1: SerialNumber: syz
[ 1517.239609][T15458] usb 3-1: new low-speed USB device number 115 using dummy_hcd
[ 1517.378444][T15458] usb 3-1: device descriptor read/64, error -71
[ 1517.468871][T15462] hub 4-1:1.0: Invalid hub with more than one config or interface
[ 1517.490667][T15458] usb usb3-port1: attempt power cycle
[ 1517.497437][T15462] hub 4-1:1.0: probe with driver hub failed with error -22
[ 1517.520470][T15462] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1517.583782][T15462] usb 4-1: USB disconnect, device number 124
[ 1517.746874][T23954] udevd[23954]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1517.828532][T15458] usb 3-1: new low-speed USB device number 116 using dummy_hcd
[ 1517.850654][T15458] usb 3-1: device descriptor read/8, error -71
[ 1518.088851][T15458] usb 3-1: new low-speed USB device number 117 using dummy_hcd
[ 1518.126750][T15458] usb 3-1: device descriptor read/8, error -71
[ 1518.152510][T25637] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.221596][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.248793][T15458] usb usb3-port1: unable to enumerate USB device
[ 1518.266937][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.275407][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.283414][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.300793][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.308415][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.423613][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.438368][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1518.445892][T25640] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1519.495692][T25654] veth0: entered promiscuous mode
[ 1519.567712][T25654] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[ 1519.574446][T25654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1519.638435][T25654] vhci_hcd vhci_hcd.0: Device attached
[ 1519.660463][T25658] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1519.727274][T25662] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(14)
[ 1519.733910][T25662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1519.757519][T25662] vhci_hcd vhci_hcd.0: Device attached
[ 1519.816580][T25654] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17)
[ 1519.823412][T25654] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1519.832265][T19963] vhci_hcd: vhci_device speed not set
[ 1519.852936][T25658] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21)
[ 1519.859565][T25658] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1519.898554][T19963] usb 43-1: new full-speed USB device number 7 using vhci_hcd
[ 1519.901618][T25658] vhci_hcd vhci_hcd.0: Device attached
[ 1519.955679][T25658] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1519.959219][T25654] vhci_hcd vhci_hcd.0: Device attached
[ 1519.976432][T25658] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1519.991159][T25658] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1520.111387][T25667] vhci_hcd: connection closed
[ 1520.111724][ T7111] vhci_hcd: stop threads
[ 1520.114656][T25670] vhci_hcd: connection closed
[ 1520.116475][ T7111] vhci_hcd: release socket
[ 1520.132013][T25664] vhci_hcd: connection closed
[ 1520.132970][T25655] vhci_hcd: connection reset by peer
[ 1520.143996][T25653] veth0: left promiscuous mode
[ 1520.149138][ T7111] vhci_hcd: disconnect device
[ 1520.154495][ T7111] vhci_hcd: stop threads
[ 1520.161429][ T7111] vhci_hcd: release socket
[ 1520.166166][ T7111] vhci_hcd: disconnect device
[ 1520.171231][ T7111] vhci_hcd: stop threads
[ 1520.175865][ T7111] vhci_hcd: release socket
[ 1520.185702][ T7111] vhci_hcd: disconnect device
[ 1520.192342][ T7111] vhci_hcd: stop threads
[ 1520.197018][ T7111] vhci_hcd: release socket
[ 1520.202730][ T7111] vhci_hcd: disconnect device
[ 1520.208765][   T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1520.228382][T15462] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1520.437152][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1520.450817][T15462] usb 1-1: Using ep0 maxpacket: 32
[ 1520.456211][   T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[ 1520.477979][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.491380][T15462] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1520.511666][   T10] usb 3-1: config 0 descriptor??
[ 1520.525066][T15462] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[ 1520.557885][T15462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.574278][T15462] usb 1-1: Product: syz
[ 1520.579672][T15462] usb 1-1: Manufacturer: syz
[ 1520.584417][T15462] usb 1-1: SerialNumber: syz
[ 1520.624411][T15462] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input182
[ 1520.891116][T25674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1520.907735][T25674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1520.971107][T25685] kvm: apic: phys broadcast and lowest prio
[ 1521.079586][ T5200] bcm5974 1-1:1.0: could not read from device
[ 1521.110775][ T5200] bcm5974 1-1:1.0: could not read from device
[ 1521.171570][T15462] usb 1-1: USB disconnect, device number 4
[ 1521.230921][ T5200] bcm5974 1-1:1.0: could not read from device
[ 1521.380790][T25661] netlink: 'syz.2.5009': attribute type 1 has an invalid length.
[ 1521.638489][T15454] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[ 1521.806065][T15454] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1521.844645][T15454] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1521.856684][T15454] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10
[ 1521.874275][T15454] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 117, setting to 64
[ 1521.887952][T15454] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1522.003773][T15454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.017719][T15454] usb 4-1: Product: syz
[ 1522.090320][T15454] usb 4-1: Manufacturer: syz
[ 1522.094982][T15454] usb 4-1: SerialNumber: syz
[ 1522.103826][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5017'.
[ 1522.149310][T25688] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1522.384494][T25688] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1522.596969][T25688] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (10), value rounded to 0 ms
[ 1522.636605][T25688] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (10), value rounded to 0 ms
[ 1522.681579][T25688] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1522.732550][   T10] usbhid 3-1:0.0: can't add hid device: -71
[ 1522.767640][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1522.807154][   T10] usb 3-1: USB disconnect, device number 118
[ 1523.129301][T25705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1523.142295][T25705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1523.150541][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'.
[ 1523.164255][T25705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1523.165572][T25688] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1523.183655][T25705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1523.199377][T25705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1523.218400][T20645] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1523.224407][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1523.236360][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1523.244948][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1523.254424][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1523.265678][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1523.385110][T15454] cdc_ncm 4-1:1.0: bind() failure
[ 1523.399350][T20645] usb 1-1: Using ep0 maxpacket: 8
[ 1523.401263][T15454] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1523.411172][T20645] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1523.429518][T15454] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1523.455935][T15454] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[ 1523.480629][T20645] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1523.504061][T15454] usb 4-1: USB disconnect, device number 125
[ 1523.505917][T20645] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1523.532909][T20645] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1523.552234][T20645] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1523.568306][T20645] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1523.577511][T20645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.767505][T15463] usb 6-1: USB disconnect, device number 23
[ 1523.854134][T20645] usb 1-1: usb_control_msg returned -32
[ 1523.889443][T20645] usbtmc 1-1:16.0: can't read capabilities
[ 1524.005159][T25715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1524.023475][T25715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5024'.
[ 1524.082767][T18513] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1524.098959][T18513] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1524.214820][T25724] usbtmc 1-1:16.0: stb usb_control_msg returned -32
[ 1524.223182][T25701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5020'.
[ 1524.252257][T18513] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1524.262855][T18513] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1524.411069][T25728] fuse: Unknown parameter 'r'
[ 1525.179038][T20645] usb 1-1: USB disconnect, device number 5
[ 1525.220006][T18513] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1525.239790][T18513] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1525.260727][T19963] vhci_hcd: vhci_device speed not set
[ 1525.299556][T25705] Bluetooth: hci0: command tx timeout
[ 1525.469421][T18513] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1525.530991][T18513] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1525.557152][T25707] chnl_net:caif_netlink_parms(): no params data found
[ 1525.884086][T25732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1525.898852][T25732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1526.048374][T15458] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1526.263232][T25707] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1526.281681][T25707] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1526.348788][T25707] bridge_slave_0: entered allmulticast mode
[ 1526.370917][T25707] bridge_slave_0: entered promiscuous mode
[ 1526.544590][T25707] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1526.567632][T25707] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1526.590491][T25707] bridge_slave_1: entered allmulticast mode
[ 1526.608594][T25707] bridge_slave_1: entered promiscuous mode
[ 1526.617266][T15458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1526.804467][T15458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1526.857456][T15458] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[ 1526.880701][T15458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1526.905345][T15458] usb 4-1: config 0 descriptor??
[ 1527.377387][T25707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1527.386838][T25705] Bluetooth: hci0: command tx timeout
[ 1527.404591][T25707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1527.498482][T15463] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1527.499263][T25734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1527.548028][T25734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1527.562334][T25734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5028'.
[ 1527.622737][T25748] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5028'.
[ 1527.709317][T15463] usb 1-1: config 0 has no interfaces?
[ 1527.719185][T25748] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5028'.
[ 1527.741836][T15463] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1527.751206][T15463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.759392][T15463] usb 1-1: Product: syz
[ 1527.763747][T15463] usb 1-1: Manufacturer: syz
[ 1527.790008][T15463] usb 1-1: SerialNumber: syz
[ 1527.827057][T15463] usb 1-1: config 0 descriptor??
[ 1527.962042][T15458] apple 0003:05AC:0262.0035: unbalanced delimiter at end of report description
[ 1527.981524][T15458] apple 0003:05AC:0262.0035: parse failed
[ 1527.987458][T15458] apple 0003:05AC:0262.0035: probe with driver apple failed with error -22
[ 1528.163098][T15463] usb 4-1: USB disconnect, device number 126
[ 1528.386585][T18513] bond0 (unregistering): Released all slaves
[ 1528.405237][T18513] bond1 (unregistering): Released all slaves
[ 1528.552150][T18513] bond2 (unregistering): Released all slaves
[ 1528.684216][T25707] team0: Port device team_slave_0 added
[ 1528.726800][T18513] tipc: Left network mode
[ 1528.810641][T25707] team0: Port device team_slave_1 added
[ 1529.060664][T25707] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1529.077662][T25707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1529.155930][T25707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1529.222691][T25707] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1529.257850][T25707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1529.304382][T25707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1529.458651][T25705] Bluetooth: hci0: command tx timeout
[ 1529.502131][T25707] hsr_slave_0: entered promiscuous mode
[ 1529.509319][T25707] hsr_slave_1: entered promiscuous mode
[ 1529.515988][T25707] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1529.524345][T25707] Cannot create hsr debugfs directory
[ 1530.178741][T25775] fuse: Unknown parameter 'r'
[ 1530.834113][T18513] hsr_slave_0: left promiscuous mode
[ 1530.852823][T18513] hsr_slave_1: left promiscuous mode
[ 1530.868903][T15458] usb 1-1: USB disconnect, device number 6
[ 1530.991932][T25778] sctp: [Deprecated]: syz.4.5038 (pid 25778) Use of int in max_burst socket option.
[ 1530.991932][T25778] Use struct sctp_assoc_value instead
[ 1531.023962][T18513] veth1_macvtap: left promiscuous mode
[ 1531.037922][T18513] veth1_vlan: left promiscuous mode
[ 1531.042863][T25783] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5038'.
[ 1531.073181][T18513] veth0_vlan: left promiscuous mode
[ 1531.538840][T25705] Bluetooth: hci0: command tx timeout
[ 1532.346036][T18513] vxcan1 (unregistering): left allmulticast mode
[ 1532.641653][T25803] veth1_to_batadv: entered promiscuous mode
[ 1533.048535][T15458] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1533.211354][T15458] usb 4-1: Using ep0 maxpacket: 16
[ 1533.223694][T15458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1533.234853][T18513] IPVS: stop unused estimator thread 0...
[ 1533.250940][T15458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1533.271913][T19963] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1533.290876][T15458] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[ 1533.306723][T15458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.318460][T15454] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1533.350636][T15458] usb 4-1: config 0 descriptor??
[ 1533.440822][T19963] usb 1-1: Using ep0 maxpacket: 8
[ 1533.467982][T19963] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1533.505153][T15454] usb 3-1: Using ep0 maxpacket: 32
[ 1533.519482][T19963] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1533.536936][T19963] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1533.548768][T15454] usb 3-1: config 0 has an invalid interface number: 136 but max is 0
[ 1533.557015][T15454] usb 3-1: config 0 has no interface number 0
[ 1533.582041][T19963] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1533.596007][T15454] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[ 1533.608621][T19963] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1533.617725][T19963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.625992][T15454] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1533.640721][T15454] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[ 1533.651248][T15454] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1533.688363][T15454] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1533.723804][T15454] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0
[ 1533.766551][T15454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.797124][T25816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1533.820270][T15454] usb 3-1: config 0 descriptor??
[ 1533.853084][T25816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.865714][T15454] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1533.902717][T15458] ntrig 0003:1B96:0008.0036: unknown main item tag 0x0
[ 1533.919746][T19963] usb 1-1: GET_CAPABILITIES returned 0
[ 1533.925314][T19963] usbtmc 1-1:16.0: can't read capabilities
[ 1533.937772][T15458] ntrig 0003:1B96:0008.0036: unknown main item tag 0x0
[ 1533.982477][T15458] ntrig 0003:1B96:0008.0036: unknown main item tag 0x0
[ 1534.004690][T15458] ntrig 0003:1B96:0008.0036: unknown main item tag 0x0
[ 1534.017186][T15458] ntrig 0003:1B96:0008.0036: unknown main item tag 0x0
[ 1534.037543][T25822] net_ratelimit: 1040 callbacks suppressed
[ 1534.037560][T25822] sock: sock_set_timeout: `syz.2.5051' (pid 25822) tries to set negative timeout
[ 1534.075342][T15458] ntrig 0003:1B96:0008.0036: unknown main item tag 0x0
[ 1534.083872][T15458] ntrig 0003:1B96:0008.0036: unknown main item tag 0x0
[ 1534.138529][T15458] ntrig 0003:1B96:0008.0036: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0
[ 1534.209923][T15458] ntrig 0003:1B96:0008.0036: Firmware version: 0.0.0.0.0 (0000 0000)
[ 1534.313881][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5055'.
[ 1534.355158][T25852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1534.396736][T25852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1534.417460][T15458] usb 4-1: USB disconnect, device number 127
[ 1534.454844][T15454] usb 1-1: USB disconnect, device number 7
[ 1534.467036][T15463] usb 3-1: USB disconnect, device number 119
[ 1534.582918][T25707] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1534.608188][T25707] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1534.628963][T25707] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1534.647653][T25707] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1534.797921][T25707] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1534.829720][T25707] 8021q: adding VLAN 0 to HW filter on device team0
[ 1534.848978][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1534.856180][ T7105] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1534.885356][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1534.892611][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1535.042817][T25707] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1535.253955][T25707] veth0_vlan: entered promiscuous mode
[ 1535.293565][T25707] veth1_vlan: entered promiscuous mode
[ 1535.327976][T25873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1535.393022][T25873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1535.450267][T25873] vivid-004: disconnect
[ 1535.455278][T25873] vivid-004: reconnect
[ 1535.473764][T25707] veth0_macvtap: entered promiscuous mode
[ 1535.499722][T25707] veth1_macvtap: entered promiscuous mode
[ 1535.534345][T25879] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5059'.
[ 1535.567488][T25871] netlink: 'syz.0.5057': attribute type 1 has an invalid length.
[ 1535.612935][T25707] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1535.726740][T25707] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1535.834718][T25707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.911439][T25707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1536.050960][T25707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1536.108691][T25707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1536.381334][   T30] audit: type=1326 audit(1751797950.328:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.3.5056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1536.403437][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1536.528491][   T30] audit: type=1326 audit(1751797950.328:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.3.5056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1536.625654][   T30] audit: type=1326 audit(1751797950.328:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.3.5056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1536.722846][   T30] audit: type=1326 audit(1751797950.328:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.3.5056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1536.754154][T18513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1536.754371][T25892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5062'.
[ 1536.788627][T18513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1536.811652][T25892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5062'.
[ 1536.884591][T25892] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1536.893921][T25892] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1536.903288][T25892] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1536.912125][T25892] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1537.372836][T18513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.383130][T18513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1540.748584][T19963] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1540.910766][T19963] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1540.950790][T19963] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1541.002706][T19963] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1541.028624][T19963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.064595][T25935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1541.096470][T19963] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1541.103795][T15458] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1541.271104][T15458] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1541.361075][T15458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1541.373951][T25945] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5069'.
[ 1541.383728][T25945] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5069'.
[ 1541.564262][T15458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1541.671812][T15458] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1541.739687][T15458] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1541.793069][T15458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.860538][T15458] usb 3-1: config 0 descriptor??
[ 1542.777275][T15458] usbhid 3-1:0.0: can't add hid device: -71
[ 1542.799645][T15458] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1542.846072][T15458] usb 3-1: USB disconnect, device number 120
[ 1543.920152][   T10] usb 6-1: USB disconnect, device number 24
[ 1544.336946][T25994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1544.394489][T25994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1544.426751][   T30] audit: type=1326 audit(1751797959.288:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1544.562831][   T30] audit: type=1326 audit(1751797959.288:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1544.683576][   T30] audit: type=1326 audit(1751797959.288:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1544.705675][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1544.748494][   T30] audit: type=1326 audit(1751797959.288:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1544.770595][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1544.838780][   T30] audit: type=1326 audit(1751797959.288:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1544.867962][T26010] syzkaller0: entered promiscuous mode
[ 1544.882053][   T30] audit: type=1326 audit(1751797959.288:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1544.904144][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1544.918270][T26010] syzkaller0: entered allmulticast mode
[ 1544.944674][T26009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1544.959202][   T30] audit: type=1326 audit(1751797959.288:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1545.003996][   T30] audit: type=1326 audit(1751797959.288:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1545.004221][T26009] tipc: Resetting bearer <eth:syzkaller0>
[ 1545.038303][T15458] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1545.107857][   T30] audit: type=1326 audit(1751797959.288:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1545.132048][   T30] audit: type=1326 audit(1751797959.288:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.5081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1545.154128][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1545.208292][T15458] usb 1-1: Using ep0 maxpacket: 8
[ 1545.224763][T15458] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[ 1545.262373][T15458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1545.274894][T15458] usb 1-1: config 0 has no interface number 0
[ 1545.293720][T26009] tipc: Disabling bearer <eth:syzkaller0>
[ 1545.301488][T15458] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1545.329424][T15458] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[ 1545.352593][T15458] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[ 1545.373038][T15458] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[ 1545.382721][T15458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.390892][T15458] usb 1-1: Product: syz
[ 1545.395441][T15458] usb 1-1: Manufacturer: syz
[ 1545.408062][T15458] usb 1-1: SerialNumber: syz
[ 1545.469343][T15458] usb 1-1: config 0 descriptor??
[ 1545.475811][T26004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1545.579609][T26024] FAULT_INJECTION: forcing a failure.
[ 1545.579609][T26024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1545.608052][T26024] CPU: 1 UID: 0 PID: 26024 Comm: syz.4.5091 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1545.608085][T26024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1545.608101][T26024] Call Trace:
[ 1545.608110][T26024]  <TASK>
[ 1545.608120][T26024]  dump_stack_lvl+0x189/0x250
[ 1545.608152][T26024]  ? __pfx____ratelimit+0x10/0x10
[ 1545.608199][T26024]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1545.608225][T26024]  ? __pfx__printk+0x10/0x10
[ 1545.608281][T26024]  should_fail_ex+0x414/0x560
[ 1545.608317][T26024]  _copy_to_user+0x31/0xb0
[ 1545.608344][T26024]  simple_read_from_buffer+0xe1/0x170
[ 1545.608376][T26024]  proc_fail_nth_read+0x1df/0x250
[ 1545.608410][T26024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1545.608442][T26024]  ? rw_verify_area+0x258/0x650
[ 1545.608466][T26024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1545.608497][T26024]  vfs_read+0x200/0x980
[ 1545.608527][T26024]  ? __pfx___mutex_lock+0x10/0x10
[ 1545.608549][T26024]  ? __pfx_vfs_read+0x10/0x10
[ 1545.608574][T26024]  ? __fget_files+0x2a/0x420
[ 1545.608608][T26024]  ? __fget_files+0x3a0/0x420
[ 1545.608636][T26024]  ? __fget_files+0x2a/0x420
[ 1545.608673][T26024]  ksys_read+0x145/0x250
[ 1545.608700][T26024]  ? __pfx_ksys_read+0x10/0x10
[ 1545.608727][T26024]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1545.608749][T26024]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1545.608772][T26024]  __do_fast_syscall_32+0xb6/0x2b0
[ 1545.608795][T26024]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1545.608819][T26024]  do_fast_syscall_32+0x34/0x80
[ 1545.608842][T26024]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1545.608867][T26024] RIP: 0023:0xf7fe4539
[ 1545.608885][T26024] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1545.608903][T26024] RSP: 002b:00000000f5106590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1545.608925][T26024] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5106620
[ 1545.608939][T26024] RDX: 000000000000000f RSI: 00000000f7473ff4 RDI: 0000000000000000
[ 1545.608952][T26024] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1545.608964][T26024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1545.608976][T26024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1545.609006][T26024]  </TASK>
[ 1545.837400][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1545.846573][T26029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5092'.
[ 1545.939579][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.946090][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.067702][T15458] usb 1-1: NFC: intf ffff888053525000 id ffffffff8eb53200
[ 1546.101836][T15458] usb 1-1: USB disconnect, device number 8
[ 1546.750963][T20645] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1546.911100][T20645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1546.939079][T20645] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[ 1546.968553][T20645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.007965][T20645] usb 3-1: config 0 descriptor??
[ 1547.278485][T15463] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1547.418585][T15463] usb 1-1: device descriptor read/64, error -71
[ 1547.476918][T26078] bridge_slave_0: left allmulticast mode
[ 1547.483264][T26078] bridge_slave_0: left promiscuous mode
[ 1547.495373][T26078] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1547.668358][T15463] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1547.713085][T26078] bridge_slave_1: left allmulticast mode
[ 1547.719482][T26078] bridge_slave_1: left promiscuous mode
[ 1547.726155][T26078] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1547.773669][T26078] bond0: (slave bond_slave_0): Releasing backup interface
[ 1547.808681][ T5941] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1547.828794][T15463] usb 1-1: device descriptor read/64, error -71
[ 1547.845053][T26078] bond0: (slave bond_slave_1): Releasing backup interface
[ 1547.893848][T26078] team0: Port device team_slave_0 removed
[ 1547.939056][T26078] team0: Port device team_slave_1 removed
[ 1547.948768][T26078] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1547.956441][T26078] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1547.978999][T26078] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1547.986825][T15463] usb usb1-port1: attempt power cycle
[ 1547.987182][T26078] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1548.003396][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1548.014443][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1548.031505][ T5941] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1548.043890][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1548.054994][ T5941] usb 4-1: SerialNumber: syz
[ 1548.277875][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5106'.
[ 1548.310364][T26043] netlink: 'syz.2.5096': attribute type 1 has an invalid length.
[ 1548.399850][ T5941] usb 4-1: 0:2 : does not exist
[ 1548.404868][ T5941] usb 4-1: unit 5: unexpected type 0x0a
[ 1548.488411][T15463] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1548.496741][ T5941] usb 4-1: USB disconnect, device number 2
[ 1548.510053][T15463] usb 1-1: device descriptor read/8, error -71
[ 1548.581947][T25851] udevd[25851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1548.769154][T15463] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1548.805003][T15463] usb 1-1: device descriptor read/8, error -71
[ 1548.919298][T20645] usbhid 3-1:0.0: can't add hid device: -71
[ 1548.949110][T15463] usb usb1-port1: unable to enumerate USB device
[ 1548.961012][T20645] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1549.105491][T20645] usb 3-1: USB disconnect, device number 121
[ 1549.382345][T26115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5111'.
[ 1550.838192][T26135] trusted_key: encrypted_key: master key parameter '9�E\�4}kQ���;���^1B5|��)�[Û��Ac�@`��Q�;J��𶸈��e�k�\�ξ���4}A�%��7/�X�bu;:�(,N��(r6d����x�u�<l���
�b����' is invalid
[ 1551.354481][T26142] veth0: entered promiscuous mode
[ 1551.397088][T26142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[ 1551.403821][T26142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1551.465272][T26145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1551.466741][T26142] vhci_hcd vhci_hcd.0: Device attached
[ 1551.569461][T26145] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17)
[ 1551.576119][T26145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1551.666823][T26142] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14)
[ 1551.673454][T26142] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1551.681600][T15458] vhci_hcd: vhci_device speed not set
[ 1551.754701][T15458] usb 41-1: new full-speed USB device number 6 using vhci_hcd
[ 1551.784637][T26145] vhci_hcd vhci_hcd.0: Device attached
[ 1551.804759][T26142] vhci_hcd vhci_hcd.0: Device attached
[ 1551.856662][T26145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1551.919720][T26142] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1551.946919][T26151] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22)
[ 1551.953577][T26151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1552.001120][T26145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1552.066924][T26151] vhci_hcd vhci_hcd.0: Device attached
[ 1552.099741][T26154] vhci_hcd: connection closed
[ 1552.100028][T26149] vhci_hcd: connection closed
[ 1552.100579][ T7111] vhci_hcd: stop threads
[ 1552.105616][T26146] vhci_hcd: connection closed
[ 1552.115543][T26143] vhci_hcd: connection reset by peer
[ 1552.136565][ T7111] vhci_hcd: release socket
[ 1552.156765][ T7111] vhci_hcd: disconnect device
[ 1552.167297][ T7111] vhci_hcd: stop threads
[ 1552.167823][T26141] veth0: left promiscuous mode
[ 1552.186698][ T7111] vhci_hcd: release socket
[ 1552.227064][ T7111] vhci_hcd: disconnect device
[ 1552.236835][ T7111] vhci_hcd: stop threads
[ 1552.279063][ T7111] vhci_hcd: release socket
[ 1552.299829][ T7111] vhci_hcd: disconnect device
[ 1552.376290][ T7111] vhci_hcd: stop threads
[ 1552.388381][ T7111] vhci_hcd: release socket
[ 1552.406599][ T7111] vhci_hcd: disconnect device
[ 1552.601434][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1552.678324][T20645] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1552.758722][ T5941] usb 1-1: Using ep0 maxpacket: 32
[ 1552.767995][ T5941] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1552.776461][ T5941] usb 1-1: config 0 has no interface number 0
[ 1552.812481][ T5941] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1552.822500][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.855487][ T5941] usb 1-1: Product: syz
[ 1552.873046][ T5941] usb 1-1: Manufacturer: syz
[ 1552.888337][T20645] usb 3-1: Using ep0 maxpacket: 32
[ 1552.892500][ T5941] usb 1-1: SerialNumber: syz
[ 1552.898077][T20645] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.898105][T20645] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1552.898171][T20645] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1552.972345][ T5941] usb 1-1: config 0 descriptor??
[ 1553.000060][ T5941] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1553.020409][ T5941] usb 1-1: selecting invalid altsetting 1
[ 1553.045621][ T5941] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1553.168085][T15462] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1553.202181][T26161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1553.215304][T26161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1553.276939][T20645] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1553.292925][T20645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1553.314724][T20645] usb 3-1: Product: syz
[ 1553.315088][ T5941] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1553.320166][T20645] usb 3-1: Manufacturer: syz
[ 1553.346275][T20645] usb 3-1: SerialNumber: syz
[ 1553.386803][T20645] cdc_ncm 3-1:1.0: skipping garbage
[ 1553.403758][ T5941] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1553.437571][ T5941] usb 1-1: media controller created
[ 1553.453351][T20645] cdc_ncm 3-1:1.0: skipping garbage
[ 1553.487796][T20645] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 1553.521158][T20645] cdc_ncm 3-1:1.0: bind() failure
[ 1553.542503][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1553.939892][T15463] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1554.468154][T26165] syz.5.5122 (26165): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1554.750117][ T5941] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1554.758041][ T5941] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1555.367252][T15463] usb 1-1: USB disconnect, device number 13
[ 1555.497080][T15462] usb 3-1: USB disconnect, device number 122
[ 1555.641324][T26189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5128'.
[ 1556.808523][T15462] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[ 1556.998780][T15458] vhci_hcd: vhci_device speed not set
[ 1557.011196][T15462] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1557.093775][T15462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1557.195078][T15462] usb 1-1: config 0 descriptor??
[ 1559.153037][T26207] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1559.160998][T15462] pegasus 1-1:0.0: can't reset MAC
[ 1559.166978][T15462] pegasus 1-1:0.0: probe with driver pegasus failed with error -5
[ 1559.273910][T26227] netlink: zone id is out of range
[ 1559.288943][T26227] netlink: zone id is out of range
[ 1559.294114][T26227] netlink: zone id is out of range
[ 1559.300613][T26227] netlink: zone id is out of range
[ 1559.305910][T26227] netlink: zone id is out of range
[ 1559.314278][T26227] netlink: zone id is out of range
[ 1559.319918][T26227] netlink: zone id is out of range
[ 1559.325400][T26227] netlink: zone id is out of range
[ 1559.333785][T26227] netlink: zone id is out of range
[ 1559.341066][T26227] netlink: zone id is out of range
[ 1559.368912][T15462] usb 1-1: USB disconnect, device number 14
[ 1559.629417][T26236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5142'.
[ 1559.649237][T26239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5142'.
[ 1559.667398][T26236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.684322][T26236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.694625][T26236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.716484][T26236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.726444][T26236] geneve2: entered promiscuous mode
[ 1560.122999][T26252] FAULT_INJECTION: forcing a failure.
[ 1560.122999][T26252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1560.157256][T26252] CPU: 1 UID: 0 PID: 26252 Comm: syz.0.5147 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1560.157286][T26252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1560.157300][T26252] Call Trace:
[ 1560.157309][T26252]  <TASK>
[ 1560.157319][T26252]  dump_stack_lvl+0x189/0x250
[ 1560.157343][T26252]  ? __pfx____ratelimit+0x10/0x10
[ 1560.157381][T26252]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1560.157406][T26252]  ? __pfx__printk+0x10/0x10
[ 1560.157434][T26252]  ? __might_fault+0xb0/0x130
[ 1560.157466][T26252]  should_fail_ex+0x414/0x560
[ 1560.157493][T26252]  _copy_from_user+0x2d/0xb0
[ 1560.157520][T26252]  kstrtouint_from_user+0xc4/0x170
[ 1560.157546][T26252]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1560.157583][T26252]  proc_fail_nth_write+0x88/0x240
[ 1560.157612][T26252]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1560.157639][T26252]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1560.157669][T26252]  vfs_write+0x27e/0xa90
[ 1560.157705][T26252]  ? __pfx_vfs_write+0x10/0x10
[ 1560.157732][T26252]  ? __fget_files+0x2a/0x420
[ 1560.157766][T26252]  ? __fget_files+0x3a0/0x420
[ 1560.157794][T26252]  ? __fget_files+0x2a/0x420
[ 1560.157834][T26252]  ksys_write+0x145/0x250
[ 1560.157864][T26252]  ? __pfx_ksys_write+0x10/0x10
[ 1560.157892][T26252]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1560.157915][T26252]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1560.157938][T26252]  __do_fast_syscall_32+0xb6/0x2b0
[ 1560.157961][T26252]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1560.157987][T26252]  do_fast_syscall_32+0x34/0x80
[ 1560.158010][T26252]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1560.158036][T26252] RIP: 0023:0xf7f51539
[ 1560.158054][T26252] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1560.158072][T26252] RSP: 002b:00000000f5076590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1560.158094][T26252] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5076620
[ 1560.158109][T26252] RDX: 0000000000000001 RSI: 00000000f73e3ff4 RDI: 0000000000000000
[ 1560.158122][T26252] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1560.158133][T26252] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1560.158144][T26252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1560.158184][T26252]  </TASK>
[ 1560.387745][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1561.258334][T15463] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1561.441825][T26263] fuse: Unknown parameter ''
[ 1561.449619][T26263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1561.463080][T26269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1561.495101][T26263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1561.568860][T26269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1562.001187][T15463] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1562.010518][T15463] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1562.036621][T15463] usb 4-1: can't read configurations, error -71
[ 1562.448543][T15462] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1562.646321][T15462] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1562.656616][T15462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.677679][T15462] usb 3-1: Product: syz
[ 1562.688385][T15462] usb 3-1: Manufacturer: syz
[ 1562.694298][T15462] usb 3-1: SerialNumber: syz
[ 1562.715094][T15462] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1562.747856][T20645] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1564.098600][T20645] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1564.113723][T20645] ath9k_htc: Failed to initialize the device
[ 1564.169175][T20645] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1564.547626][T26312] fuse: Unknown parameter 'r'
[ 1564.663747][T26314] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5167'.
[ 1565.009592][T15463] usb 3-1: USB disconnect, device number 123
[ 1565.138490][T15462] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1565.290502][T15462] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1565.302027][T15462] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1565.343173][T15462] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1565.368421][T15462] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[ 1565.388620][T15462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1565.410623][T15462] usb 6-1: config 0 descriptor??
[ 1565.578580][T15463] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1565.768398][T15463] usb 3-1: Using ep0 maxpacket: 32
[ 1565.775717][T15463] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 1565.784251][T15463] usb 3-1: config 0 has no interface number 0
[ 1565.807080][T15463] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1565.888923][T15462] kye 0003:0458:501A.0037: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1565.912851][T15463] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1565.926533][T15463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.936102][T15462] kye 0003:0458:501A.0037: hidraw0: USB HID v0.05 Device [HID 0458:501a] on usb-dummy_hcd.5-1/input0
[ 1565.947508][T15463] usb 3-1: Product: syz
[ 1565.951870][T15462] kye 0003:0458:501A.0037: tablet-enabling feature report not found
[ 1566.118628][T15463] usb 3-1: Manufacturer: syz
[ 1566.135695][T15463] usb 3-1: SerialNumber: syz
[ 1566.146313][T15462] kye 0003:0458:501A.0037: tablet enabling failed
[ 1566.165412][T15463] usb 3-1: config 0 descriptor??
[ 1566.206064][T15462] usb 6-1: USB disconnect, device number 25
[ 1566.232295][T15463] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1566.254439][T15463] em28xx 3-1:0.132: Video interface 132 found:
[ 1566.314174][T26341] fido_id[26341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1566.435796][T26328] CUSE: unknown device info "�?\N�E��fъ��KJ�H+��ۤ2Lh��ˠ��^�nL�1�`�Cc��n���"
[ 1566.470075][T26328] CUSE: unknown device info "���0���(�3նi��>f���_ٮ"
[ 1566.521271][T26328] CUSE: unknown device info "�
�<�_e�F��"
[ 1566.553613][T26328] CUSE: DEVNAME unspecified
[ 1566.800877][T15463] em28xx 3-1:0.132: chip ID is em28178
[ 1567.435771][T15463] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[ 1567.618078][T15463] em28xx 3-1:0.132: board has no eeprom
[ 1567.723713][T26359] fuse: Unknown parameter 'r'
[ 1567.883141][T15463] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1568.019003][T15463] em28xx 3-1:0.132: analog set to bulk mode.
[ 1568.195493][T15462] em28xx 3-1:0.132: Registering V4L2 extension
[ 1568.298919][T26364] x_tables: duplicate underflow at hook 2
[ 1568.842092][T15462] em28xx 3-1:0.132: failed to get i2c transfer status from bridge register (error=-5)
[ 1568.842461][ T5941] usb 3-1: USB disconnect, device number 124
[ 1568.859585][T15462] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-19)
[ 1568.878130][T15462] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-19)
[ 1568.888043][T15462] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-19)
[ 1568.965637][T15462] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-19)
[ 1568.992472][ T5941] em28xx 3-1:0.132: Disconnecting em28xx
[ 1569.151046][T15462] usb 3-1: Decoder not found
[ 1569.186502][T15462] em28xx 3-1:0.132: failed to create media graph
[ 1569.208308][T15462] em28xx 3-1:0.132: V4L2 device video103 deregistered
[ 1569.272347][T15462] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 1569.328719][ T5941] em28xx 3-1:0.132: Closing input extension
[ 1569.372460][ T5941] em28xx 3-1:0.132: Freeing device
[ 1569.518494][T26379] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1569.525078][T26379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1569.566637][T26379] vhci_hcd vhci_hcd.0: Device attached
[ 1569.763061][T26382] vhci_hcd: connection closed
[ 1569.763340][ T7105] vhci_hcd: stop threads
[ 1569.776221][ T7105] vhci_hcd: release socket
[ 1569.783333][ T7105] vhci_hcd: disconnect device
[ 1569.808422][T15455] vhci_hcd: vhci_device speed not set
[ 1569.858460][T15458] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1570.039113][T15458] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1570.068580][T15458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.075782][T26392] fuse: Unknown parameter 'r'
[ 1570.098613][T15458] usb 4-1: Product: syz
[ 1570.112976][T15458] usb 4-1: Manufacturer: syz
[ 1570.117947][T15458] usb 4-1: SerialNumber: syz
[ 1570.194816][T15458] usb 4-1: config 0 descriptor??
[ 1570.290862][T15458] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1570.761443][T26381] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5184'.
[ 1570.908277][T15463] usb 6-1: new low-speed USB device number 26 using dummy_hcd
[ 1571.352994][T15463] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1571.371400][T15463] usb 6-1: config 0 has no interface number 0
[ 1571.387803][T15463] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1571.403991][T15463] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1571.465898][T15463] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1571.490399][T20645] usb 4-1: USB disconnect, device number 5
[ 1571.507275][T15463] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1571.558336][T15463] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1571.602726][T15463] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1571.656037][T15463] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1571.687502][T15463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1571.709143][T26408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5190'.
[ 1571.718945][T26408] FAULT_INJECTION: forcing a failure.
[ 1571.718945][T26408] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1571.738732][T26408] CPU: 0 UID: 0 PID: 26408 Comm: syz.3.5190 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1571.738761][T26408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1571.738774][T26408] Call Trace:
[ 1571.738784][T26408]  <TASK>
[ 1571.738793][T26408]  dump_stack_lvl+0x189/0x250
[ 1571.738824][T26408]  ? __pfx____ratelimit+0x10/0x10
[ 1571.738861][T26408]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1571.738886][T26408]  ? __pfx__printk+0x10/0x10
[ 1571.738915][T26408]  ? __might_fault+0xb0/0x130
[ 1571.738953][T26408]  should_fail_ex+0x414/0x560
[ 1571.738990][T26408]  _copy_from_user+0x2d/0xb0
[ 1571.739017][T26408]  kstrtouint_from_user+0xc4/0x170
[ 1571.739041][T26408]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1571.739080][T26408]  proc_fail_nth_write+0x88/0x240
[ 1571.739111][T26408]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1571.739148][T26408]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1571.739180][T26408]  vfs_write+0x27e/0xa90
[ 1571.739215][T26408]  ? __pfx_vfs_write+0x10/0x10
[ 1571.739240][T26408]  ? __fget_files+0x2a/0x420
[ 1571.739272][T26408]  ? __fget_files+0x3a0/0x420
[ 1571.739298][T26408]  ? __fget_files+0x2a/0x420
[ 1571.739333][T26408]  ksys_write+0x145/0x250
[ 1571.739355][T26408]  ? __pfx_ksys_write+0x10/0x10
[ 1571.739376][T26408]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1571.739394][T26408]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1571.739412][T26408]  __do_fast_syscall_32+0xb6/0x2b0
[ 1571.739430][T26408]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1571.739449][T26408]  do_fast_syscall_32+0x34/0x80
[ 1571.739466][T26408]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1571.739486][T26408] RIP: 0023:0xf7fe1539
[ 1571.739500][T26408] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1571.739515][T26408] RSP: 002b:00000000f50e5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1571.739532][T26408] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f50e5620
[ 1571.739544][T26408] RDX: 0000000000000001 RSI: 00000000f7473ff4 RDI: 0000000000000000
[ 1571.739554][T26408] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1571.739563][T26408] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1571.739574][T26408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1571.739597][T26408]  </TASK>
[ 1572.164086][T15463] usb 6-1: config 0 descriptor??
[ 1572.170434][T26398] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1572.177835][T26398] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1572.191106][T15463] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1572.598258][T26398] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped
[ 1572.692021][T15464] usb 6-1: USB disconnect, device number 26
[ 1572.801712][T15464] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1573.597780][T15463] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1573.703711][T18513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1573.713364][T18513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1573.791456][T15463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1573.845812][T15463] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[ 1573.893326][T15463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1573.922677][T15463] usb 3-1: config 0 descriptor??
[ 1573.983859][T26433] geneve2: entered allmulticast mode
[ 1574.386164][T26444] veth0: entered promiscuous mode
[ 1574.422436][T26444] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[ 1574.429155][T26444] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1574.540211][T26447] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1574.652254][T26444] vhci_hcd vhci_hcd.0: Device attached
[ 1574.685058][T26449] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17)
[ 1574.691714][T26449] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1574.826868][T26449] vhci_hcd vhci_hcd.0: Device attached
[ 1574.838356][T20645] vhci_hcd: vhci_device speed not set
[ 1574.948310][T20645] usb 41-1: new full-speed USB device number 7 using vhci_hcd
[ 1574.957942][T26418] netlink: 'syz.2.5193': attribute type 1 has an invalid length.
[ 1574.992618][T26444] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14)
[ 1574.999270][T26444] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1575.058672][T26444] vhci_hcd vhci_hcd.0: Device attached
[ 1575.088722][T26447] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19)
[ 1575.095367][T26447] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1575.165592][T26449] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1575.189834][T26444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1575.215815][T26447] vhci_hcd vhci_hcd.0: Device attached
[ 1575.269269][T26459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1575.365675][T26455] vhci_hcd: connection closed
[ 1575.366337][ T7111] vhci_hcd: stop threads
[ 1575.369937][T26445] vhci_hcd: connection reset by peer
[ 1575.371444][T26450] vhci_hcd: connection closed
[ 1575.381218][T26454] vhci_hcd: connection closed
[ 1575.461408][ T7111] vhci_hcd: release socket
[ 1575.484115][T15463] usbhid 3-1:0.0: can't add hid device: -71
[ 1575.491195][T15463] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1575.501270][ T7111] vhci_hcd: disconnect device
[ 1575.513554][T26443] veth0: left promiscuous mode
[ 1575.520802][ T7111] vhci_hcd: stop threads
[ 1575.536673][T15463] usb 3-1: USB disconnect, device number 125
[ 1575.547602][ T7111] vhci_hcd: release socket
[ 1575.562555][ T7111] vhci_hcd: disconnect device
[ 1575.597295][ T7111] vhci_hcd: stop threads
[ 1575.622935][ T7111] vhci_hcd: release socket
[ 1575.663803][ T7111] vhci_hcd: disconnect device
[ 1575.675362][ T7111] vhci_hcd: stop threads
[ 1575.696783][ T7111] vhci_hcd: release socket
[ 1575.718675][ T7111] vhci_hcd: disconnect device
[ 1575.793041][T26465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5203'.
[ 1576.068963][T15463] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1576.088589][T15458] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[ 1576.208795][T15462] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1576.228533][T15463] usb 3-1: Using ep0 maxpacket: 8
[ 1576.278956][T15458] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.292878][T15463] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1576.293237][T15458] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1576.312237][T15463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.354628][T15463] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1576.357660][T15458] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1576.368156][T15462] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.395584][T15458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.398232][T15463] pvrusb2: **********
[ 1576.418404][T15462] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1576.431798][T15463] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1576.443236][T15463] pvrusb2: Important functionality might not be entirely working.
[ 1576.449896][T15458] usb 6-1: config 0 descriptor??
[ 1576.460255][T15462] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1576.473922][T15458] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1576.478302][T15463] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1576.491918][T15458] dvb-usb: bulk message failed: -22 (3/0)
[ 1576.499379][T15462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1576.507449][T15462] usb 1-1: SerialNumber: syz
[ 1576.511913][T15458] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1576.528427][T15463] pvrusb2: **********
[ 1576.554083][ T2342] pvrusb2: Invalid write control endpoint
[ 1576.564001][T15458] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1576.582114][T26476] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5207'.
[ 1576.686245][T26467] dvb-usb: bulk message failed: -22 (2/0)
[ 1576.696610][T15458] usb 6-1: media controller created
[ 1576.718098][T15458] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1576.773682][T15458] dvb-usb: bulk message failed: -22 (6/0)
[ 1576.878758][T26463] dvb-usb: bulk message failed: -22 (5/0)
[ 1576.886991][T15458] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1576.931528][ T2342] pvrusb2: Invalid write control endpoint
[ 1576.945593][T15458] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input184
[ 1576.957926][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1576.987796][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1577.005611][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1577.008106][T15458] dvb-usb: schedule remote query interval to 150 msecs.
[ 1577.024261][T15462] usb 1-1: bad CDC descriptors
[ 1577.033875][T15458] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1577.058123][ T2342] pvrusb2: Device being rendered inoperable
[ 1577.076093][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1577.086426][T15462] usb 1-1: USB disconnect, device number 15
[ 1577.168944][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1577.192850][T15458] dvb-usb: bulk message failed: -22 (1/0)
[ 1577.199674][T15458] dvb-usb: error while querying for an remote control event.
[ 1577.232662][   T10] usb 3-1: USB disconnect, device number 126
[ 1577.260084][T15464] usb 6-1: USB disconnect, device number 27
[ 1577.283362][ T2342] pvrusb2: Attached sub-driver cx25840
[ 1577.317260][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1577.354387][T15464] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1577.373390][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1578.176248][T26503] net_ratelimit: 2 callbacks suppressed
[ 1578.176279][T26503] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1578.330123][   T10] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1578.365077][T26507] gtp0: entered promiscuous mode
[ 1578.448557][T19963] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1578.488745][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1578.492335][   T10] usb 3-1: config 1 has an invalid interface number: 184 but max is 0
[ 1578.492389][   T10] usb 3-1: config 1 has no interface number 0
[ 1578.492423][   T10] usb 3-1: config 1 interface 184 has no altsetting 0
[ 1578.503515][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1578.503545][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1578.503590][   T10] usb 3-1: Product: syz
[ 1578.503606][   T10] usb 3-1: Manufacturer: syz
[ 1578.503623][   T10] usb 3-1: SerialNumber: syz
[ 1578.513611][   T10] smsc75xx v1.0.0
[ 1578.513655][   T10] smsc75xx 3-1:1.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1578.513910][   T10] smsc75xx 3-1:1.184: probe with driver smsc75xx failed with error -22
[ 1578.598723][T19963] usb 6-1: Using ep0 maxpacket: 32
[ 1578.602318][T19963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1578.602353][T19963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1578.602392][T19963] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1578.602410][T19963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.605213][T19963] usb 6-1: config 0 descriptor??
[ 1578.608986][T19963] hub 6-1:0.0: USB hub found
[ 1578.719662][T26499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1578.720219][T26499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1578.755440][T26499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5213'.
[ 1578.876347][T19963] hub 6-1:0.0: 1 port detected
[ 1579.476028][T26516] netlink: 'syz.4.5218': attribute type 3 has an invalid length.
[ 1579.632051][T26517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1579.650394][T15455] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1579.666945][T26518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1579.677376][T26518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1580.006472][T26523] netlink: 'syz.0.5220': attribute type 5 has an invalid length.
[ 1580.015110][T26523] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5220'.
[ 1580.036711][T19963] hub 6-1:0.0: hub_hub_status failed (err = -32)
[ 1580.038378][T26523] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5220'.
[ 1580.045469][T19963] hub 6-1:0.0: config failed, can't get hub status (err -32)
[ 1580.066779][T26523] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5220'.
[ 1580.072101][T19963] usbhid 6-1:0.0: can't add hid device: -32
[ 1580.087875][T19963] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[ 1580.098359][T20645] vhci_hcd: vhci_device speed not set
[ 1580.396228][T26532] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5224'.
[ 1580.418821][T19963] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1580.848634][T19963] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1580.989277][T15464] usb 3-1: USB disconnect, device number 127
[ 1581.008521][T19963] usb 4-1: Using ep0 maxpacket: 16
[ 1581.023305][T19963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1581.042331][T19963] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1581.053034][T19963] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[ 1581.067367][T19963] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1581.084746][T19963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.093556][T19963] usb 4-1: Product: Р
[ 1581.097861][T19963] usb 4-1: Manufacturer: щ
[ 1581.103572][T19963] usb 4-1: SerialNumber: ࠐ
[ 1581.419048][T15464] usb 6-1: USB disconnect, device number 28
[ 1581.483736][T26546] FAULT_INJECTION: forcing a failure.
[ 1581.483736][T26546] name failslab, interval 1, probability 0, space 0, times 0
[ 1581.500395][T26546] CPU: 1 UID: 0 PID: 26546 Comm: syz.5.5229 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1581.500425][T26546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1581.500440][T26546] Call Trace:
[ 1581.500448][T26546]  <TASK>
[ 1581.500457][T26546]  dump_stack_lvl+0x189/0x250
[ 1581.500493][T26546]  ? __pfx____ratelimit+0x10/0x10
[ 1581.500529][T26546]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1581.500555][T26546]  ? __pfx__printk+0x10/0x10
[ 1581.500588][T26546]  ? __pfx___might_resched+0x10/0x10
[ 1581.500611][T26546]  ? fs_reclaim_acquire+0x7d/0x100
[ 1581.500645][T26546]  should_fail_ex+0x414/0x560
[ 1581.500680][T26546]  should_failslab+0xa8/0x100
[ 1581.500712][T26546]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[ 1581.500739][T26546]  ? kobject_set_name_vargs+0x61/0x110
[ 1581.500766][T26546]  kvasprintf+0xdc/0x190
[ 1581.500788][T26546]  ? __pfx_kvasprintf+0x10/0x10
[ 1581.500809][T26546]  ? __raw_spin_lock_init+0x45/0x100
[ 1581.500845][T26546]  ? kvasprintf_const+0xe1/0x240
[ 1581.500874][T26546]  kobject_set_name_vargs+0x61/0x110
[ 1581.500899][T26546]  device_create+0x22f/0x2f0
[ 1581.500928][T26546]  ? timer_init_key+0x171/0x2d0
[ 1581.500952][T26546]  ? __pfx_device_create+0x10/0x10
[ 1581.500978][T26546]  ? ieee80211_alloc_hw_nm+0x18d2/0x1f20
[ 1581.501021][T26546]  mac80211_hwsim_new_radio+0x418/0x5340
[ 1581.501058][T26546]  ? stack_depot_save_flags+0x40/0x900
[ 1581.501085][T26546]  ? netlink_sendmsg+0x751/0xb30
[ 1581.501103][T26546]  ? ____sys_sendmsg+0x505/0x830
[ 1581.501122][T26546]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1581.501150][T26546]  ? __sys_sendmsg+0x164/0x220
[ 1581.501175][T26546]  ? __do_fast_syscall_32+0xb6/0x2b0
[ 1581.501208][T26546]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1581.501231][T26546]  ? __nla_validate_parse+0x2400/0x2d40
[ 1581.501246][T26546]  ? __sock_sendmsg+0x219/0x270
[ 1581.501271][T26546]  ? ____sys_sendmsg+0x505/0x830
[ 1581.501311][T26546]  hwsim_new_radio_nl+0xea4/0x1b10
[ 1581.501340][T26546]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1581.501375][T26546]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1581.501403][T26546]  ? __nla_parse+0x40/0x60
[ 1581.501421][T26546]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1581.501448][T26546]  genl_family_rcv_msg_doit+0x215/0x300
[ 1581.501476][T26546]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1581.501522][T26546]  ? bpf_lsm_capable+0x9/0x20
[ 1581.501545][T26546]  ? security_capable+0x7e/0x2e0
[ 1581.501583][T26546]  genl_rcv_msg+0x60e/0x790
[ 1581.501619][T26546]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1581.501779][T26546]  ? ref_tracker_free+0x63a/0x7d0
[ 1581.501809][T26546]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1581.501839][T26546]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1581.501871][T26546]  netlink_rcv_skb+0x205/0x470
[ 1581.501899][T26546]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1581.501933][T26546]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1581.501967][T26546]  ? down_read+0x1ad/0x2e0
[ 1581.501995][T26546]  genl_rcv+0x28/0x40
[ 1581.502026][T26546]  netlink_unicast+0x758/0x8d0
[ 1581.502059][T26546]  netlink_sendmsg+0x805/0xb30
[ 1581.502091][T26546]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1581.502112][T26546]  ? __import_iovec+0x5d4/0x7f0
[ 1581.502133][T26546]  ? aa_sock_msg_perm+0x94/0x160
[ 1581.502169][T26546]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1581.502187][T26546]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1581.502214][T26546]  __sock_sendmsg+0x219/0x270
[ 1581.502242][T26546]  ____sys_sendmsg+0x505/0x830
[ 1581.502267][T26546]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1581.502312][T26546]  ___sys_sendmsg+0x21f/0x2a0
[ 1581.502343][T26546]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1581.502402][T26546]  ? __fget_files+0x2a/0x420
[ 1581.502422][T26546]  ? __fget_files+0x3a0/0x420
[ 1581.502461][T26546]  __sys_sendmsg+0x164/0x220
[ 1581.502492][T26546]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1581.502535][T26546]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1581.502552][T26546]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1581.502576][T26546]  __do_fast_syscall_32+0xb6/0x2b0
[ 1581.502651][T26546]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1581.502676][T26546]  do_fast_syscall_32+0x34/0x80
[ 1581.502699][T26546]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1581.502723][T26546] RIP: 0023:0xf70be539
[ 1581.502744][T26546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1581.502763][T26546] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1581.502785][T26546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 1581.502799][T26546] RDX: 00000000200c0084 RSI: 0000000000000000 RDI: 0000000000000000
[ 1581.502810][T26546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1581.502823][T26546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1581.502833][T26546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1581.502855][T26546]  </TASK>
[ 1582.448676][ T5941] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1582.634151][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1582.657118][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1582.668629][ T5941] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1582.701789][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1582.732546][ T5941] usb 3-1: config 0 descriptor??
[ 1582.994583][T26559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5234'.
[ 1583.177079][T26572] Failed to get privilege flags for destination (handle=0x2:0x40)
[ 1583.747286][T19963] cdc_ncm 4-1:1.0: bind() failure
[ 1583.790211][T19963] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1583.813040][T19963] cdc_ncm 4-1:1.1: bind() failure
[ 1583.853225][T19963] usb 4-1: USB disconnect, device number 6
[ 1584.333536][T26592] CUSE: DEVNAME unspecified
[ 1584.359989][T26592] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5243'.
[ 1584.382759][T26594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5244'.
[ 1584.401763][T26592] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5243'.
[ 1584.451294][   T30] kauditd_printk_skb: 56 callbacks suppressed
[ 1584.451314][   T30] audit: type=1326 audit(1751797999.318:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1584.556980][T26594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5244'.
[ 1584.564229][   T30] audit: type=1326 audit(1751797999.318:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1584.574101][T26594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5244'.
[ 1584.588072][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1584.678647][   T30] audit: type=1326 audit(1751797999.318:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1584.700813][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1584.728408][T20645] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1584.778825][   T30] audit: type=1326 audit(1751797999.318:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1584.800971][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1584.872681][   T30] audit: type=1326 audit(1751797999.328:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1584.932961][T20645] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1584.953095][   T30] audit: type=1326 audit(1751797999.328:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1584.961540][T20645] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1585.034105][   T30] audit: type=1326 audit(1751797999.328:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1585.071571][T20645] usb 6-1: config 1 has no interface number 1
[ 1585.097154][T20645] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1585.137139][   T30] audit: type=1326 audit(1751797999.328:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1585.171600][   T30] audit: type=1326 audit(1751797999.348:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1585.188311][T20645] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1585.201590][   T30] audit: type=1326 audit(1751797999.348:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.5.5243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1585.338658][ T5941] usbhid 3-1:0.0: can't add hid device: -71
[ 1585.344736][ T5941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1585.417108][ T5941] usb 3-1: USB disconnect, device number 2
[ 1585.453925][T20645] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1585.469671][T20645] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.508307][T20645] usb 6-1: Product: syz
[ 1585.519199][T20645] usb 6-1: Manufacturer: syz
[ 1585.534084][T20645] usb 6-1: SerialNumber: syz
[ 1585.571788][T26592] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1585.648769][T15464] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1585.798329][T15464] usb 1-1: Using ep0 maxpacket: 32
[ 1585.835849][T15464] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[ 1585.860953][T15464] usb 1-1: config 0 has no interface number 0
[ 1585.873316][T20645] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1586.004449][T15464] usb 1-1: config 0 interface 12 has no altsetting 0
[ 1586.016483][T20645] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1586.131932][T15464] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1586.180251][T15464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1586.218717][T15464] usb 1-1: Product: syz
[ 1586.233651][T15464] usb 1-1: Manufacturer: syz
[ 1586.258400][T20645] usb 6-1: USB disconnect, device number 29
[ 1586.266170][T15464] usb 1-1: SerialNumber: syz
[ 1586.297197][T15464] usb 1-1: config 0 descriptor??
[ 1586.595282][T15464] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[ 1586.815380][T15464] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[ 1586.823878][T15464] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1586.833539][T15464] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[ 1586.864432][T15464] usb 1-1: USB disconnect, device number 16
[ 1587.538642][T15455] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1587.588434][T15464] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1587.653237][T26624] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1587.709632][T15455] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1587.733868][T15455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.746998][T15455] usb 6-1: Product: syz
[ 1587.751706][T15455] usb 6-1: Manufacturer: syz
[ 1587.756514][T15455] usb 6-1: SerialNumber: syz
[ 1587.758482][T15464] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1587.779269][T15455] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1587.783596][T15464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.810381][T19963] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1587.818069][T15464] usb 4-1: Product: syz
[ 1587.826089][T15464] usb 4-1: Manufacturer: syz
[ 1587.835686][T15464] usb 4-1: SerialNumber: syz
[ 1587.864444][T15464] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1587.884931][   T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1588.130882][T20645] usb 6-1: USB disconnect, device number 30
[ 1588.398917][T26638] syzkaller1: entered promiscuous mode
[ 1588.404576][T26638] syzkaller1: entered allmulticast mode
[ 1588.784072][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5259'.
[ 1588.904142][T19963] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1588.927339][T19963] ath9k_htc: Failed to initialize the device
[ 1588.954228][T20645] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1589.004119][   T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1589.135673][   T10] ath9k_htc: Failed to initialize the device
[ 1589.148497][T26655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1589.195420][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1589.216956][T26655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1589.304752][T26655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1589.328799][T26655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1589.520591][T15463] usb 4-1: USB disconnect, device number 7
[ 1589.528348][T20645] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1589.794277][T20645] usb 6-1: config 0 has no interfaces?
[ 1589.807246][T20645] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1589.816764][T20645] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.830310][T20645] usb 6-1: Product: syz
[ 1589.834532][T20645] usb 6-1: Manufacturer: syz
[ 1589.840947][T20645] usb 6-1: SerialNumber: syz
[ 1589.851552][T20645] usb 6-1: config 0 descriptor??
[ 1590.113073][T26644] netlink: 'syz.5.5258': attribute type 4 has an invalid length.
[ 1590.121107][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5258'.
[ 1592.016526][T26667] fuse: Unknown parameter 'fI'
[ 1592.051058][T19963] usb 6-1: USB disconnect, device number 31
[ 1592.870508][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5269'.
[ 1592.883973][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5269'.
[ 1593.752832][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5273'.
[ 1593.787646][T26696] delete_channel: no stack
[ 1594.091754][T26709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5276'.
[ 1594.224701][T26711] netlink: 'syz.3.5277': attribute type 1 has an invalid length.
[ 1594.309069][T26711] bond1: entered promiscuous mode
[ 1594.314195][T26711] bond1: entered allmulticast mode
[ 1594.320075][T26711] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1594.328241][T15464] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1594.531939][T15464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1594.549763][T15464] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[ 1594.569001][T15464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.586512][T15464] usb 1-1: config 0 descriptor??
[ 1594.612730][T26725] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad)
[ 1594.619254][T26725] PKCS7: Only support pkcs7_signedData type
[ 1594.808376][T15463] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[ 1595.170183][T20645] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1595.221704][T26727] fuse: Bad value for 'fd'
[ 1595.281272][T15463] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1595.292050][T15463] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1595.314394][T15463] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1595.331206][T26729] lo: entered allmulticast mode
[ 1595.337720][T15463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1595.346871][T20645] usb 4-1: Using ep0 maxpacket: 32
[ 1595.408278][T20645] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1595.448347][T20645] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1595.458939][T20645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1595.467051][T20645] usb 4-1: Product: syz
[ 1595.491680][T20645] usb 4-1: Manufacturer: syz
[ 1595.497456][T20645] usb 4-1: SerialNumber: syz
[ 1595.529186][T20645] usb 4-1: config 0 descriptor??
[ 1595.544451][T26728] lo: left allmulticast mode
[ 1595.561220][T20645] usb 4-1: bad CDC descriptors
[ 1595.567054][T20645] usb 4-1: unsupported MDLM descriptors
[ 1595.688449][T15463] usb 3-1: usb_control_msg returned -71
[ 1595.708729][T15463] usbtmc 3-1:16.0: can't read capabilities
[ 1595.735763][T15463] usb 3-1: USB disconnect, device number 3
[ 1595.770277][T15458] usb 4-1: USB disconnect, device number 8
[ 1595.799704][T26705] netlink: 'syz.0.5274': attribute type 1 has an invalid length.
[ 1596.793333][T26748] batman_adv: batadv0: Adding interface: dummy0
[ 1596.828588][T26748] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1596.853846][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1596.863377][T15464] usbhid 1-1:0.0: can't add hid device: -71
[ 1596.882426][T15464] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1596.924952][T15464] usb 1-1: USB disconnect, device number 17
[ 1596.994585][   T30] kauditd_printk_skb: 57 callbacks suppressed
[ 1596.994605][   T30] audit: type=1326 audit(1751798011.848:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.044096][T26748] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[ 1597.113797][   T30] audit: type=1326 audit(1751798011.848:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.135877][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1597.206680][   T30] audit: type=1326 audit(1751798011.848:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.229409][T20645] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1597.323276][   T30] audit: type=1326 audit(1751798011.848:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.409222][   T30] audit: type=1326 audit(1751798011.848:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.440423][   T30] audit: type=1326 audit(1751798011.848:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.465318][T20645] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1597.485497][T20645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1597.500044][T20645] usb 4-1: config 0 descriptor??
[ 1597.505362][   T30] audit: type=1326 audit(1751798011.848:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.531106][T20645] ums-realtek 4-1:0.0: USB Mass Storage device detected
[ 1597.569845][   T30] audit: type=1326 audit(1751798011.868:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.728588][   T30] audit: type=1326 audit(1751798011.868:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1597.750605][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1597.888336][   T30] audit: type=1326 audit(1751798011.968:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26747 comm="syz.3.5288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe1539 code=0x7ffc0000
[ 1598.054096][T20645] usb 4-1: USB disconnect, device number 9
[ 1598.508306][T15463] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1598.636809][T26774] FAULT_INJECTION: forcing a failure.
[ 1598.636809][T26774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1598.650367][T26774] CPU: 0 UID: 0 PID: 26774 Comm: syz.3.5295 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1598.650391][T26774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1598.650401][T26774] Call Trace:
[ 1598.650407][T26774]  <TASK>
[ 1598.650414][T26774]  dump_stack_lvl+0x189/0x250
[ 1598.650436][T26774]  ? __pfx____ratelimit+0x10/0x10
[ 1598.650461][T26774]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1598.650479][T26774]  ? __pfx__printk+0x10/0x10
[ 1598.650500][T26774]  ? __might_fault+0xb0/0x130
[ 1598.650527][T26774]  should_fail_ex+0x414/0x560
[ 1598.650553][T26774]  _copy_from_user+0x2d/0xb0
[ 1598.650572][T26774]  get_compat_msghdr+0xad/0x4a0
[ 1598.650598][T26774]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1598.650620][T26774]  ? rcu_is_watching+0x15/0xb0
[ 1598.650644][T26774]  ? ___sys_recvmsg+0x1c4/0x510
[ 1598.650670][T26774]  ___sys_recvmsg+0x17f/0x510
[ 1598.650695][T26774]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1598.650733][T26774]  ? __fget_files+0x3a0/0x420
[ 1598.650763][T26774]  do_recvmmsg+0x36a/0x770
[ 1598.650790][T26774]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1598.650820][T26774]  ? __pfx_vfs_write+0x10/0x10
[ 1598.650849][T26774]  __sys_recvmmsg+0x19d/0x280
[ 1598.650872][T26774]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1598.650891][T26774]  ? ksys_write+0x22a/0x250
[ 1598.650916][T26774]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 1598.650941][T26774]  __do_fast_syscall_32+0xb6/0x2b0
[ 1598.650958][T26774]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1598.650976][T26774]  do_fast_syscall_32+0x34/0x80
[ 1598.650991][T26774]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1598.651010][T26774] RIP: 0023:0xf7fe1539
[ 1598.651023][T26774] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1598.651036][T26774] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 1598.651052][T26774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002c00
[ 1598.651063][T26774] RDX: 0000000000000008 RSI: 0000000000000020 RDI: 0000000000000000
[ 1598.651071][T26774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1598.651080][T26774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1598.651089][T26774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1598.651109][T26774]  </TASK>
[ 1598.892432][T15463] usb 6-1: Using ep0 maxpacket: 16
[ 1599.008783][T15463] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1599.020467][T15463] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1599.043024][T15463] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1599.052185][T15463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1599.060312][T15463] usb 6-1: Product: syz
[ 1599.064527][T15463] usb 6-1: Manufacturer: syz
[ 1599.069217][T15463] usb 6-1: SerialNumber: syz
[ 1599.077807][T15463] usb 6-1: config 0 descriptor??
[ 1599.086797][T15463] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1599.096197][T15463] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1599.498570][T26780] fuse: Bad value for 'fd'
[ 1599.649591][T26789] ptrace attach of "./syz-executor exec"[18863] was attempted by "./syz-executor exec"[26789]
[ 1599.961385][T15463] em28xx 6-1:0.0: unknown em28xx chip ID (108)
[ 1600.001042][T15463] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1600.018423][T15464] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1600.031440][T26793] fuse: Unknown parameter 'gro
p_id'
[ 1600.183940][T15464] usb 3-1: Using ep0 maxpacket: 16
[ 1600.191670][T15464] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1600.218941][T15464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1600.236080][T15464] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1600.291032][T15464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.321747][T15463] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 1600.336973][T15463] em28xx 6-1:0.0: No AC97 audio processor
[ 1600.357531][T15464] usb 3-1: Product: syz
[ 1600.379585][T15464] usb 3-1: Manufacturer: syz
[ 1600.387426][T15463] usb 6-1: USB disconnect, device number 32
[ 1600.393688][T15464] usb 3-1: SerialNumber: syz
[ 1600.402955][T15463] em28xx 6-1:0.0: Disconnecting em28xx
[ 1600.412334][T15464] usb 3-1: config 0 descriptor??
[ 1600.433136][T15463] em28xx 6-1:0.0: Freeing device
[ 1600.443637][T15464] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1600.532529][T15464] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1601.204015][T15464] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1601.223283][T15464] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1601.254567][T15464] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 1601.281950][T15464] em28xx 3-1:0.0: No AC97 audio processor
[ 1601.333965][T15464] usb 3-1: USB disconnect, device number 4
[ 1601.355007][T15464] em28xx 3-1:0.0: Disconnecting em28xx
[ 1601.373108][T15464] em28xx 3-1:0.0: Freeing device
[ 1601.472220][T26807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5303'.
[ 1601.517851][T15458] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1601.668350][T15458] usb 4-1: Using ep0 maxpacket: 32
[ 1601.683889][T15458] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1601.723747][T15458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1601.759584][T15458] usb 4-1: config 0 descriptor??
[ 1601.999276][T15458] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1602.055520][T15458] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1602.105242][T15458] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1602.124921][T15458] usb 4-1: media controller created
[ 1602.205112][T26821] bridge0: port 1(erspan0) entered blocking state
[ 1602.212123][T26821] bridge0: port 1(erspan0) entered disabled state
[ 1602.223064][T26820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1602.233382][T26820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1602.269633][T26821] erspan0: entered allmulticast mode
[ 1602.271899][T26821] erspan0: entered promiscuous mode
[ 1602.350427][T15458] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1602.414211][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1602.414229][   T30] audit: type=1326 audit(1751798017.278:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26813 comm="syz.2.5306" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709e539 code=0x0
[ 1602.512728][T26820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1602.522879][T26820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1602.609113][T15458] az6027: usb out operation failed. (-71)
[ 1602.637381][T15458] az6027: usb out operation failed. (-71)
[ 1602.647461][T15458] stb0899_attach: Driver disabled by Kconfig
[ 1602.670068][T15458] az6027: no front-end attached
[ 1602.670068][T15458] 
[ 1602.677879][T15458] az6027: usb out operation failed. (-71)
[ 1602.685224][T15458] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1602.708553][T15455] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[ 1602.723802][T15458] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input186
[ 1602.769388][T15458] dvb-usb: schedule remote query interval to 400 msecs.
[ 1602.795954][T15458] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1602.857393][T15458] usb 4-1: USB disconnect, device number 10
[ 1602.888888][T15455] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1602.896998][T15455] usb 3-1: config 0 has no interface number 0
[ 1602.912310][T15455] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1602.975407][T15455] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1603.419321][T15455] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1603.565233][T15458] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1603.596441][T15455] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[ 1603.606036][T15455] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1603.628809][T15455] usb 3-1: Product: syz
[ 1603.641156][T15455] usb 3-1: SerialNumber: syz
[ 1603.662627][T15455] usb 3-1: config 0 descriptor??
[ 1603.686345][T15455] cm109 3-1:0.8: invalid payload size 0, expected 4
[ 1603.697417][T15455] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input187
[ 1604.451194][T26840] netlink: 'syz.0.5312': attribute type 1 has an invalid length.
[ 1604.798940][T15455] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1604.960717][T15455] usb 6-1: config index 0 descriptor too short (expected 3133, got 61)
[ 1604.973228][T15455] usb 6-1: config 0 has an invalid interface number: 156 but max is 1
[ 1604.990961][T15455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1605.024519][T15455] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1605.171748][T15455] usb 6-1: config 0 has no interface number 0
[ 1605.178551][T15455] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1605.192193][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.201711][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.209054][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.218570][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.226056][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.238444][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.245951][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.253604][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.262466][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.269669][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1605.277330][T15458] usb 3-1: USB disconnect, device number 5
[ 1605.283514][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1605.300365][T15458] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1605.311985][T15455] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1605.376260][T15455] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1605.408778][T15455] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1605.425319][T15455] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1605.447442][T15455] usb 6-1: New USB device strings: Mfr=0, Product=197, SerialNumber=0
[ 1605.457495][T15455] usb 6-1: Product: syz
[ 1605.485075][T15455] usb 6-1: config 0 descriptor??
[ 1605.547352][T15455] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1605.601546][T26847] FAULT_INJECTION: forcing a failure.
[ 1605.601546][T26847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1605.617091][T26847] CPU: 0 UID: 0 PID: 26847 Comm: syz.2.5315 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1605.617119][T26847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1605.617131][T26847] Call Trace:
[ 1605.617140][T26847]  <TASK>
[ 1605.617149][T26847]  dump_stack_lvl+0x189/0x250
[ 1605.617180][T26847]  ? __pfx____ratelimit+0x10/0x10
[ 1605.617216][T26847]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1605.617238][T26847]  ? __pfx__printk+0x10/0x10
[ 1605.617275][T26847]  ? __might_fault+0xb0/0x130
[ 1605.617309][T26847]  should_fail_ex+0x414/0x560
[ 1605.617342][T26847]  _copy_from_user+0x2d/0xb0
[ 1605.617367][T26847]  get_compat_msghdr+0xad/0x4a0
[ 1605.617399][T26847]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1605.617428][T26847]  ? rcu_is_watching+0x15/0xb0
[ 1605.617450][T26847]  ? ___sys_recvmsg+0x1c4/0x510
[ 1605.617502][T26847]  ___sys_recvmsg+0x17f/0x510
[ 1605.617535][T26847]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1605.617590][T26847]  ? __fget_files+0x3a0/0x420
[ 1605.617630][T26847]  do_recvmmsg+0x36a/0x770
[ 1605.617668][T26847]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1605.617709][T26847]  ? __pfx_vfs_write+0x10/0x10
[ 1605.617751][T26847]  __sys_recvmmsg+0x19d/0x280
[ 1605.617782][T26847]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1605.617808][T26847]  ? ksys_write+0x22a/0x250
[ 1605.617843][T26847]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 1605.617892][T26847]  __do_fast_syscall_32+0xb6/0x2b0
[ 1605.617933][T26847]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1605.617959][T26847]  do_fast_syscall_32+0x34/0x80
[ 1605.617983][T26847]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1605.618008][T26847] RIP: 0023:0xf709e539
[ 1605.618026][T26847] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1605.618044][T26847] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 1605.618066][T26847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800099c0
[ 1605.618081][T26847] RDX: 0000000000000002 RSI: 0000000000010002 RDI: 0000000000000000
[ 1605.618093][T26847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1605.618105][T26847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1605.618117][T26847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1605.618147][T26847]  </TASK>
[ 1606.075926][T15455] spca561 6-1:0.156: probe with driver spca561 failed with error -22
[ 1606.248636][T15455] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1606.255714][T15455] usb 6-1: MIDIStreaming interface descriptor not found
[ 1606.504918][T15455] usb 6-1: USB disconnect, device number 33
[ 1606.518352][T15462] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1606.742830][T15462] usb 1-1: config 1 has no interfaces?
[ 1606.762551][T15462] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1606.772853][T15462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.790169][T15462] usb 1-1: Product: syz
[ 1606.804564][T15462] usb 1-1: Manufacturer: syz
[ 1606.818367][T15462] usb 1-1: SerialNumber: syz
[ 1606.848316][T19963] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1606.987716][T15464] IPVS: starting estimator thread 0...
[ 1606.995305][T26882] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1606.998392][T19963] usb 4-1: Using ep0 maxpacket: 16
[ 1607.055380][T19963] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[ 1607.084756][T19963] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1607.144452][T19963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1607.148457][T26886] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1607.180755][T19963] usb 4-1: Product: syz
[ 1607.253194][T19963] usb 4-1: Manufacturer: М
[ 1607.264350][T19963] usb 4-1: SerialNumber: syz
[ 1607.312934][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.319968][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.502363][T26875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1607.524668][T26875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1607.589831][T19963] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1607.685614][T19963] usb 4-1: USB disconnect, device number 11
[ 1607.803392][T25851] udevd[25851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1608.520837][T26902] binder: 26898:26902 ioctl c0306201 80000540 returned -14
[ 1609.368294][T15464] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1609.623337][T15464] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1609.636001][T15464] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1609.697208][T26912] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[ 1609.704237][T15464] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1609.812485][T15464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1609.844496][T15462] usb 1-1: USB disconnect, device number 18
[ 1609.876083][T26909] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1609.942740][T26918] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5334'.
[ 1609.953472][T26918] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[ 1609.980442][T15464] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1610.626321][T26929] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1610.751277][T26930] netlink: 'syz.0.5337': attribute type 10 has an invalid length.
[ 1610.828722][T26930] veth0_vlan: entered allmulticast mode
[ 1610.834832][T26930] veth0_vlan: left promiscuous mode
[ 1610.856380][T26930] veth0_vlan: entered promiscuous mode
[ 1610.920684][T26930] team0: Device veth0_vlan failed to register rx_handler
[ 1611.048333][T15455] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[ 1611.210657][T15455] usb 1-1: device descriptor read/64, error -71
[ 1611.449454][T15455] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[ 1611.649192][T15455] usb 1-1: device descriptor read/64, error -71
[ 1611.774180][T15455] usb usb1-port1: attempt power cycle
[ 1612.148338][T15455] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[ 1612.169358][T15455] usb 1-1: device descriptor read/8, error -71
[ 1612.430914][T15455] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[ 1612.463428][T15455] usb 1-1: device descriptor read/8, error -71
[ 1612.583592][T15455] usb usb1-port1: unable to enumerate USB device
[ 1612.635995][T15455] usb 4-1: USB disconnect, device number 12
[ 1612.798910][T19963] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1612.958459][T19963] usb 6-1: Using ep0 maxpacket: 8
[ 1612.971911][T26965] erspan0: left allmulticast mode
[ 1612.977148][T26965] erspan0: left promiscuous mode
[ 1612.982919][T26965] bridge0: port 1(erspan0) entered disabled state
[ 1613.010386][T19963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1613.023746][T19963] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[ 1613.033007][T19963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1613.057153][T19963] usb 6-1: config 0 descriptor??
[ 1613.130972][T15455] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1613.280450][   T30] audit: type=1326 audit(1751798028.148:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.302678][T15455] usb 4-1: Using ep0 maxpacket: 16
[ 1613.340406][T15455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1613.352084][T15455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1613.373192][T15455] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1613.386148][   T30] audit: type=1326 audit(1751798028.148:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=350 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.386228][   T30] audit: type=1326 audit(1751798028.148:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.386275][   T30] audit: type=1326 audit(1751798028.148:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.386341][   T30] audit: type=1326 audit(1751798028.148:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.386385][   T30] audit: type=1326 audit(1751798028.148:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.498854][   T30] audit: type=1326 audit(1751798028.148:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.546325][   T30] audit: type=1326 audit(1751798028.148:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.572722][T15455] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1613.583527][T15455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1613.584230][   T30] audit: type=1326 audit(1751798028.148:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.623030][   T30] audit: type=1326 audit(1751798028.158:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26956 comm="syz.5.5344" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be539 code=0x7ffc0000
[ 1613.755836][T15455] usb 4-1: config 0 descriptor??
[ 1613.946299][T26973] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1614.202383][T15455] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max
[ 1614.285272][T15455] microsoft 0003:045E:07DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 1614.285317][T15455] microsoft 0003:045E:07DA.0038: no inputs found
[ 1614.285335][T15455] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway
[ 1614.407671][T15464] usb 4-1: USB disconnect, device number 13
[ 1614.516715][T26979] fido_id[26979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1615.350185][T26994] netlink: 'syz.3.5359': attribute type 1 has an invalid length.
[ 1615.455515][T26996] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1615.489914][T26996] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1615.528336][T19963] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1615.552481][T26994] gretap1: entered promiscuous mode
[ 1615.594991][T26994] bond2: (slave gretap1): making interface the new active one
[ 1615.621493][T26986] IPv6: Can't replace route, no match found
[ 1615.628366][   T31] INFO: task kworker/0:5:5929 blocked for more than 143 seconds.
[ 1615.636141][   T31]       Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0
[ 1615.639966][T26994] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 1615.644886][T15463] usb 6-1: USB disconnect, device number 34
[ 1615.677331][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1615.706292][   T31] task:kworker/0:5     state:D stack:18088 pid:5929  tgid:5929  ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1615.708379][T19963] usb 1-1: Using ep0 maxpacket: 8
[ 1615.751028][   T31] Workqueue: usb_hub_wq hub_event
[ 1615.756202][T19963] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1615.769293][T26996] macvlan2: entered promiscuous mode
[ 1615.771222][   T31] Call Trace:
[ 1615.777454][T26996] macvlan2: entered allmulticast mode
[ 1615.791077][T19963] usb 1-1: config 6 has an invalid interface number: 70 but max is 0
[ 1615.797789][   T31]  <TASK>
[ 1615.804112][T19963] usb 1-1: config 6 has no interface number 0
[ 1615.804815][   T31]  __schedule+0x16f5/0x4d00
[ 1615.810842][T19963] usb 1-1: config 6 interface 70 has no altsetting 0
[ 1615.827346][T26996] bond2: entered promiscuous mode
[ 1615.828504][   T31]  ? schedule+0x165/0x360
[ 1615.835747][T19963] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=63.7b
[ 1615.851759][   T31]  ? __pfx___schedule+0x10/0x10
[ 1615.852527][T26996] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1615.864030][T19963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.864111][   T31]  ? schedule+0x91/0x360
[ 1615.877988][T19963] usb 1-1: Product: syz
[ 1615.882334][T19963] usb 1-1: Manufacturer: syz
[ 1615.882844][   T31]  schedule+0x165/0x360
[ 1615.891739][   T31]  schedule_timeout+0x9a/0x270
[ 1615.896799][T19963] usb 1-1: SerialNumber: syz
[ 1615.896790][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1615.896842][   T31]  ? wait_for_completion+0x267/0x5d0
[ 1615.914639][   T31]  wait_for_completion+0x2bf/0x5d0
[ 1615.921661][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1615.932608][   T31]  port100_get_command_type_mask+0x1ca/0x380
[ 1615.945835][   T31]  ? __pfx_port100_get_command_type_mask+0x10/0x10
[ 1615.953082][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1615.959789][   T31]  port100_probe+0x997/0xdc0
[ 1615.964748][   T31]  usb_probe_interface+0x641/0xbc0
[ 1615.970517][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1615.976696][   T31]  really_probe+0x26a/0x9a0
[ 1615.982123][   T31]  __driver_probe_device+0x18c/0x2f0
[ 1615.987851][   T31]  driver_probe_device+0x4f/0x430
[ 1615.993622][   T31]  __device_attach_driver+0x2ce/0x530
[ 1615.999709][   T31]  bus_for_each_drv+0x251/0x2e0
[ 1616.004822][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1616.011487][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1616.017106][   T31]  __device_attach+0x2b8/0x400
[ 1616.047630][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1616.086434][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1616.097368][   T31]  bus_probe_device+0x185/0x260
[ 1616.102815][   T31]  device_add+0x7b6/0xb50
[ 1616.107427][   T31]  usb_set_configuration+0x1a87/0x20e0
[ 1616.113623][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 1616.119630][   T31]  usb_probe_device+0x1c4/0x390
[ 1616.124754][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1616.130829][   T31]  really_probe+0x26a/0x9a0
[ 1616.135619][   T31]  __driver_probe_device+0x18c/0x2f0
[ 1616.141853][   T31]  driver_probe_device+0x4f/0x430
[ 1616.147167][   T31]  __device_attach_driver+0x2ce/0x530
[ 1616.163865][T26992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1616.176089][   T31]  bus_for_each_drv+0x251/0x2e0
[ 1616.194206][T26992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1616.202408][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1616.209386][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1616.223478][   T31]  __device_attach+0x2b8/0x400
[ 1616.228814][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1616.234350][T19963] hfcsusb_probe: interface(70) actalt(118) minor(-1) vend_idx(12)
[ 1616.234832][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1616.248499][   T31]  bus_probe_device+0x185/0x260
[ 1616.253440][   T31]  device_add+0x7b6/0xb50
[ 1616.255296][T19963] HFC-S_USB 1-1:6.70: probe with driver HFC-S_USB failed with error -5
[ 1616.258036][   T31]  usb_new_device+0xa39/0x16c0
[ 1616.272034][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1616.277436][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1616.283487][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1616.289303][   T31]  hub_event+0x2941/0x4a00
[ 1616.294133][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1616.300045][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1616.301721][T19963] usb 1-1: USB disconnect, device number 23
[ 1616.306201][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1616.357957][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1616.371788][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1616.377577][   T31]  process_scheduled_works+0xade/0x17b0
[ 1616.384763][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1616.394574][   T31]  worker_thread+0x8a0/0xda0
[ 1616.400168][   T31]  kthread+0x70e/0x8a0
[ 1616.404430][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1616.413731][   T31]  ? __pfx_kthread+0x10/0x10
[ 1616.419661][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1616.424923][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1616.434240][   T31]  ? __pfx_kthread+0x10/0x10
[ 1616.440246][   T31]  ret_from_fork+0x3fc/0x770
[ 1616.445008][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1616.454070][   T31]  ? __switch_to_asm+0x39/0x70
[ 1616.460444][   T31]  ? __switch_to_asm+0x33/0x70
[ 1616.465289][   T31]  ? __pfx_kthread+0x10/0x10
[ 1616.476430][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1616.483021][   T31]  </TASK>
[ 1616.486392][   T31] 
[ 1616.486392][   T31] Showing all locks held in the system:
[ 1616.496398][T26996] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[ 1616.507592][   T31] 1 lock held by khungtaskd/31:
[ 1616.515946][   T31]  #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1616.527793][   T31] 2 locks held by getty/5606:
[ 1616.535969][   T31]  #0: ffff88803120b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1616.589423][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1616.608398][   T31] 5 locks held by kworker/0:5/5929:
[ 1616.613653][   T31]  #0: ffff8880222c0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1616.653030][   T31]  #1: ffffc90004d37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1616.692905][   T31]  #2: ffff888028512198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[ 1616.702868][   T31]  #3: ffff88807e855198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1616.718823][   T31]  #4: ffff888027668160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1616.728145][   T31] 3 locks held by kworker/u8:12/7099:
[ 1616.733681][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1616.751999][   T31]  #1: ffffc90003e4fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1616.763245][   T31]  #2: ffffffff8f51d188 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1616.772831][   T31] 1 lock held by syz-executor/17773:
[ 1616.782390][   T31] 4 locks held by udevd/24710:
[ 1616.787259][   T31]  #0: ffff88805b501540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[ 1616.796722][   T31]  #1: ffff88805cdfa888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0
[ 1616.813763][   T31]  #2: ffff888059a9ae18 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0
[ 1616.824822][   T31]  #3: ffff88807e855198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1616.839644][   T31] 3 locks held by syz.3.5359/26996:
[ 1616.845025][   T31]  #0: ffffffff8ec80c80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1616.857873][   T31]  #1: ffffffff8f51d188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[ 1616.872133][   T31]  #2: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 1616.883288][   T31] 2 locks held by syz.5.5360/27000:
[ 1616.894136][   T31] 
[ 1616.896766][   T31] =============================================
[ 1616.896766][   T31] 
[ 1616.897810][T26996] bond2: left promiscuous mode
[ 1616.914315][   T31] NMI backtrace for cpu 1
[ 1616.914332][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1616.914353][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1616.914363][   T31] Call Trace:
[ 1616.914370][   T31]  <TASK>
[ 1616.914377][   T31]  dump_stack_lvl+0x189/0x250
[ 1616.914399][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1616.914423][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1616.914445][   T31]  ? __pfx__printk+0x10/0x10
[ 1616.914476][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1616.914500][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1616.914519][   T31]  ? _printk+0xcf/0x120
[ 1616.914542][   T31]  ? __pfx__printk+0x10/0x10
[ 1616.914564][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1616.914586][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1616.914610][   T31]  watchdog+0xfee/0x1030
[ 1616.914626][   T31]  ? watchdog+0x1de/0x1030
[ 1616.914664][   T31]  kthread+0x70e/0x8a0
[ 1616.914698][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1616.914713][   T31]  ? __pfx_kthread+0x10/0x10
[ 1616.914741][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1616.914767][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1616.914781][   T31]  ? __pfx_kthread+0x10/0x10
[ 1616.914804][   T31]  ret_from_fork+0x3fc/0x770
[ 1616.914824][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1616.914845][   T31]  ? __switch_to_asm+0x39/0x70
[ 1616.914867][   T31]  ? __switch_to_asm+0x33/0x70
[ 1616.914892][   T31]  ? __pfx_kthread+0x10/0x10
[ 1616.914915][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1616.914949][   T31]  </TASK>
[ 1616.914979][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1617.079452][    C0] NMI backtrace for cpu 0
[ 1617.079469][    C0] CPU: 0 UID: 0 PID: 18513 Comm: kworker/u8:3 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1617.079491][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1617.079502][    C0] Workqueue: bat_events batadv_nc_worker
[ 1617.079535][    C0] RIP: 0010:__lock_acquire+0x6ba/0xd20
[ 1617.079554][    C0] Code: a9 00 00 18 00 0f 84 b3 00 00 00 4c 89 f6 ba 08 00 00 00 e8 88 25 00 00 45 31 ff 85 c0 0f 84 f5 05 00 00 83 3d c6 46 0d 18 00 <75> 13 48 63 44 24 20 48 0f a3 05 57 b7 09 12 0f 83 15 05 00 00 31
[ 1617.079569][    C0] RSP: 0018:ffffc9000ee8f8f0 EFLAGS: 00000046
[ 1617.079583][    C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffffff9348f8a8
[ 1617.079595][    C0] RDX: 0000000000000008 RSI: ffff888037600b40 RDI: ffff888037600000
[ 1617.079608][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b3d0e12
[ 1617.079619][    C0] R10: dffffc0000000000 R11: ffffffff8b3d0d40 R12: 00000000ffffff05
[ 1617.079632][    C0] R13: 0000000000000001 R14: ffff888037600b40 R15: 0000000000000000
[ 1617.079643][    C0] FS:  0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[ 1617.079657][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1617.079669][    C0] CR2: 00000000f73e4230 CR3: 000000007953e000 CR4: 00000000003526f0
[ 1617.079684][    C0] Call Trace:
[ 1617.079709][    C0]  <TASK>
[ 1617.079720][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1617.079743][    C0]  lock_acquire+0x120/0x360
[ 1617.079760][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1617.079788][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1617.079811][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1617.079835][    C0]  batadv_nc_worker+0xef/0x610
[ 1617.079858][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1617.079882][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1617.079904][    C0]  process_scheduled_works+0xade/0x17b0
[ 1617.079936][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1617.079962][    C0]  worker_thread+0x8a0/0xda0
[ 1617.079984][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1617.080013][    C0]  ? __kthread_parkme+0x7b/0x200
[ 1617.080038][    C0]  kthread+0x70e/0x8a0
[ 1617.080064][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1617.080084][    C0]  ? __pfx_kthread+0x10/0x10
[ 1617.080108][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1617.080133][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1617.080148][    C0]  ? __pfx_kthread+0x10/0x10
[ 1617.080172][    C0]  ret_from_fork+0x3fc/0x770
[ 1617.080191][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1617.080211][    C0]  ? __switch_to_asm+0x39/0x70
[ 1617.080233][    C0]  ? __switch_to_asm+0x33/0x70
[ 1617.080255][    C0]  ? __pfx_kthread+0x10/0x10
[ 1617.080279][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1617.080314][    C0]  </TASK>
[ 1617.157473][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1617.157501][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[ 1617.157530][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1617.157546][   T31] Call Trace:
[ 1617.157557][   T31]  <TASK>
[ 1617.157570][   T31]  dump_stack_lvl+0x99/0x250
[ 1617.157606][   T31]  ? __asan_memcpy+0x40/0x70
[ 1617.157633][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1617.157663][   T31]  ? __pfx__printk+0x10/0x10
[ 1617.157712][   T31]  panic+0x2db/0x790
[ 1617.157748][   T31]  ? __pfx_panic+0x10/0x10
[ 1617.157775][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[ 1617.157811][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1617.157837][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1617.157879][   T31]  watchdog+0x102d/0x1030
[ 1617.157908][   T31]  ? watchdog+0x1de/0x1030
[ 1617.157941][   T31]  kthread+0x70e/0x8a0
[ 1617.157981][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1617.158004][   T31]  ? __pfx_kthread+0x10/0x10
[ 1617.158037][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1617.158081][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1617.158104][   T31]  ? __pfx_kthread+0x10/0x10
[ 1617.158138][   T31]  ret_from_fork+0x3fc/0x770
[ 1617.158172][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1617.158206][   T31]  ? __switch_to_asm+0x39/0x70
[ 1617.158236][   T31]  ? __switch_to_asm+0x33/0x70
[ 1617.158279][   T31]  ? __pfx_kthread+0x10/0x10
[ 1617.158323][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1617.158368][   T31]  </TASK>
[ 1617.496498][   T31] Kernel Offset: disabled
[ 1617.500825][   T31] Rebooting in 86400 seconds..