last executing test programs:

9m19.197828225s ago: executing program 0 (id=6135):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0430f5c7c90034d9493ad3c6a2247a769bcc8203a462b70ef8f6102c57f4c6078eb7680df7ef6363d4"], 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7000000}, 0x1c)

9m18.745250401s ago: executing program 0 (id=6137):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5801, 0x0, 0x0}], 0x1})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000ec0)={0x14, &(0x7f0000000cc0)={0x40, 0x1, 0x2, {0x2, 0x10}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private, @local}, "0b0a000000c4f120"}}}}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}]}, &(0x7f00000002c0)=0xc)

9m15.03254212s ago: executing program 0 (id=6146):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0xeeef6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040))
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (async)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x4080, 0xf0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000280)={0x0, 0x12, 0xc0000})
futex_waitv(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1)
socket$isdn(0x22, 0x3, 0x1)

9m14.302085433s ago: executing program 0 (id=6149):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c)
recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/129, 0x81}], 0x2}, 0x9}], 0x1, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000280)="1006000000000000ee8de7932b326f8a310f65ae439862807a1589836c734d2341f74276871bf8465fc0583fdc0b8a34bb550ef977b001d46df69747826840d196606f75ef1cbe3bed88eb2291b63c95dbb54b10e45adfc5c5d7758e1b", 0x5d}, {&(0x7f0000000480)="df3b46a133000000000000000000000000f1c81c6c11d7481a7db10c98c13aab46d748ad9220643b21529b7794db2bada57127cc43f578a88146a322ddbf202e806e3021395404b70768e90e1431acb438e35f73a89ad465b85f7668696ff41596c91b7b400ef7f0796a401696dbec", 0x6f}, {&(0x7f00000005c0)="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", 0xe18}], 0x5}, 0x40000)

9m13.283309191s ago: executing program 0 (id=6152):
gettid()
r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b00", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2400c0c1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040601010000000d72d69f86000000001000000000"], 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
close(0x3)
accept4(r5, 0x0, 0x0, 0x0)

9m10.706223942s ago: executing program 0 (id=6159):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x44, 0x39, 0xdc, 0x40, 0x1660, 0x1921, 0x1f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xf6, 0x62, 0x70}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000140)={0x0, 0xf, 0xa, "2c8ddce754b6caafdb73"}, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r1, 0x0, 0x0) (async)
openat$vimc0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x3c, 0x44, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0)

8m55.353672942s ago: executing program 32 (id=6159):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x44, 0x39, 0xdc, 0x40, 0x1660, 0x1921, 0x1f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xf6, 0x62, 0x70}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000140)={0x0, 0xf, 0xa, "2c8ddce754b6caafdb73"}, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r1, 0x0, 0x0) (async)
openat$vimc0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x3c, 0x44, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0)

6m56.225100415s ago: executing program 3 (id=6721):
r0 = getpgrp(0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}]}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}}], 0x2, 0x4)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x2, 0x1, 0x27, 0x0, 0x7}, 0x20)
r2 = syz_pidfd_open(r0, 0x0)
r3 = epoll_create(0x1)
get_thread_area(&(0x7f0000000600)={0x3, 0x100000, 0x2000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180))
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
openat2(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x0, 0x4}, 0x18)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
read$FUSE(r5, &(0x7f0000002280)={0x2020}, 0x2020)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x1, 0x0, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x3a)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000003c0)="c352e2b7474ff4df339aa1a9ec61aa175d6ac0d9b0f0fdfdca7aa11952cdfcad7d1af678e0e96756b4a35d3ffbefc0c60b0944e26d5b830e73012b7a987ed48a76014566b23dc9bd79bd2a51bd1d0b9b874e05be1a038621aa94d8561553978d6d3e814fd536cdd79c76956a711322bc0c71fcbe4005f2cc1f1651fc2ee13b4b36f4cb61079898f2ad33e1c1ffd9b871d765e0840636397229a9e3540124410ab3efbe07e8aad21b4038aaea50398b78e36c7857720e96aa72dec6973060688e5bc504d83dfbaaef0273dba7b59e3eeac45ff3e8618dcbbbff81bcd4097448f5a04f3fb990af6e87148730922d1f", 0xee}, {&(0x7f00000004c0)="b15c346b5109be8dbfb6e0141c33bac6b9715106c6983216793ba08e55035c0f1a7533919f6e4b1384f14bfc1011223a1876362febd861fb3b6e5dbc74229e985fd3eb1416a35348f6f13fa6e8c4d0978de2d257e666be2f96bc201a0c42202c1002ab34ddd11ace15f055aca0ade9a7f1375a16c88163c8c17f101753d925a50c8f96975a4edbbd694a31e90c5d40143f7e69a10b8b75822aaa9f", 0x9b}, {&(0x7f0000001640)="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", 0xfd}, {&(0x7f0000001740)="68495822ecc5241aff77aea4421d0e1d7311727ce652af80762dc4f92905362a0efc575a59347dab79d0e63132a8d068c12638076316fd289834a7157a2454f1072acdb4497449d0353239ba02bee117b05c0e2e33cc1ae83bde56ff113b8c7f350ffcdaf2db7c4818adf16082c0822efe2f71490ef22a8b2e1f70de4ac82f263a94bd7de3d0b81b86c82bd5b02d84edf74cb10c2ece9d8751bd6f9a5b57de11b1f7a4ce727abf93dd5eb9282e6e02d0f6fbb6f7ec7a6f89534f7539a3a35fb529116f88c31b6d8474627a6d0040ca20177a", 0xd2}], 0x5, 0x8, 0x1)

6m56.106968706s ago: executing program 3 (id=6723):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x2, 0x7}}}], 0x18}, 0x40048d0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_create1(0x0)

6m55.907951802s ago: executing program 3 (id=6725):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000014000e"], 0x104}}, 0x0)

6m54.021204543s ago: executing program 3 (id=6732):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x5, 0xe, 0x1ff, 0x276, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0x4, 0xfbf, 0x1, 0x1, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000)
r4 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000540)=@generic, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/249}, {&(0x7f00000006c0)=""/90}, {&(0x7f0000000740)=""/29}, {&(0x7f0000000780)=""/208}, {&(0x7f0000000880)=""/194}]}, 0x9}, {{&(0x7f00000009c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/255}, {&(0x7f0000000b40)=""/235}], 0x0, &(0x7f0000000c80)=""/100}, 0x9}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/89}, {&(0x7f0000000d80)=""/152}, {&(0x7f0000000e40)=""/110}, {&(0x7f0000000ec0)=""/251}]}, 0xe}], 0x10111, 0x0, 0x0)
sendto$packet(r4, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x400d0, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x93}, 'vlan1\x00'}}, 0x1e)

6m53.733378246s ago: executing program 3 (id=6737):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setrlimit(0x40000000000008, &(0x7f0000000000)) (async, rerun: 32)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) (rerun: 32)
sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484)

6m53.671483655s ago: executing program 3 (id=6739):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xee2, 0x0, 0x8, 0x76ed}, 0x0)
r2 = syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000002c0))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = dup(r2)
read$FUSE(r6, &(0x7f0000001c00)={0x2020}, 0x2020)
r7 = fcntl$dupfd(r4, 0x0, r5)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r9, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)

6m38.445850691s ago: executing program 33 (id=6739):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xee2, 0x0, 0x8, 0x76ed}, 0x0)
r2 = syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000002c0))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = dup(r2)
read$FUSE(r6, &(0x7f0000001c00)={0x2020}, 0x2020)
r7 = fcntl$dupfd(r4, 0x0, r5)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r9, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)

8.184889567s ago: executing program 1 (id=8613):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800)
r2 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x40094)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000480)=""/10, 0xa}, 0x40000010)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0xfffffffe, 0x6, "400080f100df000000a7d9de16c708627700"})
r4 = syz_open_pts(r3, 0x42)
dup3(r4, r3, 0x0)
readv(r3, 0x0, 0x0)
r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000080)={0x1, 0xfeac, 0x5, 0x1, 0x8})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))

8.084350467s ago: executing program 6 (id=8614):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x83)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0)
r4 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r4})
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000001580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002dbd7000fddbdf250600000008000600030000000800060010000000500001800c0007000200000010000000140003000000000000000008000b0073697000080008000900000006010100020000000800080059df0000090006006c626c630000000008000600ff010000ef2f588044d649bbcf5b46fd31d37d9d063d18982e0c08615838a6cc7f0bbeef2a22e9c9b968618397eda98cfc7f87"], 0x7c}, 0x1, 0x0, 0x0, 0x4089}, 0x40)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e)
syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x0}, 0x58)
r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xa, 0x4, 0xf, 0x8001}})

7.287699044s ago: executing program 4 (id=8617):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080))
sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x339, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

6.319279555s ago: executing program 1 (id=8619):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x7, 0x6, 0xfa13, 0x6}, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000800)={'filter\x00', 0x4}, 0x68)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c)
rseq(0x0, 0x0, 0x0, 0x0)
r8 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
read$FUSE(r9, &(0x7f0000001900)={0x2020}, 0x2020)

6.161326984s ago: executing program 5 (id=8620):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0xea000000, {0xeb, 0x0, 0x5, 0x7fffffff}})
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = gettid()
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$ARCH_SET_GS(0x1e, r1, 0x0, 0x1001)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x74)
timer_settime(0x0, 0x1, &(0x7f00000026c0), &(0x7f0000002700))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, 0x0, 0x0)

5.81703073s ago: executing program 6 (id=8622):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x10}, {0x24, 0x0, 0x40, 0x101f}]})

5.708983919s ago: executing program 4 (id=8623):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xffffffff, 0x4, "8100e1c8e80b598c36ff000800"})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x400})
r2 = syz_open_pts(r0, 0x141601)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCFLSH(r0, 0x540b, 0x2)

5.70640575s ago: executing program 6 (id=8624):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
recvfrom$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="86", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="65c8e65e5274ec266607afa93cbaa16f3d564216b58cce81696a0798d391eeca5af5b4bb2867c6ea16c94ca895ff5b40d312f84d8a96430a3a0f8f1e8852dc85b85c2d27e152d958237afaa03c84e6de90385338c1b847d20cad3d324fef1897c285c1842ca80d7d0f9c6aa75ff11e1ea11615a4b9293b39f0c3f517", @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00800056da81f88953f9852b343ab395a605545bf9fa1790d01766b47785fd74c9cc117470b83d7cb56fff795406105c57168e70dc111c4995f2167eb421c76338f27434ed5f8580afd532a8994c367e6276a1d0a2c4b8918ac8938f16cbfea63fc3f7b529365d4475de2f025f390c7bcd39f42dd7987f53261b036a167bff4450b650255f8d585117ff7802b32145c0d3dcd22b863690f41a677fba53538174c82b2c4ddec96673890b3320f2c7eabb6b08ea76ee82e27858786d8a3901ff47", @ANYRES16=r5, @ANYBLOB="000828bd7000fedbdf25120000000c00990009000000640000000600ed00b40100001400bd000200050081007f00001004006f91020006001201040000000500740004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

5.156425264s ago: executing program 5 (id=8627):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x48, 0x1, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x40800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680))
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010)
r4 = syz_clone3(&(0x7f00000005c0)={0x200000, &(0x7f0000000100), 0x0, &(0x7f0000000240), {0x8}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f00000004c0)=""/245, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
sched_getattr(r4, &(0x7f0000000640)={0x38}, 0x38, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r5, 0x8b1b, &(0x7f0000000040))
r6 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)

4.700595052s ago: executing program 6 (id=8628):
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0x23e65978, 0x1, 0x4, 0x4, 0x1, {}, {0x3, 0x10, 0x20, 0x10, 0x2e, 0x4, "a4e2221c"}, 0xa})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x8001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
unshare(0x8040480)
cachestat(0xffffffffffffffff, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pread64(r0, &(0x7f0000000780)=""/146, 0x92, 0xb0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006f8db4088205e82806f50102030109021b0001000000000904000001fff14c000905", @ANYRES16], 0x0)

4.66648386s ago: executing program 4 (id=8629):
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0x23e65978, 0x1, 0x4, 0x4, 0x1, {}, {0x3, 0x10, 0x20, 0x10, 0x2e, 0x4, "a4e2221c"}, 0xa})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x8001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
unshare(0x8040480)
cachestat(0xffffffffffffffff, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pread64(r0, &(0x7f0000000780)=""/146, 0x92, 0xb0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006f8db4088205e82806f50102030109021b0001000000000904000001fff14c000905", @ANYRES16], 0x0)

4.621330208s ago: executing program 1 (id=8630):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400})
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2e)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x1000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = gettid()
kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=r3}, &(0x7f0000000240)=<r5=>0x0)
timer_settime(r5, 0xedfd88240c10a9b5, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0)
write$vga_arbiter(r6, &(0x7f0000000300)=@other={'lock', ' ', 'mem'}, 0x9)
r7 = syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_mr_cache\x00')
ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000080)={0x1, 0x36, "7fb457209910a1972e5216023630471a51d3d05997449d58a09e9428072b4d32d13d01190d424388e1f4374ea6c1bf157c7b1c858617"})
fchdir(r7)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r8, r7, 0x0, 0xa)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8)
sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x22}}}}, ["", ""]}, 0x20}}, 0x40)

4.272173468s ago: executing program 1 (id=8632):
mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2d, 0x3502}]}, 0x90}, 0x1, 0x7}, 0x0)
io_setup(0x72, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0x10000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x603b}, @NHA_RES_GROUP_IDLE_TIMER={0x5, 0x2, 0xd}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x40440c0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000340)={0xdddd1000, 0x11f000})
prctl$PR_GET_SECUREBITS(0x1b)
ioctl$CEC_G_MODE(r7, 0x80046108, &(0x7f0000000080))
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\\e=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
utime(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x38a6, 0x80000001})
fsopen(&(0x7f0000000140)='erofs\x00', 0x0)
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r2, &(0x7f0000000140)="e5ed6dd8c28ce374a9991b119a575f82eeb4fe0366c48f49b5830beb2fe516e43c4065ad72d51fd2a19955be74d9c74a0764681b66812090e2f5a9cc0a678964a8bd877b7b301df8a0071a3db4745dc889d6c158b9ebc3cdc8e45af26ab43790af545d10b3a7ae7c02d062d574a028c98f5a44d44ca85bb095349418f5ffcc55ebb900eea47dd463b8e1a83eb061179d54b36399968b2ede680f1f234dc71d5f107d12c318b4c51f0820d49be9702a5bace4e3d6c9df81f6a5c86fd7c752bfe5c5641e6cb9567a94cf4f25be7d9f67bb6d746657a5c0631dade3805207c27c9a2b188215cff9fa099f3bb570caae3fdf79a0c3f4", 0xb499, 0x8}])

4.028862435s ago: executing program 1 (id=8633):
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48ed, 0x0, 0x2, 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120110034590b808ef171e72d30801020301090219000109035007090470070101"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) (rerun: 64)

2.844945112s ago: executing program 5 (id=8635):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'})

2.695119716s ago: executing program 5 (id=8636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f0000000380)=""/85, 0x55}, {&(0x7f00000007c0)=""/187, 0xbb}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000580)=""/64, 0x40}], 0xa}, 0x141)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000dc0)={0xa1c, 0x8004, 0x8000, 0xfffffffe, <r5=>0x0}, &(0x7f0000000e00)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000e40)=@assoc_id=r5, &(0x7f0000000e80)=0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1cc9583}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18eb5d09}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}]}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x16c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x2f, 0x6, "770fab3adff6e3a5a0f9bd991bb71d9771cbb8a08eb4c80b20ac447ff859cf26d86ac5955103b6a7be0d23"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xee, 0x6, "d9b31154299b1ae5ec7a5c4441fc78bf5d52c6c73526d779bc4fd71d4812de31b4c4ab7fce91bd7e1320e738f6a9dafe20c10a6f322736b1afc7b3d8e85100bfc248dca54ea80cddbee7b4417307d82a8eaaaf9310f05efc822c4f2ab97f7f0d05a382703c34b4943e3ae8c9e9e6f85ee66c8879e83bdb67114edc8ba58e36fc6cd40c92069602084c7c44b94cb0fb28413ebabad471099cac29a21114fcea2d4b80831022814c308e837da0947bf5e289d9e8be4127f454ad6f65471d017640cc2a1a953f473502e85c590ff1f6dcd9ae9a97cdbfe29e2c631c9a9d30b7e27ad158bff3ec9b7e43b61c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xe8, 0x7, 0x1, 0x0, "ca692b7494ceadb50d1ab754fe1251a02dee308d4a7c0d55c5b42c465b915059606902b4ffdd81862bd8421b276fa0fcdae2e81a11fc8ce632784f90dba1b73ad172700af8d1a8cc0f306d7aec663ef69cabd6fbd949f9c0c0491cfb6d92a17fb1daca9d50b04959d3d906e322300b1e359ad5928cac017f9ee497998afa5cc807343a727726893c12983e49ebec847009bbb013c1eea292610fa6de892ced4ca2f99a11633c60d3ea85ae53e5d9b8fc09cb668fe0870cf4cc641ec36bd3c402479b57628ecbc1ed9d27729ea858f888097017513444ab667c39a151aba86b8b70f42b98"}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x430}, 0x1, 0x0, 0x0, 0x20}, 0x880)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000340)="b8000005000000003b974f58bd2b", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2.475501878s ago: executing program 5 (id=8637):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0)
read(r2, &(0x7f0000000040)=""/252, 0xfc)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x0, @mcast1, 0x5}, 0x18)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)
syz_emit_ethernet(0x1e, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@can={0xc, {{0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "272d92776b992bba"}}}}, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
r6 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x4d092, r6, 0x4000000)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xfffff1ad, @empty, 0xb}}, 0x24)

2.35273363s ago: executing program 2 (id=8638):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x83)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
r4 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r4})
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000001580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002dbd7000fddbdf250600000008000600030000000800060010000000500001800c0007000200000010000000140003000000000000000008000b0073697000080008000900000006010100020000000800080059df0000090006006c626c630000000008000600ff010000ef2f588044d649bbcf5b46fd31d37d9d063d18982e0c08615838a6cc7f0bbeef2a22e9c9b968618397eda98cfc7f87"], 0x7c}, 0x1, 0x0, 0x0, 0x4089}, 0x40)
sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e)
syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x0}, 0x58)
r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xa, 0x4, 0xf, 0x8001}})

2.032839749s ago: executing program 1 (id=8639):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000840)=@ethtool_gstrings={0x1b, 0x6, 0x500}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00')
write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c46800b430f040000000000000002003e00020000005d0200000000000040000000000000009b0300000000000000000000090038000100a94f07000200000000600100000002000000000000002200000000662689bc00000000000000010400000000000008000000100000000300000000000000"], 0x78)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="c9b0be93b2045eb8b8519fc8703fdf7deb21452e99233af1a89a923507cf7689054e6a228fc5648e56cb51bcd67ee879336f32c928fb58d1043bcf1c5e29d3f634cb9674af97c8d02ebb1f94de047dda46e9a2708c1f64eb5ff31d695cf8fbcb0d9a28fa21a2fa3ff05157a5120e661558f5d771f0a5ee6483e45ce80b47b902e47a8be3dae0baeadde8e253591ef0c960ab51fa880d307418296e491319f04dd84651eee7766c0ebf10b7181dfa3205a309574a97a22c9ec909d01ba1276a90015c62968548f702e31204f0a99d96d1610f", 0xd2)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600894f0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r5 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x26)
fcntl$notify(r6, 0x402, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'virt_wifi0\x00', &(0x7f00000004c0)=@ethtool_cmd={0x1f, 0x400, 0x9, 0x3, 0x40, 0xb, 0x2, 0x5, 0x0, 0x43, 0x3, 0x1, 0x6, 0x9, 0x89, 0xfff, [0x9, 0x8001]}})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000340), 0x4)
close_range(r7, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x800, 0x2, 0x7fffd}, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = syz_open_dev$evdev(&(0x7f00000002c0), 0x9, 0x2c2101)
ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000300)=[0x6000000, 0x1])
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sock_ops=0x3}, 0x94)
syz_clone3(&(0x7f0000000500)={0x28080024, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000000100))

1.59304379s ago: executing program 6 (id=8640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500400086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x94)

1.452737291s ago: executing program 4 (id=8641):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
read$alg(r2, &(0x7f0000000000)=""/35, 0x23)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x5680, &(0x7f0000000640)={0x0, 0x26f37, 0x8, 0x1, 0x3a1}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r4, <r8=>0xffffffffffffffff})
ppoll(&(0x7f0000000100)=[{r8, 0x2}], 0x1, 0x0, 0x0, 0x0)
dup3(r4, r3, 0x0)
r9 = dup(r0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0)
socket(0x23, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9)

1.405130364s ago: executing program 5 (id=8642):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = epoll_create(0x101)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4})
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000006200)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x802, {0x9, 0x1, 0xdc, 0xfffffffffffffffe, 0x9, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x5, 0x3, 0x79, 0xfffffffe, 0x7, 0x200001, 0x8000, 0x7, r6, r7, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x0, 0x3, 0xa1, 0x4000000000008, 0xfffffffd, 0x5, {0x2, 0xfffffffffffffffc, 0x8, 0x100000000000, 0x8, 0x4, 0xa, 0x6, 0x2008, 0x2000, 0xe44, r6, r7, 0x20001, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20)
syz_emit_ethernet(0x7a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000442f00fe8000000000000000000000000000bbfe8800000000000000000000000000012421880b0000fffd00000021000086dd080088be0000000010db07000000000000000000080022eb000000002000000002000000000000000000000008006558000000000ccbabea4aeb2fafc99b0799f556cbab57341832e7a6b0a1d1b29f5c4743c1174e56a5ba18325550cf325e96726a46f00068e43103c91f3555badb086979da1cd9ebde136cfe06cb13289b"], 0x0)
gettid()
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x8, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x8)
r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES64], 0x0)
ioctl$VIDIOC_STREAMOFF(r9, 0x40045613, &(0x7f0000000000)=0x8)
syz_emit_ethernet(0x32, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800453f0024006600aa"], 0x0)

844.774925ms ago: executing program 2 (id=8643):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = timerfd_create(0x7, 0x80000)
poll(&(0x7f0000002680)=[{r0, 0x8100, 0xfefd}], 0x1, 0x4)

744.07104ms ago: executing program 2 (id=8644):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0xea000000, {0xeb, 0x0, 0x5, 0x7fffffff}})
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x5})
r1 = gettid()
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$ARCH_SET_GS(0x1e, r1, 0x0, 0x1001)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x62040)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000f5a100d82e0000000000000000000000000000000008fc395252626887733d7753dce90bfd1ff064e5755dc474cd68714863b45225a5fd4e737e6eabefa3341b796e61291931a6e154c6c016d299860b811f301c0075b59b7dc5ecb311712307c01850e906574035414e9c719bdb63e975"])
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0004ffffff7fffdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="04006c0004008700040087000600cd0000000000040087000800a1000900000008002201cc01000000000000080027000100"/64], 0x5b}, 0x1, 0x0, 0x0, 0x1}, 0x800)

684.489794ms ago: executing program 6 (id=8645):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x98)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x80, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x2fc, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffffff, 0xffffffff, 'xfrm0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x49}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xcb, 0x3, 'kmp\x00', "00000100cbd047da9ca965f96ad58a1f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bf0bc37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x79}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x9, 0x2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, {0x0, [0x6, 0x0, 0x0, 0x0, 0x1], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x358)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}])
syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r5 = openat$pfkey(0xffffff9c, &(0x7f0000000280), 0x20900, 0x0)
r6 = syz_io_uring_setup(0x42e0, &(0x7f0000000200)={0x0, 0xe2d5, 0x10100, 0x0, 0x3, 0x0, r5}, &(0x7f0000000580)=<r7=>0x0, &(0x7f00000003c0)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x30, 0x6000, @fd_index=0x1, 0x7, 0x0, 0x0, 0xd, 0x0, {0x0, r9}})
io_uring_enter(r6, 0x48e9, 0x5000000, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = syz_io_uring_setup(0x1713, &(0x7f00000029c0)={0x0, 0xcb66, 0x1, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000080))
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
io_uring_register$IORING_REGISTER_PBUF_RING(r11, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1)
setsockopt$packet_tx_ring(r10, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c)
recvmmsg(r10, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r12 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)

406.146329ms ago: executing program 2 (id=8646):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)

321.090122ms ago: executing program 2 (id=8647):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x5, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) (async)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async)
unshare(0x26020480)
clock_adjtime(0x0, 0x0)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000e08", 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18}}}}}}}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000340)="e892d9234ef5dcd44689103049d8223f0449b55708aa883c8d7bf7cc1282b4df46b3f74bd6c6cd15c4dd1c024ca20a2befe58ded546ebdb2e148d7517be2872e6a672af521e8d19e0f310e1fe6b4d76e72d854bf944dd26ba12ad00806b9e4d99e9c58a413881723e878bd4cb6f173de0373f38f11320745c7459f524ca9dddc5709671b60dc81305e7c72d1c84984e2d796e2ca26e3bd", 0x97}, {&(0x7f0000000400)="cf2cde6f13f15553930a8d689136beaebd94e547db87949933c4ffcb6330b85dce01f8d350352776fde55d30659c011c70767116e384558573c39333d10a79659cf1c25ea935d0ad420c5fe991946cfd3f44a6b87222132540cccf1d296f4c5f4ecbea014c94bc9c59aa32ab57b5c8a4a300c7af8129b623cba76546a2509d0086fafd816f3b1e946847508b95f2a4e00b753445231cdf3f43b42191762ad7494a2c1a6494047f76b0302a31f7fedca65815dc58b6", 0xb5}, {&(0x7f0000000180)="85960d9d86a88aebbde3c4b24ad2a8711975ec50fba278c1f0d8bc0b297aaffb53aa0cd0ca2b6dd18a9349dcfd175caecfef9dbc5731c30c7b14ad2f", 0x3c}, {&(0x7f00000001c0)="3b7d06eed1198377e27eb46c7af7d1b4c7d287f9bf060dd30b924d16ed673f4c24b925c34e21d7a70db0c4695f9ff0a6f228", 0x32}, {&(0x7f0000000540)="5f774f3be8a68c56f97d34baf932bb6fc6445a7f39bf4a3e0b44b81d0e80ad8110acfb25efb8af3c0c6a322ac892072ea3bb5a674c7bc02ae5c6b19a0d1b4c16ab401fa2c0be9553a6038e9eed9e0a8133f93ccf713cf81d9abb31a8464ac6a9f0c5db2e3b3c0fcfcf05c19231842251a021ff200a8a50f1f5d7a042694670dbf65335f977bd64ed4f01d1735694450ee2b9699ebcc0205ff09f6de85fd48bea72cd329a1b07bbe6f24f1c5dc8211f758c891d708e035a71ea6f2ea6472971d9e68f098ad4d6365308ecfdea9b245e5b6e39799b5ef6f6355e2b205c309feec07029b58501646844e869a909", 0xec}, {&(0x7f0000000640)="cb2aa838a3139907fbc606dba5c8ccaddb710a50645966b5dd3da2649a813a7cac3126bcef8e35506a3251869bd65a0e3d9f24c0cc500109cf20e3db9ae735646a3f2961cb51ce28c32d62bdc53455fb9965626a17fb31c39bb27a5fe55e0de6b047649eeda3b992e588cd798c844acf6f1d3515ac46e353dba1f040a46cda7e97b36a2b781ffe9ab905a0b2049f916db4e50d1e3e65b143c21409fce10f38639a4b42b284c561bfb0810c9d2b1d893f9dc4aa5d0c9e8470a288a6c23990c41a2e3a0fceb99519882b2110e484a519adb567316a28", 0xd5}, {&(0x7f0000000840)="7e8ecaae715a69bbe804bdd953b6ee3acb588763ae1bc655565a4bdfd1b03b4fad106d68a6f23e3d7568fa147369c617b31790dac27e73b8d16da36a287bd0a4307575022e50d59d", 0x48}, {&(0x7f00000008c0)="dbdaf8a343b2f49a51338a1ff6d3ddf53337033c641123648c04a1c42b28c117073f81bd7c00a0d5aaae22e0f46a781235f41867bc90027a8676ebf8a31d710c6f1adb6590628c586d882f04f9452897a08794300f8b62bd8773be40b995b378b44e6c90215f205a0d4f25195b8e44af8f1a31cf3aa62337ca7a97a7bf106f40746ab925db2989c6a409fc5c4f0edb6ae573425ab565b40fab8bc9270a7396007acf4996a10a5eb94f0984566e0bf4163e09f5a5e95831e3a31508c76b4ed6665274b337b43e552f0c18b7cb44b23b39b750111adc8acc29faba4260d4380f", 0xdf}], 0x8) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r3, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a6000003f000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007b9f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2301ff00000000000000000014d6d930dfe1d9c322fe040000007025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xc0)

320.911858ms ago: executing program 4 (id=8648):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @local}, 0x2c, {0x2, 0x4e24, @empty}, 'lo\x00'})

121.320729ms ago: executing program 4 (id=8649):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x83)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
r4 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r4})
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000001580)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4089}, 0x40)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc))
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e)
syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x0}, 0x58)
r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xa, 0x4, 0xf, 0x8001}})

0s ago: executing program 2 (id=8650):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x130, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x39, 0x118, 0x0, 0x1, [@typed={0xc, 0x45, 0x0, 0x0, @str=':[)\xf5!]\xbf\x00'}, @generic="e868069c9ab125eac194db0b6bb732fae1af8cddffb89c30168faebd40cfdda30440ecd3d73e174817"]}, @generic="920098adfe24ad89a5d919ccc197c48c1f7168d82ca6ee1c32ee125eb967e5da08c94f1662fdce05ed89f78c96401e0de0bd596f1bf5140ea5bc41852e67d87074ab8e1419a1849b934d7283e8c502d7c32f0e133c8fd89f287f32f0e37357db54db0f368638643eaf83", @generic="fefadfc325c76f95ada1df70d8f818146cab78a851b06b53221c843d6e7872d5a574d590b102b24df661ed3ffaa259e5b9ec0b340463f328009be8b436902677e8ecb61b0b3fe984a1d1ce507a39c7cbd8d0b04759e1004741b0"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r4 = getpgrp(0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x1010, 0x453, 0x200, 0x70bd2b, 0x25dfdbfc, "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", ["", "", "", "", "", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x20008800}, 0x80080)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4})
sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)

kernel console output (not intermixed with test programs):

5] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40
[ 2005.545216][T32635] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2005.545230][T32635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2005.545244][T32635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2005.545257][T32635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2005.545289][T32635]  </TASK>
[ 2005.984739][T32641] Invalid logical block size (38911)
[ 2006.654858][   T30] audit: type=1326 audit(1768473509.762:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2006.657741][T32653] FAULT_INJECTION: forcing a failure.
[ 2006.657741][T32653] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2006.701289][T32653] CPU: 1 UID: 0 PID: 32653 Comm: syz.5.8176 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2006.701323][T32653] Tainted: [L]=SOFTLOCKUP
[ 2006.701331][T32653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2006.701346][T32653] Call Trace:
[ 2006.701354][T32653]  <TASK>
[ 2006.701365][T32653]  dump_stack_lvl+0xe8/0x150
[ 2006.701398][T32653]  should_fail_ex+0x414/0x560
[ 2006.701438][T32653]  _copy_from_user+0x2d/0xb0
[ 2006.701468][T32653]  do_sys_poll+0x242/0x1070
[ 2006.701503][T32653]  ? __lock_acquire+0x6b6/0x2cf0
[ 2006.701531][T32653]  ? __pfx_do_sys_poll+0x10/0x10
[ 2006.701565][T32653]  ? aa_file_perm+0x139/0x1530
[ 2006.701671][T32653]  ? ktime_get_ts64+0xa9/0x3d0
[ 2006.701713][T32653]  ? __pfx_timespec64_add_safe+0x10/0x10
[ 2006.701739][T32653]  __se_sys_poll+0x128/0x320
[ 2006.701758][T32653]  ? __pfx___se_sys_poll+0x10/0x10
[ 2006.701783][T32653]  __do_fast_syscall_32+0x1dc/0x570
[ 2006.701802][T32653]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2006.701817][T32653]  ? do_fast_syscall_32+0x34/0x80
[ 2006.701834][T32653]  ? irqentry_exit+0x10f/0x670
[ 2006.701853][T32653]  do_fast_syscall_32+0x34/0x80
[ 2006.701871][T32653]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2006.701890][T32653] RIP: 0023:0xf706d539
[ 2006.701903][T32653] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2006.701917][T32653] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a8
[ 2006.701933][T32653] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000000000b5
[ 2006.701944][T32653] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000
[ 2006.701953][T32653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2006.701962][T32653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2006.701972][T32653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2006.701993][T32653]  </TASK>
[ 2006.923329][   T30] audit: type=1326 audit(1768473509.792:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2006.929661][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2006.946746][   T30] audit: type=1326 audit(1768473509.812:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2006.975200][   T30] audit: type=1326 audit(1768473509.812:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2006.997822][   T30] audit: type=1326 audit(1768473509.812:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2007.020247][   T30] audit: type=1326 audit(1768473509.812:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2007.043630][   T30] audit: type=1326 audit(1768473509.812:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2007.066287][   T30] audit: type=1326 audit(1768473509.812:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2007.088514][   T30] audit: type=1326 audit(1768473509.812:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2007.116835][   T30] audit: type=1326 audit(1768473509.812:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.6.8175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f27539 code=0x7ffc0000
[ 2007.729158][T24661] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 2007.920655][T24661] usb 6-1: Using ep0 maxpacket: 8
[ 2007.943511][T24661] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2007.965434][T24661] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2008.000980][T24661] usb 6-1: config 0 has no interface number 0
[ 2008.026564][T24661] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2008.075573][T24661] usb 6-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de
[ 2008.114479][T24661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2008.166315][T24661] usb 6-1: config 0 descriptor??
[ 2008.205722][T24661] usb 6-1: bad CDC descriptors
[ 2008.236194][T24661] cdc_acm 6-1:0.1: Zero length descriptor references
[ 2008.263670][T24661] cdc_acm 6-1:0.1: probe with driver cdc_acm failed with error -22
[ 2008.970459][T32680] netlink: 'syz.2.8183': attribute type 4 has an invalid length.
[ 2009.289355][T19947] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 2009.505453][T19947] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 2009.528133][T19947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2009.537212][T19947] usb 2-1: Product: syz
[ 2009.543080][T19947] usb 2-1: Manufacturer: syz
[ 2009.547987][T19947] usb 2-1: SerialNumber: syz
[ 2009.571756][T19947] usb 2-1: config 0 descriptor??
[ 2009.659166][T19966] usb 5-1: new low-speed USB device number 99 using dummy_hcd
[ 2009.834214][T19966] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2009.862611][T19966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 2009.896397][T19966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 2009.941583][T19966] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2010.001287][T19966] usb 5-1: string descriptor 0 read error: -22
[ 2010.017184][T19966] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2010.058013][T19966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2010.081078][T32686] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 2010.088691][T32686] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 2010.128609][T19966] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 2010.130027][T32690] binder: BINDER_SET_CONTEXT_MGR already set
[ 2010.163800][T32690] binder: 32689:32690 ioctl 4018620d 80000040 returned -16
[ 2010.245652][T32690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8187'.
[ 2010.335432][T19966] usb 5-1: USB disconnect, device number 99
[ 2010.407720][  T981] usb 6-1: USB disconnect, device number 53
[ 2010.607758][T19947] usb 2-1: f81604_read: reg: 100f failed: -EPIPE
[ 2010.705910][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8191'.
[ 2010.864617][T19947] usb 2-1: f81604_read: reg: 200e failed: -EPROTO
[ 2010.912617][T19947] usb 2-1: USB disconnect, device number 3
[ 2011.008140][T19947] usb 2-1: f81604_read: reg: 100f failed: -ENODEV
[ 2011.128001][ T5496] usb 2-1: f81604_read: reg: 200f failed: -ENODEV
[ 2011.178015][T19947] usb 2-1: f81604_read: reg: 200f failed: -ENODEV
[ 2011.479996][  T981] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 2011.652250][  T981] usb 6-1: Using ep0 maxpacket: 32
[ 2011.678519][  T981] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43
[ 2011.700079][  T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2011.723381][  T981] usb 6-1: Product: syz
[ 2011.727605][  T981] usb 6-1: Manufacturer: syz
[ 2011.743017][  T981] usb 6-1: SerialNumber: syz
[ 2011.760015][  T981] usb 6-1: config 0 descriptor??
[ 2011.789154][T24661] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 2011.969098][T24661] usb 5-1: Using ep0 maxpacket: 8
[ 2011.981353][T24661] usb 5-1: config 2 has an invalid descriptor of length 81, skipping remainder of the config
[ 2012.012234][T24661] usb 5-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2012.045306][  T981] usb 6-1: USB disconnect, device number 54
[ 2012.057612][T24661] usb 5-1: config 2 interface 0 has no altsetting 0
[ 2012.105088][T24661] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[ 2012.136223][T24661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2012.159101][T24661] usb 5-1: Product: syz
[ 2012.165246][T24661] usb 5-1: Manufacturer: syz
[ 2012.179140][T24661] usb 5-1: SerialNumber: syz
[ 2012.335786][T32735] netlink: 'syz.1.8200': attribute type 4 has an invalid length.
[ 2012.439698][T24661] usb 5-1: USB disconnect, device number 100
[ 2015.319245][  T981] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2015.514313][  T330] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8219'.
[ 2015.539143][  T981] usb 5-1: Using ep0 maxpacket: 8
[ 2015.584086][  T981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2015.639186][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2015.676949][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2015.779172][  T981] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2015.825510][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2015.849156][  T981] usb 5-1: Product: syz
[ 2015.860353][  T981] usb 5-1: Manufacturer: syz
[ 2015.882869][  T981] usb 5-1: SerialNumber: syz
[ 2015.908379][  T981] usb 5-1: config 0 descriptor??
[ 2016.010952][  T336] netlink: 'syz.5.8220': attribute type 4 has an invalid length.
[ 2017.036547][  T355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8226'.
[ 2017.063575][  T356] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8226'.
[ 2017.443049][  T366] fuse: Unknown parameter '0x000000000000000300000000000000000000'
[ 2017.667006][  T364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8229'.
[ 2017.878962][  T981] usb 5-1: USB disconnect, device number 101
[ 2017.912375][T31341] udevd[31341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2018.649501][T24661] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 2018.719438][  T981] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 2018.831492][T24661] usb 3-1: Using ep0 maxpacket: 32
[ 2018.838584][T24661] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2018.851801][T24661] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 2018.861084][  T981] usb 2-1: device descriptor read/64, error -71
[ 2018.872011][T24661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2018.880117][T24661] usb 3-1: Product: syz
[ 2018.884307][T24661] usb 3-1: Manufacturer: syz
[ 2018.889069][T24661] usb 3-1: SerialNumber: syz
[ 2018.910019][T24661] usb 3-1: config 0 descriptor??
[ 2018.928592][T24661] usb 3-1: bad CDC descriptors
[ 2018.935813][T24661] usb 3-1: unsupported MDLM descriptors
[ 2019.099172][  T981] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 2019.124175][  T392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2019.133137][  T392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2019.149182][T24661] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2019.159292][T19966] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 2019.229129][  T981] usb 2-1: device descriptor read/64, error -71
[ 2019.299479][T24661] usb 5-1: Using ep0 maxpacket: 32
[ 2019.307433][T24661] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2019.309305][T19966] usb 6-1: Using ep0 maxpacket: 8
[ 2019.318208][T24661] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2019.334248][T19966] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2019.336471][T24661] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2019.348117][  T981] usb usb2-port1: attempt power cycle
[ 2019.356051][T24661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2019.361469][T19966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2019.369525][T24661] usb 5-1: Product: syz
[ 2019.384118][T24661] usb 5-1: Manufacturer: syz
[ 2019.388752][T24661] usb 5-1: SerialNumber: syz
[ 2019.394761][T19966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2019.405947][T24661] usb 5-1: config 0 descriptor??
[ 2019.420604][T19966] usb 6-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2019.430025][T19966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2019.438053][T19966] usb 6-1: Product: syz
[ 2019.442597][T19966] usb 6-1: Manufacturer: syz
[ 2019.447254][T19966] usb 6-1: SerialNumber: syz
[ 2019.455202][T19966] usb 6-1: config 0 descriptor??
[ 2019.729256][  T981] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 2019.749773][  T981] usb 2-1: device descriptor read/8, error -71
[ 2019.825929][  T397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8240'.
[ 2019.835334][  T397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8240'.
[ 2019.847211][  T397] syzkaller0: entered promiscuous mode
[ 2019.854224][  T397] syzkaller0: entered allmulticast mode
[ 2019.873885][T24661] usb 5-1: USB disconnect, device number 102
[ 2019.989186][  T981] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 2020.009805][  T981] usb 2-1: device descriptor read/8, error -71
[ 2020.119869][  T981] usb usb2-port1: unable to enumerate USB device
[ 2020.645374][  T407] netlink: 'syz.4.8242': attribute type 4 has an invalid length.
[ 2020.867961][  T412] netlink: 'syz.6.8243': attribute type 4 has an invalid length.
[ 2021.372688][T19947] usb 3-1: USB disconnect, device number 103
[ 2021.767260][  T418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8245'.
[ 2021.843832][T19966] usb 6-1: USB disconnect, device number 55
[ 2021.883586][  T418] vlan0: entered promiscuous mode
[ 2021.900822][  T418] bond0: entered promiscuous mode
[ 2021.927826][  T418] bond_slave_0: entered promiscuous mode
[ 2021.949689][  T418] bond_slave_1: entered promiscuous mode
[ 2021.964516][T31341] udevd[31341]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2022.015589][  T418] dummy0: entered promiscuous mode
[ 2022.371449][  T431] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 2022.409598][  T430] Invalid logical block size (63743)
[ 2022.429646][T19966] usb 3-1: new full-speed USB device number 104 using dummy_hcd
[ 2022.613559][T19966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2022.653263][T19966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2022.688945][T19966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2022.783677][T19966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2022.816722][T19966] usb 3-1: Product: syz
[ 2022.831367][T19966] usb 3-1: Manufacturer: syz
[ 2022.849902][T19966] usb 3-1: SerialNumber: syz
[ 2023.084922][T19966] usb 3-1: 0:2 : does not exist
[ 2023.114477][T19966] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 2023.196444][T19966] usb 3-1: USB disconnect, device number 104
[ 2023.281689][T31341] udevd[31341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2023.563223][  T448] netlink: 'syz.1.8255': attribute type 4 has an invalid length.
[ 2023.575918][  T448] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8255'.
[ 2023.728220][  T449] delete_channel: no stack
[ 2023.803166][  T454] netlink: 'syz.2.8257': attribute type 1 has an invalid length.
[ 2023.888139][  T458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8257'.
[ 2023.970873][  T454] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2024.072656][  T453] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 2024.239336][T19966] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 2024.381522][  T465] 8021q: VLANs not supported on ip6_vti0
[ 2024.399639][T19966] usb 6-1: Using ep0 maxpacket: 8
[ 2024.450896][T19966] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2024.511261][T19966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2024.583359][T19966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2024.646590][T19966] usb 6-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2024.677578][T19966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2024.690840][T19966] usb 6-1: Product: syz
[ 2024.703359][T19966] usb 6-1: Manufacturer: syz
[ 2024.718220][T19966] usb 6-1: SerialNumber: syz
[ 2024.756823][T19966] usb 6-1: config 0 descriptor??
[ 2024.975773][  T479] netlink: 'syz.6.8263': attribute type 4 has an invalid length.
[ 2026.789138][T19966] usb 6-1: USB disconnect, device number 56
[ 2026.880606][T31341] udevd[31341]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2027.507806][  T509] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8265'.
[ 2027.566635][  T490] trusted_key: encrypted_key: insufficient parameters specified
[ 2027.684404][T19966] usb 6-1: new low-speed USB device number 57 using dummy_hcd
[ 2027.881273][T19966] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 2027.907938][T19966] usb 6-1: config 0 has no interface number 0
[ 2027.944984][T19966] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2028.023170][T19966] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 2028.096569][T19966] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2028.147583][T19966] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 2028.188687][T19966] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 2028.224323][T19966] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2028.261566][T19966] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2028.300414][T19966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2028.304064][  T515] fuse: Unknown parameter 'mGN‡8o«ad'
[ 2028.591046][T19966] usb 6-1: config 0 descriptor??
[ 2028.659999][T19945] IPVS: starting estimator thread 0...
[ 2028.681933][  T502] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 2028.759514][  T517] IPVS: using max 38 ests per chain, 91200 per kthread
[ 2028.767711][  T502] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 2028.807646][T19966] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2029.077583][  T502] ldusb 6-1:0.55: Write buffer overflow, 138595949 bytes dropped
[ 2029.158576][  T507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2029.216026][  T507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2030.743685][T19966] usb 6-1: USB disconnect, device number 57
[ 2030.797937][T19966] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 2030.867468][  T535] netlink: 'syz.6.8277': attribute type 4 has an invalid length.
[ 2031.402973][T19966] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 2031.628693][  T550] delete_channel: no stack
[ 2031.639570][T19966] usb 2-1: Using ep0 maxpacket: 8
[ 2031.681662][T19966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2031.763954][T19966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2031.838147][T19966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2031.869937][T19966] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2031.972181][T19966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2031.991038][T19966] usb 2-1: Product: syz
[ 2032.039614][T19966] usb 2-1: Manufacturer: syz
[ 2032.396370][T19966] usb 2-1: SerialNumber: syz
[ 2032.543406][T19966] usb 2-1: config 0 descriptor??
[ 2033.672328][T19956] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 2033.879738][T19956] usb 5-1: Using ep0 maxpacket: 32
[ 2033.923365][T19956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2033.982638][T19966] usb 2-1: USB disconnect, device number 8
[ 2033.990575][T19956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2034.064999][T19956] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2034.084343][T31341] udevd[31341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2034.112900][T19956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2034.169317][T19956] usb 5-1: config 0 descriptor??
[ 2034.201443][T19956] hub 5-1:0.0: USB hub found
[ 2034.419217][T19966] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[ 2034.442510][T19956] hub 5-1:0.0: 1 port detected
[ 2034.641958][T19966] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2034.669328][T19966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2034.700506][T19966] usb 2-1: Product: syz
[ 2034.725271][T19966] usb 2-1: Manufacturer: syz
[ 2034.739071][T19966] usb 2-1: SerialNumber: syz
[ 2034.794274][T19966] usb 2-1: config 0 descriptor??
[ 2035.039452][T19966] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2035.058799][  T981] hub 5-1:0.0: activate --> -90
[ 2035.462175][  T981] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 2035.476436][  T981] hub_port_connect: 28 callbacks suppressed
[ 2035.476453][  T981] usb 5-1-port1: connect-debounce failed
[ 2035.489840][  T981] usb 5-1: USB disconnect, device number 103
[ 2035.498604][ T1152] usb 5-1: Failed to suspend device, error -71
[ 2036.521550][T19966] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2036.614706][T19966] usb 2-1: USB disconnect, device number 9
[ 2037.378912][  T602] netlink: 'syz.1.8293': attribute type 4 has an invalid length.
[ 2037.799254][T19966] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 2037.999210][T19966] usb 3-1: Using ep0 maxpacket: 8
[ 2038.051312][T19966] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2038.119491][T19966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2038.229326][T19966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2038.298475][T19966] usb 3-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2038.323838][T19966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2038.375029][T19966] usb 3-1: Product: syz
[ 2038.387563][T19966] usb 3-1: Manufacturer: syz
[ 2038.469158][T19966] usb 3-1: SerialNumber: syz
[ 2038.501837][T19966] usb 3-1: config 0 descriptor??
[ 2039.912421][  T631] netlink: 'syz.4.8301': attribute type 2 has an invalid length.
[ 2039.938188][  T634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8302'.
[ 2040.359215][T19945] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 2040.475838][T19966] usb 3-1: USB disconnect, device number 105
[ 2040.550731][T19945] usb 2-1: device descriptor read/64, error -71
[ 2040.575129][T31341] udevd[31341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2040.849314][T19945] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 2040.999139][T19945] usb 2-1: device descriptor read/64, error -71
[ 2041.129571][T19945] usb usb2-port1: attempt power cycle
[ 2041.479329][T19945] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 2041.501021][T19945] usb 2-1: device descriptor read/8, error -71
[ 2041.749887][T19945] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 2041.788555][  T665] netlink: 'syz.4.8311': attribute type 4 has an invalid length.
[ 2041.810620][T19945] usb 2-1: device descriptor read/8, error -71
[ 2041.919576][T19945] usb usb2-port1: unable to enumerate USB device
[ 2042.717467][  T679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8315'.
[ 2042.775789][  T680] FAULT_INJECTION: forcing a failure.
[ 2042.775789][  T680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2042.796168][  T680] CPU: 1 UID: 0 PID: 680 Comm: syz.6.8314 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2042.796204][  T680] Tainted: [L]=SOFTLOCKUP
[ 2042.796214][  T680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2042.796228][  T680] Call Trace:
[ 2042.796237][  T680]  <TASK>
[ 2042.796247][  T680]  dump_stack_lvl+0xe8/0x150
[ 2042.796283][  T680]  should_fail_ex+0x414/0x560
[ 2042.796324][  T680]  _copy_from_user+0x2d/0xb0
[ 2042.796353][  T680]  get_compat_msghdr+0xad/0x4a0
[ 2042.796388][  T680]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2042.796420][  T680]  ? rcu_is_watching+0x15/0xb0
[ 2042.796443][  T680]  ? ___sys_recvmsg+0x1c4/0x510
[ 2042.796472][  T680]  ___sys_recvmsg+0x17f/0x510
[ 2042.796494][  T680]  ? _parse_integer_limit+0x1ae/0x1f0
[ 2042.796532][  T680]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2042.796554][  T680]  ? kstrtoull+0x12f/0x1d0
[ 2042.796582][  T680]  ? __fget_files+0x2a/0x420
[ 2042.796633][  T680]  do_recvmmsg+0x36a/0x770
[ 2042.796663][  T680]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2042.796686][  T680]  ? ksys_write+0x1cb/0x250
[ 2042.796717][  T680]  ? __fget_files+0x3a0/0x420
[ 2042.796745][  T680]  __sys_recvmmsg+0x19d/0x280
[ 2042.796770][  T680]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 2042.796795][  T680]  ? __pfx_ksys_write+0x10/0x10
[ 2042.796817][  T680]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 2042.796845][  T680]  __do_fast_syscall_32+0x1dc/0x570
[ 2042.796868][  T680]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2042.796885][  T680]  ? do_fast_syscall_32+0x34/0x80
[ 2042.796905][  T680]  ? irqentry_exit+0x10f/0x670
[ 2042.796927][  T680]  do_fast_syscall_32+0x34/0x80
[ 2042.796948][  T680]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2042.796970][  T680] RIP: 0023:0xf7f27539
[ 2042.796985][  T680] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2042.797001][  T680] RSP: 002b:00000000f53d455c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 2042.797020][  T680] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080003700
[ 2042.797033][  T680] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000
[ 2042.797044][  T680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2042.797054][  T680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2042.797065][  T680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2042.797089][  T680]  </TASK>
[ 2042.851029][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2043.044910][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2043.498660][  T688] binder: BINDER_SET_CONTEXT_MGR already set
[ 2043.505513][  T688] binder: 687:688 ioctl 4018620d 800000c0 returned -16
[ 2043.515365][  T688] binder: BINDER_SET_CONTEXT_MGR already set
[ 2043.522975][  T688] binder: 687:688 ioctl 4018620d 80000040 returned -16
[ 2043.531558][  T688] binder: 687:688 ioctl c0306201 800001c0 returned -22
[ 2043.870172][T19966] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 2043.929151][T19956] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 2044.013682][  T694] QAT: Device 64 not found
[ 2044.018741][  T694] QAT: Invalid ioctl -1072667448
[ 2044.041388][T19966] usb 5-1: Using ep0 maxpacket: 8
[ 2044.059961][T19966] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 2044.068316][T19966] usb 5-1: config 179 has no interface number 0
[ 2044.095142][T19966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2044.116265][T19956] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2044.128003][T19956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.146327][T19966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 2044.169751][T19956] usb 3-1: config 0 descriptor??
[ 2044.187245][T19966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2044.210634][T19966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 2044.236968][T19966] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2044.254042][T19966] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 2044.263387][T19966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.289407][  T981] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 2044.304613][  T690] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2044.351260][  T700] FAULT_INJECTION: forcing a failure.
[ 2044.351260][  T700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2044.365517][  T700] CPU: 0 UID: 0 PID: 700 Comm: syz.6.8323 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2044.365553][  T700] Tainted: [L]=SOFTLOCKUP
[ 2044.365561][  T700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2044.365575][  T700] Call Trace:
[ 2044.365585][  T700]  <TASK>
[ 2044.365595][  T700]  dump_stack_lvl+0xe8/0x150
[ 2044.365628][  T700]  should_fail_ex+0x414/0x560
[ 2044.365670][  T700]  _copy_to_user+0x31/0xb0
[ 2044.365701][  T700]  simple_read_from_buffer+0xe1/0x170
[ 2044.365734][  T700]  proc_fail_nth_read+0x1b3/0x220
[ 2044.365762][  T700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2044.365789][  T700]  ? rw_verify_area+0x2a6/0x4d0
[ 2044.365823][  T700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2044.365849][  T700]  vfs_read+0x200/0xa30
[ 2044.365868][  T700]  ? fdget_pos+0x247/0x320
[ 2044.365900][  T700]  ? __pfx___mutex_lock+0x10/0x10
[ 2044.365926][  T700]  ? __pfx_vfs_read+0x10/0x10
[ 2044.365949][  T700]  ? __fget_files+0x2a/0x420
[ 2044.365980][  T700]  ? __fget_files+0x3a0/0x420
[ 2044.366006][  T700]  ? __fget_files+0x2a/0x420
[ 2044.366045][  T700]  ksys_read+0x145/0x250
[ 2044.366069][  T700]  ? __pfx_ksys_read+0x10/0x10
[ 2044.366102][  T700]  __do_fast_syscall_32+0x1dc/0x570
[ 2044.366127][  T700]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2044.366149][  T700]  ? do_fast_syscall_32+0x34/0x80
[ 2044.366173][  T700]  ? irqentry_exit+0x10f/0x670
[ 2044.366200][  T700]  do_fast_syscall_32+0x34/0x80
[ 2044.366227][  T700]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2044.366254][  T700] RIP: 0023:0xf7f27539
[ 2044.366273][  T700] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2044.366294][  T700] RSP: 002b:00000000f5416590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2044.366318][  T700] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5416620
[ 2044.366333][  T700] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000
[ 2044.366347][  T700] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2044.366360][  T700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2044.366373][  T700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2044.366406][  T700]  </TASK>
[ 2044.449477][  T981] usb 2-1: Using ep0 maxpacket: 8
[ 2044.635121][T19966] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input215
[ 2044.661345][T19956] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2044.678585][  T981] usb 2-1: config 8 has an invalid interface number: 8 but max is 1
[ 2044.687210][  T981] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 2044.706719][  T981] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2
[ 2044.739132][  T981] usb 2-1: config 8 has no interface number 0
[ 2044.745524][  T981] usb 2-1: config 8 interface 8 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2044.767256][  T981] usb 2-1: config 8 interface 8 has no altsetting 0
[ 2044.780692][  T981] usb 2-1: language id specifier not provided by device, defaulting to English
[ 2044.799924][  T981] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b
[ 2044.809412][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2044.817697][  T981] usb 2-1: Manufacturer: Ñ‹
[ 2044.824065][  T981] usb 2-1: SerialNumber: �꧶螒㖈쵀缼䆎즪狸
[ 2044.851660][  T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2044.860882][T19970] usb 5-1: USB disconnect, device number 104
[ 2044.860944][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2044.875343][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2044.885031][  T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2044.896731][T19956] [drm:udl_init] *ERROR* Selecting channel failed
[ 2044.921757][T19956] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[ 2044.938707][T19956] [drm] Initialized udl on minor 2
[ 2044.955489][T19956] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2044.969163][T19966] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 2044.992133][T19956] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 2045.006013][T31841] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2045.028980][T31841] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2045.037395][T19956] usb 3-1: USB disconnect, device number 106
[ 2045.062868][T31841] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 2045.141601][T19966] usb 6-1: device descriptor read/64, error -71
[ 2045.234757][  T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2045.252514][  T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2045.296708][  T981] dm9601 2-1:8.8: probe with driver dm9601 failed with error -22
[ 2045.318942][  T981] sr9700 2-1:8.8: probe with driver sr9700 failed with error -22
[ 2045.347562][  T981] usb 2-1: USB disconnect, device number 14
[ 2045.894638][  T728] netlink: 'syz.5.8327': attribute type 4 has an invalid length.
[ 2047.156380][  T740] FAULT_INJECTION: forcing a failure.
[ 2047.156380][  T740] name failslab, interval 1, probability 0, space 0, times 0
[ 2047.188325][  T740] CPU: 1 UID: 0 PID: 740 Comm: syz.2.8330 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2047.188354][  T740] Tainted: [L]=SOFTLOCKUP
[ 2047.188360][  T740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2047.188370][  T740] Call Trace:
[ 2047.188376][  T740]  <TASK>
[ 2047.188385][  T740]  dump_stack_lvl+0xe8/0x150
[ 2047.188411][  T740]  should_fail_ex+0x414/0x560
[ 2047.188439][  T740]  should_failslab+0xa8/0x100
[ 2047.188459][  T740]  __kmalloc_noprof+0xdf/0x800
[ 2047.188474][  T740]  ? sock_kmalloc+0xd6/0x160
[ 2047.188503][  T740]  sock_kmalloc+0xd6/0x160
[ 2047.188526][  T740]  skcipher_recvmsg+0x571/0x11d0
[ 2047.188578][  T740]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 2047.188599][  T740]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 2047.188613][  T740]  ? security_socket_recvmsg+0x7e/0x2e0
[ 2047.188638][  T740]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 2047.188656][  T740]  sock_recvmsg+0x22c/0x270
[ 2047.188683][  T740]  __sys_recvfrom+0x1f6/0x340
[ 2047.188703][  T740]  ? __pfx___sys_recvfrom+0x10/0x10
[ 2047.188731][  T740]  ? __might_fault+0xb0/0x130
[ 2047.188769][  T740]  __ia32_compat_sys_socketcall+0x84f/0x9d0
[ 2047.188792][  T740]  ? __fget_files+0x3a0/0x420
[ 2047.188814][  T740]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[ 2047.188837][  T740]  ? fput+0xa0/0xd0
[ 2047.188857][  T740]  ? ksys_write+0x22a/0x250
[ 2047.188873][  T740]  ? __pfx_ksys_write+0x10/0x10
[ 2047.188896][  T740]  __do_fast_syscall_32+0x1dc/0x570
[ 2047.188915][  T740]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2047.188930][  T740]  ? do_fast_syscall_32+0x34/0x80
[ 2047.188947][  T740]  ? irqentry_exit+0x10f/0x670
[ 2047.188966][  T740]  do_fast_syscall_32+0x34/0x80
[ 2047.188985][  T740]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2047.189027][  T740] RIP: 0023:0xf708d539
[ 2047.189046][  T740] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2047.189065][  T740] RSP: 002b:00000000f547c440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066
[ 2047.189095][  T740] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f547c45c
[ 2047.189110][  T740] RDX: 0000000000000000 RSI: 00000000f547c560 RDI: 00000000f7426ff4
[ 2047.189124][  T740] RBP: 00000000f547c560 R08: 0000000000000000 R09: 0000000000000000
[ 2047.189141][  T740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2047.189151][  T740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2047.189173][  T740]  </TASK>
[ 2047.738874][  T745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8331'.
[ 2048.880562][  T760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8335'.
[ 2048.904327][  T760] vlan2: entered promiscuous mode
[ 2048.912948][  T760] dummy0: entered promiscuous mode
[ 2049.130018][  T767] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.8337'.
[ 2049.362289][  T773] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8340'.
[ 2049.444184][ T1090] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2049.456154][ T1090] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2049.471650][  T981] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2049.499144][T19945] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 2049.671186][T19945] usb 3-1: Using ep0 maxpacket: 32
[ 2049.712883][T19945] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[ 2049.721303][  T784] netlink: 'syz.6.8341': attribute type 4 has an invalid length.
[ 2049.794891][T19945] usb 3-1: config 0 has no interface number 0
[ 2049.831778][  T981] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2049.909436][  T981] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2049.964152][T19945] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2050.005122][  T778] binder: BINDER_SET_CONTEXT_MGR already set
[ 2050.016836][  T778] binder: 771:778 ioctl 4018620d 80000040 returned -16
[ 2050.033926][T19945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2050.059398][T19945] usb 3-1: Product: syz
[ 2050.063617][T19945] usb 3-1: Manufacturer: syz
[ 2050.081127][T19945] usb 3-1: SerialNumber: syz
[ 2050.131020][T19945] usb 3-1: config 0 descriptor??
[ 2050.184883][T19945] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2050.412711][T19945] usb 3-1: qt2_setup_urbs - submit read urb failed -8
[ 2050.430510][T19945] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8
[ 2051.730184][  T798] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2052.242968][  T981] usb 3-1: USB disconnect, device number 107
[ 2052.426826][  T810] netlink: 'syz.5.8349': attribute type 21 has an invalid length.
[ 2052.439892][  T810] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8349'.
[ 2052.454560][  T810] netlink: 'syz.5.8349': attribute type 21 has an invalid length.
[ 2052.463836][  T810] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8349'.
[ 2052.499534][T19966] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 2052.629215][T19966] usb 2-1: device descriptor read/64, error -71
[ 2052.679297][T19945] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 2052.829210][T19945] usb 3-1: Using ep0 maxpacket: 16
[ 2052.838229][T19945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2052.851220][T19945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2052.861055][T19945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2052.869669][T19966] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 2052.874258][T19945] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2052.892109][T19945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2052.903754][T19945] usb 3-1: config 0 descriptor??
[ 2053.009338][T19966] usb 2-1: device descriptor read/64, error -71
[ 2053.120923][T19966] usb usb2-port1: attempt power cycle
[ 2053.322460][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.334663][T19945] microsoft 0003:045E:07DA.002F: ignoring exceeding usage max
[ 2053.348930][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.357324][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.365559][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.373908][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.381657][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.389877][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.397492][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.405523][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.413465][T19945] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[ 2053.421773][T19945] microsoft 0003:045E:07DA.002F: unsupported Resolution Multiplier 0
[ 2053.469191][T19966] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 2053.491677][T19966] usb 2-1: device descriptor read/8, error -71
[ 2053.528965][T19945] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 2053.545034][T19945] microsoft 0003:045E:07DA.002F: no inputs found
[ 2053.555369][T19945] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway
[ 2053.569243][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2053.635106][T19945] usb 3-1: USB disconnect, device number 108
[ 2053.694765][  T824] fido_id[824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002F/report_descriptor': No such file or directory
[ 2053.769185][T19966] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 2053.839986][T19966] usb 2-1: device descriptor read/8, error -71
[ 2053.959401][T19966] usb usb2-port1: unable to enumerate USB device
[ 2054.381050][  T834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8358'.
[ 2054.400459][  T834] 8021q: adding VLAN 0 to HW filter on device macvtap2
[ 2054.470808][  T837] netlink: 'syz.4.8355': attribute type 4 has an invalid length.
[ 2054.749165][T19966] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 2054.774864][  T843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8361'.
[ 2054.812311][  T843] 8021q: adding VLAN 0 to HW filter on device macvtap2
[ 2054.909093][T19966] usb 6-1: Using ep0 maxpacket: 32
[ 2054.920708][T19966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2054.935252][T19966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2054.961880][T19966] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2054.998201][T19966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2055.046884][T19966] usb 6-1: config 0 descriptor??
[ 2055.078964][T19966] hub 6-1:0.0: USB hub found
[ 2055.088532][  T845] FAULT_INJECTION: forcing a failure.
[ 2055.088532][  T845] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2055.146009][  T845] CPU: 0 UID: 0 PID: 845 Comm: syz.2.8362 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2055.146045][  T845] Tainted: [L]=SOFTLOCKUP
[ 2055.146053][  T845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2055.146068][  T845] Call Trace:
[ 2055.146081][  T845]  <TASK>
[ 2055.146091][  T845]  dump_stack_lvl+0xe8/0x150
[ 2055.146126][  T845]  should_fail_ex+0x414/0x560
[ 2055.146166][  T845]  copy_folio_from_iter_atomic+0x30b/0x1910
[ 2055.146195][  T845]  ? shmem_allowable_huge_orders+0x1d4/0x4e0
[ 2055.146247][  T845]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 2055.146285][  T845]  ? shmem_write_begin+0x1d8/0x330
[ 2055.146322][  T845]  generic_perform_write+0x5df/0x900
[ 2055.146362][  T845]  ? __pfx_generic_perform_write+0x10/0x10
[ 2055.146385][  T845]  ? down_write+0x162/0x1f0
[ 2055.146421][  T845]  ? file_update_time_flags+0x2cb/0x4e0
[ 2055.146458][  T845]  shmem_file_write_iter+0xf8/0x120
[ 2055.146494][  T845]  do_iter_readv_writev+0x623/0x8c0
[ 2055.146525][  T845]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2055.146567][  T845]  vfs_writev+0x31a/0x960
[ 2055.146614][  T845]  ? __pfx_vfs_writev+0x10/0x10
[ 2055.146660][  T845]  ? __fget_files+0x2a/0x420
[ 2055.146692][  T845]  ? __fget_files+0x3a0/0x420
[ 2055.146717][  T845]  ? __fget_files+0x2a/0x420
[ 2055.146754][  T845]  do_writev+0x14d/0x2d0
[ 2055.146785][  T845]  ? __pfx_do_writev+0x10/0x10
[ 2055.146824][  T845]  __do_fast_syscall_32+0x1dc/0x570
[ 2055.146849][  T845]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2055.146870][  T845]  ? do_fast_syscall_32+0x34/0x80
[ 2055.146895][  T845]  ? irqentry_exit+0x10f/0x670
[ 2055.146936][  T845]  do_fast_syscall_32+0x34/0x80
[ 2055.146965][  T845]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2055.146992][  T845] RIP: 0023:0xf708d539
[ 2055.147010][  T845] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2055.147042][  T845] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092
[ 2055.147067][  T845] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000
[ 2055.147084][  T845] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2055.147097][  T845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2055.147109][  T845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2055.147122][  T845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2055.147156][  T845]  </TASK>
[ 2055.431706][T19966] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[ 2055.647607][T19966] usbhid 6-1:0.0: can't add hid device: -71
[ 2055.660795][T19966] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2055.711607][T19966] usb 6-1: USB disconnect, device number 60
[ 2056.244684][  T859] netlink: 'syz.4.8365': attribute type 4 has an invalid length.
[ 2056.638051][  T877] FAULT_INJECTION: forcing a failure.
[ 2056.638051][  T877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2056.684816][  T877] CPU: 1 UID: 0 PID: 877 Comm: syz.6.8371 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2056.684872][  T877] Tainted: [L]=SOFTLOCKUP
[ 2056.684885][  T877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2056.684895][  T877] Call Trace:
[ 2056.684902][  T877]  <TASK>
[ 2056.684910][  T877]  dump_stack_lvl+0xe8/0x150
[ 2056.684933][  T877]  should_fail_ex+0x414/0x560
[ 2056.684961][  T877]  _copy_to_iter+0x1de/0x1790
[ 2056.684980][  T877]  ? do_raw_spin_lock+0x121/0x290
[ 2056.685007][  T877]  ? __pfx__copy_to_iter+0x10/0x10
[ 2056.685023][  T877]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2056.685039][  T877]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2056.685054][  T877]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2056.685069][  T877]  ? __skb_try_recv_datagram+0x3d5/0x4d0
[ 2056.685094][  T877]  __skb_datagram_iter+0xf8/0x990
[ 2056.685116][  T877]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 2056.685143][  T877]  skb_copy_datagram_iter+0xb5/0x210
[ 2056.685166][  T877]  netlink_recvmsg+0x2ab/0xa30
[ 2056.685199][  T877]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 2056.685224][  T877]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2056.685246][  T877]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 2056.685260][  T877]  ? security_socket_recvmsg+0x7e/0x2e0
[ 2056.685283][  T877]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 2056.685304][  T877]  sock_recvmsg+0x22c/0x270
[ 2056.685331][  T877]  __sys_recvfrom+0x1f6/0x340
[ 2056.685351][  T877]  ? __pfx___sys_recvfrom+0x10/0x10
[ 2056.685377][  T877]  ? __might_fault+0xb0/0x130
[ 2056.685416][  T877]  __ia32_compat_sys_socketcall+0x84f/0x9d0
[ 2056.685440][  T877]  ? __fget_files+0x3a0/0x420
[ 2056.685462][  T877]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[ 2056.685485][  T877]  ? fput+0xa0/0xd0
[ 2056.685505][  T877]  ? ksys_write+0x22a/0x250
[ 2056.685526][  T877]  ? __pfx_ksys_write+0x10/0x10
[ 2056.685549][  T877]  __do_fast_syscall_32+0x1dc/0x570
[ 2056.685567][  T877]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2056.685582][  T877]  ? do_fast_syscall_32+0x34/0x80
[ 2056.685600][  T877]  ? irqentry_exit+0x10f/0x670
[ 2056.685619][  T877]  do_fast_syscall_32+0x34/0x80
[ 2056.685638][  T877]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2056.685657][  T877] RIP: 0023:0xf7f27539
[ 2056.685670][  T877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2056.685685][  T877] RSP: 002b:00000000f5415440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066
[ 2056.685701][  T877] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f541545c
[ 2056.685712][  T877] RDX: 0000000000000000 RSI: 00000000f5415560 RDI: 00000000f73b6ff4
[ 2056.685722][  T877] RBP: 00000000f5415560 R08: 0000000000000000 R09: 0000000000000000
[ 2056.685732][  T877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2056.685741][  T877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2056.685763][  T877]  </TASK>
[ 2057.393656][  T887] vivid-003: =================  START STATUS  =================
[ 2057.430513][  T887] vivid-003: Radio HW Seek Mode: Bounded
[ 2057.454722][  T887] vivid-003: Radio Programmable HW Seek: false
[ 2057.467588][  T887] vivid-003: RDS Rx I/O Mode: Block I/O
[ 2057.486119][  T887] vivid-003: Generate RBDS Instead of RDS: false
[ 2057.501794][  T887] vivid-003: RDS Reception: true
[ 2057.539214][  T887] vivid-003: RDS Program Type: 0 inactive
[ 2057.552403][  T887] vivid-003: RDS PS Name:  inactive
[ 2057.581726][  T887] vivid-003: RDS Radio Text:  inactive
[ 2057.605835][  T887] vivid-003: RDS Traffic Announcement: false inactive
[ 2057.622325][  T887] vivid-003: RDS Traffic Program: false inactive
[ 2057.633761][  T887] vivid-003: RDS Music: false inactive
[ 2057.663552][  T887] vivid-003: ==================  END STATUS  ==================
[ 2057.813087][  T902] netlink: 'syz.1.8375': attribute type 4 has an invalid length.
[ 2057.960583][T19966] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 2058.139119][T19966] usb 5-1: Using ep0 maxpacket: 8
[ 2058.151124][T19966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2058.193399][T19966] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 2058.215125][T19966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2058.279849][T19966] usb 5-1: config 0 descriptor??
[ 2058.311888][T19966] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 2059.729364][T19945] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 2059.744711][  T944] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2059.901543][T19945] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[ 2059.925818][T19945] usb 3-1: config 1 has no interface number 0
[ 2059.942372][T19945] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 2059.970542][T19945] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 2059.982199][  T918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8377'.
[ 2060.014970][T19945] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2060.042350][T19945] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 2060.070445][T19945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2060.091203][  T954] netlink: 'syz.5.8387': attribute type 4 has an invalid length.
[ 2060.107477][T19945] usb 3-1: Product: syz
[ 2060.117868][T19945] usb 3-1: Manufacturer: syz
[ 2060.138861][T19945] usb 3-1: SerialNumber: syz
[ 2060.189433][  T938] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2060.279400][T19966] gspca_vc032x: reg_w err -110
[ 2060.309640][T19966] vc032x 5-1:0.0: probe with driver vc032x failed with error -110
[ 2060.435311][  T938] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2060.481673][T19945] usb 3-1: No status endpoint found
[ 2060.747413][  T963] ptrace attach of "./syz-executor exec"[25566] was attempted by "./syz-executor exec"[963]
[ 2061.114167][T19966] usb 5-1: USB disconnect, device number 105
[ 2061.319121][T19945] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 2061.529282][T19945] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[ 2061.712135][T19945] usb 2-1: Dual-Role OTG device on HNP port
[ 2061.764046][T19945] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[ 2061.804566][T19945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2061.860444][T19945] usb 2-1: Product: syz
[ 2061.917335][T19945] usb 2-1: Manufacturer: syz
[ 2061.956859][T19945] usb 2-1: SerialNumber: syz
[ 2061.969200][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2062.033257][T19945] usb 2-1: config 0 descriptor??
[ 2062.120601][T19945] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32
[ 2062.245076][   T30] audit: type=1326 audit(1768473565.342:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=972 comm="syz.5.8392" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0
[ 2062.347691][  T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2062.382309][  T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2062.624266][  T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2062.658191][  T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2062.728525][T19945] usb 2-1: USB disconnect, device number 19
[ 2063.250417][T19966] usb 3-1: USB disconnect, device number 109
[ 2063.425518][  T985] netlink: 'syz.6.8396': attribute type 4 has an invalid length.
[ 2064.069068][ T1007] netlink: 'syz.1.8403': attribute type 4 has an invalid length.
[ 2065.451640][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8406'.
[ 2066.239211][T19945] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 2066.411664][   T30] audit: type=1326 audit(1768473569.522:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1037 comm="syz.2.8411" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0
[ 2066.439558][T19945] usb 2-1: Using ep0 maxpacket: 8
[ 2066.475142][ T1041] tipc: Started in network mode
[ 2066.486025][ T1039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8411'.
[ 2066.506391][T19945] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2066.519072][ T1041] tipc: Node identity aaaaaaaaaa33, cluster identity 4711
[ 2066.528118][T19945] usb 2-1: too many configurations: 16, using maximum allowed: 8
[ 2066.546458][ T1041] tipc: Enabled bearer <eth:vlan1>, priority 10
[ 2066.566132][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.589671][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.607005][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.631536][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.658900][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.681675][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.694048][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.711574][T19945] usb 2-1: config 4 interface 0 has no altsetting 0
[ 2066.732430][T19945] usb 2-1: string descriptor 0 read error: -22
[ 2066.739962][T19945] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 2066.760517][T19945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2066.825305][T19945] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 2066.876437][T19945] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2066.885288][ T1045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8414'.
[ 2066.923275][T19945] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 2066.942788][T19945] usb 2-1: media controller created
[ 2066.974117][T19945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2067.228225][ T1056] FAULT_INJECTION: forcing a failure.
[ 2067.228225][ T1056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2067.248303][ T1056] CPU: 0 UID: 0 PID: 1056 Comm: syz.2.8417 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2067.248336][ T1056] Tainted: [L]=SOFTLOCKUP
[ 2067.248344][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2067.248357][ T1056] Call Trace:
[ 2067.248366][ T1056]  <TASK>
[ 2067.248376][ T1056]  dump_stack_lvl+0xe8/0x150
[ 2067.248409][ T1056]  should_fail_ex+0x414/0x560
[ 2067.248449][ T1056]  _copy_from_iter+0x1cd/0x1630
[ 2067.248484][ T1056]  ? __pfx__copy_from_iter+0x10/0x10
[ 2067.248508][ T1056]  ? __build_skb_around+0x22d/0x3c0
[ 2067.248536][ T1056]  ? __alloc_skb+0x198/0x3a0
[ 2067.248560][ T1056]  ? netlink_sendmsg+0x642/0xb30
[ 2067.248587][ T1056]  ? skb_put+0x11b/0x210
[ 2067.248614][ T1056]  netlink_sendmsg+0x6b2/0xb30
[ 2067.248652][ T1056]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2067.248685][ T1056]  ? __import_iovec+0x5d4/0x7f0
[ 2067.248709][ T1056]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2067.248737][ T1056]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2067.248757][ T1056]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2067.248787][ T1056]  __sock_sendmsg+0x21c/0x270
[ 2067.248824][ T1056]  ____sys_sendmsg+0x505/0x820
[ 2067.248858][ T1056]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2067.248889][ T1056]  ? kstrtouint+0x6e/0xe0
[ 2067.248930][ T1056]  ___sys_sendmsg+0x21f/0x2a0
[ 2067.248971][ T1056]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2067.248997][ T1056]  ? get_pid_task+0x20/0x1f0
[ 2067.249025][ T1056]  ? get_pid_task+0x20/0x1f0
[ 2067.249048][ T1056]  ? get_pid_task+0x20/0x1f0
[ 2067.249104][ T1056]  ? __fget_files+0x2a/0x420
[ 2067.249129][ T1056]  ? __fget_files+0x3a0/0x420
[ 2067.249176][ T1056]  __sys_sendmsg+0x164/0x220
[ 2067.249203][ T1056]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2067.249237][ T1056]  ? __pfx_ksys_write+0x10/0x10
[ 2067.249267][ T1056]  __do_fast_syscall_32+0x1dc/0x570
[ 2067.249291][ T1056]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2067.249312][ T1056]  ? do_fast_syscall_32+0x34/0x80
[ 2067.249336][ T1056]  ? irqentry_exit+0x10f/0x670
[ 2067.249362][ T1056]  do_fast_syscall_32+0x34/0x80
[ 2067.249387][ T1056]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2067.249413][ T1056] RIP: 0023:0xf708d539
[ 2067.249431][ T1056] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2067.249450][ T1056] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2067.249472][ T1056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580
[ 2067.249488][ T1056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2067.249499][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2067.249511][ T1056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2067.249524][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2067.249553][ T1056]  </TASK>
[ 2067.542567][ T1061] netlink: 'syz.4.8416': attribute type 4 has an invalid length.
[ 2067.635180][ T1059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8418'.
[ 2067.849663][T24661] tipc: Node number set to 10070698
[ 2068.049542][T19945] zl10353_read_register: readreg error (reg=127, ret==0)
[ 2068.758078][ T1093] team0: Device gtp0 is up. Set it down before adding it as a team port
[ 2069.042069][T19945] usb 2-1: USB disconnect, device number 20
[ 2069.107719][ T1108] FAULT_INJECTION: forcing a failure.
[ 2069.107719][ T1108] name failslab, interval 1, probability 0, space 0, times 0
[ 2069.157458][ T1108] CPU: 0 UID: 0 PID: 1108 Comm: syz.5.8431 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2069.157517][ T1108] Tainted: [L]=SOFTLOCKUP
[ 2069.157526][ T1108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2069.157541][ T1108] Call Trace:
[ 2069.157551][ T1108]  <TASK>
[ 2069.157561][ T1108]  dump_stack_lvl+0xe8/0x150
[ 2069.157595][ T1108]  should_fail_ex+0x414/0x560
[ 2069.157626][ T1108]  should_failslab+0xa8/0x100
[ 2069.157647][ T1108]  __kmalloc_cache_noprof+0x84/0x700
[ 2069.157662][ T1108]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 2069.157685][ T1108]  ? sctp_add_bind_addr+0x8c/0x370
[ 2069.157711][ T1108]  sctp_add_bind_addr+0x8c/0x370
[ 2069.157736][ T1108]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 2069.157761][ T1108]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 2069.157784][ T1108]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 2069.157808][ T1108]  ? sctp_v6_is_any+0x64/0x80
[ 2069.157833][ T1108]  ? sctp_copy_one_addr+0x93/0x360
[ 2069.157889][ T1108]  sctp_bind_addr_copy+0xb3/0x3c0
[ 2069.157920][ T1108]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 2069.157942][ T1108]  sctp_connect_new_asoc+0x2e0/0x690
[ 2069.157961][ T1108]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 2069.157985][ T1108]  ? sctp_get_af_specific+0x29/0x80
[ 2069.158007][ T1108]  ? sctp_inet6_send_verify+0x80/0x300
[ 2069.158027][ T1108]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[ 2069.158046][ T1108]  __sctp_connect+0x5b5/0xda0
[ 2069.158071][ T1108]  ? __pfx___sctp_connect+0x10/0x10
[ 2069.158086][ T1108]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 2069.158105][ T1108]  ? __sctp_setsockopt_connectx+0xc7/0x190
[ 2069.158128][ T1108]  sctp_getsockopt_connectx3+0x1fa/0x320
[ 2069.158150][ T1108]  ? lock_sock_nested+0x6a/0x100
[ 2069.158175][ T1108]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[ 2069.158205][ T1108]  ? __local_bh_enable_ip+0xd0/0x130
[ 2069.158225][ T1108]  sctp_getsockopt+0x984/0xb90
[ 2069.158240][ T1108]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 2069.158256][ T1108]  do_sock_getsockopt+0x2b4/0x3d0
[ 2069.158277][ T1108]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2069.158297][ T1108]  ? __fget_files+0x3a0/0x420
[ 2069.158315][ T1108]  ? __fget_files+0x2a/0x420
[ 2069.158339][ T1108]  __ia32_sys_getsockopt+0x1a5/0x250
[ 2069.158366][ T1108]  __do_fast_syscall_32+0x1dc/0x570
[ 2069.158384][ T1108]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2069.158399][ T1108]  ? do_fast_syscall_32+0x34/0x80
[ 2069.158417][ T1108]  ? irqentry_exit+0x10f/0x670
[ 2069.158436][ T1108]  do_fast_syscall_32+0x34/0x80
[ 2069.158454][ T1108]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2069.158473][ T1108] RIP: 0023:0xf706d539
[ 2069.158487][ T1108] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2069.158501][ T1108] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[ 2069.158518][ T1108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084
[ 2069.158529][ T1108] RDX: 000000000000006f RSI: 0000000080000200 RDI: 0000000080000140
[ 2069.158539][ T1108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2069.158549][ T1108] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2069.158558][ T1108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2069.158580][ T1108]  </TASK>
[ 2069.483411][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8432'.
[ 2069.539160][T24661] usb 5-1: new full-speed USB device number 106 using dummy_hcd
[ 2069.699433][T24661] usb 5-1: device descriptor read/64, error -71
[ 2069.839244][ T1119] netlink: 'syz.1.8435': attribute type 10 has an invalid length.
[ 2069.858453][ T1119] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[ 2069.891583][ T1119] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 2069.923270][ T1119] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2069.939225][T24661] usb 5-1: new full-speed USB device number 107 using dummy_hcd
[ 2070.089257][T24661] usb 5-1: device descriptor read/64, error -71
[ 2070.206884][ T1124] binder: 1123:1124 ioctl c018620b 80000000 returned -14
[ 2070.219446][T24661] usb usb5-port1: attempt power cycle
[ 2070.591486][T24661] usb 5-1: new full-speed USB device number 108 using dummy_hcd
[ 2070.604482][ T1130] netlink: 'syz.1.8438': attribute type 4 has an invalid length.
[ 2070.649818][T24661] usb 5-1: device descriptor read/8, error -71
[ 2070.920282][T24661] usb 5-1: new full-speed USB device number 109 using dummy_hcd
[ 2070.980617][T24661] usb 5-1: device descriptor read/8, error -71
[ 2071.119693][T24661] usb usb5-port1: unable to enumerate USB device
[ 2071.475819][ T1149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8444'.
[ 2071.504991][ T1149] FAULT_INJECTION: forcing a failure.
[ 2071.504991][ T1149] name failslab, interval 1, probability 0, space 0, times 0
[ 2071.529082][ T1149] CPU: 0 UID: 0 PID: 1149 Comm: syz.5.8444 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2071.529118][ T1149] Tainted: [L]=SOFTLOCKUP
[ 2071.529127][ T1149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2071.529139][ T1149] Call Trace:
[ 2071.529149][ T1149]  <TASK>
[ 2071.529158][ T1149]  dump_stack_lvl+0xe8/0x150
[ 2071.529191][ T1149]  should_fail_ex+0x414/0x560
[ 2071.529233][ T1149]  should_failslab+0xa8/0x100
[ 2071.529288][ T1149]  __kvmalloc_node_noprof+0x175/0x920
[ 2071.529315][ T1149]  ? alloc_netdev_mqs+0xa6/0x11b0
[ 2071.529356][ T1149]  alloc_netdev_mqs+0xa6/0x11b0
[ 2071.529390][ T1149]  ? __pfx_vlan_setup+0x10/0x10
[ 2071.529411][ T1149]  rtnl_create_link+0x31f/0xcf0
[ 2071.529446][ T1149]  rtnl_newlink_create+0x25c/0xb00
[ 2071.529476][ T1149]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 2071.529499][ T1149]  ? __pfx___mutex_lock+0x10/0x10
[ 2071.529525][ T1149]  ? ns_capable+0x8a/0xf0
[ 2071.529543][ T1149]  rtnl_newlink+0x16e7/0x1c90
[ 2071.529572][ T1149]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2071.529591][ T1149]  ? __lock_acquire+0x6b6/0x2cf0
[ 2071.529612][ T1149]  ? __lock_acquire+0x6b6/0x2cf0
[ 2071.529629][ T1149]  ? __lock_acquire+0x6b6/0x2cf0
[ 2071.529651][ T1149]  ? unwind_next_frame+0xa5/0x23d0
[ 2071.529674][ T1149]  ? unwind_next_frame+0xa5/0x23d0
[ 2071.529696][ T1149]  ? is_bpf_text_address+0x26/0x2b0
[ 2071.529729][ T1149]  ? __lock_acquire+0x6b6/0x2cf0
[ 2071.529746][ T1149]  ? is_bpf_text_address+0x292/0x2b0
[ 2071.529769][ T1149]  ? is_bpf_text_address+0x26/0x2b0
[ 2071.529794][ T1149]  ? kernel_text_address+0xa5/0xe0
[ 2071.529818][ T1149]  ? __kernel_text_address+0xd/0x40
[ 2071.529839][ T1149]  ? unwind_get_return_address+0x4d/0x90
[ 2071.529862][ T1149]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 2071.529891][ T1149]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2071.529908][ T1149]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 2071.529928][ T1149]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 2071.529945][ T1149]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2071.529962][ T1149]  ? __lock_acquire+0x6b6/0x2cf0
[ 2071.529987][ T1149]  netlink_rcv_skb+0x208/0x470
[ 2071.530010][ T1149]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2071.530028][ T1149]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2071.530056][ T1149]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2071.530082][ T1149]  netlink_unicast+0x82f/0x9e0
[ 2071.530106][ T1149]  ? __pfx_netlink_unicast+0x10/0x10
[ 2071.530123][ T1149]  ? __alloc_skb+0x198/0x3a0
[ 2071.530140][ T1149]  ? netlink_sendmsg+0x642/0xb30
[ 2071.530159][ T1149]  ? skb_put+0x11b/0x210
[ 2071.530178][ T1149]  netlink_sendmsg+0x805/0xb30
[ 2071.530205][ T1149]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2071.530228][ T1149]  ? __import_iovec+0x5d4/0x7f0
[ 2071.530268][ T1149]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2071.530304][ T1149]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2071.530318][ T1149]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2071.530340][ T1149]  __sock_sendmsg+0x21c/0x270
[ 2071.530367][ T1149]  ____sys_sendmsg+0x505/0x820
[ 2071.530391][ T1149]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2071.530414][ T1149]  ? kstrtouint+0x6e/0xe0
[ 2071.530448][ T1149]  ___sys_sendmsg+0x21f/0x2a0
[ 2071.530469][ T1149]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2071.530488][ T1149]  ? get_pid_task+0x20/0x1f0
[ 2071.530507][ T1149]  ? get_pid_task+0x20/0x1f0
[ 2071.530525][ T1149]  ? get_pid_task+0x20/0x1f0
[ 2071.530566][ T1149]  ? __fget_files+0x2a/0x420
[ 2071.530585][ T1149]  ? __fget_files+0x3a0/0x420
[ 2071.530612][ T1149]  __sys_sendmsg+0x164/0x220
[ 2071.530634][ T1149]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2071.530660][ T1149]  ? __pfx_ksys_write+0x10/0x10
[ 2071.530684][ T1149]  __do_fast_syscall_32+0x1dc/0x570
[ 2071.530703][ T1149]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2071.530719][ T1149]  ? do_fast_syscall_32+0x34/0x80
[ 2071.530737][ T1149]  ? irqentry_exit+0x10f/0x670
[ 2071.530757][ T1149]  do_fast_syscall_32+0x34/0x80
[ 2071.530775][ T1149]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2071.530795][ T1149] RIP: 0023:0xf706d539
[ 2071.530809][ T1149] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2071.530823][ T1149] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2071.530840][ T1149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[ 2071.530851][ T1149] RDX: 0000000008000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 2071.530861][ T1149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2071.530870][ T1149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2071.530879][ T1149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2071.530902][ T1149]  </TASK>
[ 2072.162562][ T1155] FAULT_INJECTION: forcing a failure.
[ 2072.162562][ T1155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2072.200473][ T1155] CPU: 1 UID: 0 PID: 1155 Comm: syz.5.8445 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2072.200509][ T1155] Tainted: [L]=SOFTLOCKUP
[ 2072.200515][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2072.200525][ T1155] Call Trace:
[ 2072.200532][ T1155]  <TASK>
[ 2072.200539][ T1155]  dump_stack_lvl+0xe8/0x150
[ 2072.200563][ T1155]  should_fail_ex+0x414/0x560
[ 2072.200593][ T1155]  fpu__restore_sig+0x9ce/0x10d0
[ 2072.200623][ T1155]  ? __pfx_fpu__restore_sig+0x10/0x10
[ 2072.200665][ T1155]  ia32_restore_sigcontext+0x40d/0x540
[ 2072.200681][ T1155]  ? cgroup1_freezing+0x20/0x350
[ 2072.200701][ T1155]  ? __pfx_ia32_restore_sigcontext+0x10/0x10
[ 2072.200727][ T1155]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2072.200744][ T1155]  __ia32_compat_sys_rt_sigreturn+0x1a9/0x260
[ 2072.200763][ T1155]  ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10
[ 2072.200784][ T1155]  ? asm_int80_emulation+0x1a/0x20
[ 2072.200800][ T1155]  ? asm_int80_emulation+0x1a/0x20
[ 2072.200815][ T1155]  do_int80_emulation+0x11b/0x420
[ 2072.200834][ T1155]  ? clear_bhb_loop+0x60/0xb0
[ 2072.200848][ T1155]  ? clear_bhb_loop+0x60/0xb0
[ 2072.200866][ T1155]  asm_int80_emulation+0x1a/0x20
[ 2072.200880][ T1155] RIP: 0023:0xf706d537
[ 2072.200893][ T1155] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 <cd> 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2072.200907][ T1155] RSP: 002b:00000000f545d55c EFLAGS: 00000206
[ 2072.200920][ T1155] RAX: 0000000000000151 RBX: 0000000000000005 RCX: 0000000080002b00
[ 2072.200931][ T1155] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 2072.200940][ T1155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2072.200949][ T1155] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2072.200958][ T1155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2072.200980][ T1155]  </TASK>
[ 2073.229147][  T981] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 2073.449098][  T981] usb 2-1: Using ep0 maxpacket: 8
[ 2073.469990][  T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2073.482678][  T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2073.495723][  T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2073.517448][  T981] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2073.560967][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2073.599311][  T981] usb 2-1: Product: syz
[ 2073.617623][  T981] usb 2-1: Manufacturer: syz
[ 2073.644313][  T981] usb 2-1: SerialNumber: syz
[ 2073.690242][  T981] usb 2-1: config 0 descriptor??
[ 2074.297314][ T1198] netlink: 'syz.2.8457': attribute type 4 has an invalid length.
[ 2075.923319][  T981] usb 2-1: USB disconnect, device number 21
[ 2075.950351][T19956] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 2075.984399][  T770] udevd[770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2076.231958][T19956] usb 5-1: Using ep0 maxpacket: 8
[ 2076.272023][T19956] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 2076.321160][T19956] usb 5-1: config 179 has no interface number 0
[ 2076.366568][T19956] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2076.407309][T19956] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2076.487867][T19956] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 2076.591035][T19956] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 2076.641729][T19956] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2076.693828][T19956] usb 5-1: config 179 interface 65 has no altsetting 0
[ 2076.747096][T19956] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2076.789057][T19956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2076.857294][T19956] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input216
[ 2076.919381][ T1234] netlink: 'syz.2.8467': attribute type 3 has an invalid length.
[ 2076.939242][ T5186] input input216: unable to receive magic message: -110
[ 2077.014797][ T5186] input input216: unable to receive magic message: -32
[ 2077.086377][ T5186] input input216: unable to receive magic message: -32
[ 2077.187903][ T5186] input input216: unable to receive magic message: -32
[ 2077.233800][ T5186] input input216: unable to receive magic message: -32
[ 2077.294543][T24661] usb 5-1: USB disconnect, device number 110
[ 2077.294770][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2077.309063][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2077.321683][ T5186] input input216: unable to receive magic message: -71
[ 2077.969332][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2078.074562][ T1251] netlink: 'syz.5.8469': attribute type 3 has an invalid length.
[ 2078.115172][ T1251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8469'.
[ 2079.117119][ T1272] netlink: 'syz.1.8477': attribute type 4 has an invalid length.
[ 2079.126842][ T1271] netlink: 'syz.2.8476': attribute type 4 has an invalid length.
[ 2079.570778][ T1283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8479'.
[ 2079.763574][ T1286] FAULT_INJECTION: forcing a failure.
[ 2079.763574][ T1286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2079.783021][ T1286] CPU: 1 UID: 0 PID: 1286 Comm: syz.5.8480 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2079.783057][ T1286] Tainted: [L]=SOFTLOCKUP
[ 2079.783067][ T1286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2079.783080][ T1286] Call Trace:
[ 2079.783090][ T1286]  <TASK>
[ 2079.783100][ T1286]  dump_stack_lvl+0xe8/0x150
[ 2079.783133][ T1286]  should_fail_ex+0x414/0x560
[ 2079.783177][ T1286]  _copy_from_user+0x2d/0xb0
[ 2079.783207][ T1286]  io_query+0x10f/0x630
[ 2079.783236][ T1286]  ? __pfx_io_query+0x10/0x10
[ 2079.783262][ T1286]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2079.783296][ T1286]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2079.783330][ T1286]  __se_sys_io_uring_register+0x141/0x1200
[ 2079.783356][ T1286]  ? fput+0xa0/0xd0
[ 2079.783385][ T1286]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[ 2079.783405][ T1286]  ? ksys_write+0x22a/0x250
[ 2079.783429][ T1286]  ? __pfx_ksys_write+0x10/0x10
[ 2079.783463][ T1286]  __do_fast_syscall_32+0x1dc/0x570
[ 2079.783489][ T1286]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2079.783511][ T1286]  ? do_fast_syscall_32+0x34/0x80
[ 2079.783536][ T1286]  ? irqentry_exit+0x10f/0x670
[ 2079.783564][ T1286]  do_fast_syscall_32+0x34/0x80
[ 2079.783590][ T1286]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2079.783617][ T1286] RIP: 0023:0xf706d539
[ 2079.783637][ T1286] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2079.783657][ T1286] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab
[ 2079.783681][ T1286] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000023
[ 2079.783697][ T1286] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2079.783710][ T1286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2079.783723][ T1286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2079.783736][ T1286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2079.783767][ T1286]  </TASK>
[ 2080.819142][T24661] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 2080.989113][T24661] usb 6-1: device descriptor read/64, error -71
[ 2081.259178][T24661] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 2081.446124][T19947] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[ 2081.453812][T24661] usb 6-1: device descriptor read/64, error -71
[ 2081.527336][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8490'.
[ 2081.539204][T19945] usb 5-1: new full-speed USB device number 111 using dummy_hcd
[ 2081.570455][T24661] usb usb6-port1: attempt power cycle
[ 2081.611299][T19947] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2081.629243][T19947] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[ 2081.649169][T19947] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2081.658083][T19947] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2081.690942][T19947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2081.711995][T19945] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2081.722765][T19947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2081.751197][T19945] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 2081.769206][T19945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2081.780493][T19947] usb 2-1: string descriptor 0 read error: -22
[ 2081.792999][T19947] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2081.809797][T19945] usb 5-1: Product: syz
[ 2081.814004][T19945] usb 5-1: Manufacturer: syz
[ 2081.818599][T19945] usb 5-1: SerialNumber: syz
[ 2081.830091][T19947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2081.859824][T19947] usb 2-1: config 0 descriptor??
[ 2081.874993][T19945] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 2081.886906][ T1313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2081.909811][T24661] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 2081.919415][T19947] hub 2-1:0.0: bad descriptor, ignoring hub
[ 2081.936700][T19947] hub 2-1:0.0: probe with driver hub failed with error -5
[ 2081.950972][T24661] usb 6-1: device descriptor read/8, error -71
[ 2081.967989][T19947] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input217
[ 2082.019998][    C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1
[ 2082.042182][ T1323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2082.080599][ T1323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2082.099633][T19945] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 2082.176798][T19945] usb 5-1: USB disconnect, device number 111
[ 2082.219194][T24661] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 2082.261714][T24661] usb 6-1: device descriptor read/8, error -71
[ 2082.372902][T24661] usb usb6-port1: unable to enumerate USB device
[ 2082.682439][T24661] usb 2-1: USB disconnect, device number 22
[ 2082.804112][ T1330] loop2: detected capacity change from 0 to 7
[ 2082.834038][T25566]  loop2:
[ 2082.837081][T25566] loop2: partition table partially beyond EOD, truncated
[ 2082.868441][ T1330]  loop2:
[ 2082.881877][ T1330] loop2: partition table partially beyond EOD, truncated
[ 2083.060453][ T1332] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8495'.
[ 2083.417995][ T1343] netlink: 'syz.1.8497': attribute type 4 has an invalid length.
[ 2083.480431][ T1346] netlink: 'syz.2.8498': attribute type 4 has an invalid length.
[ 2084.069264][T19956] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[ 2084.297039][T19956] usb 6-1: config 0 has an invalid interface number: 239 but max is 0
[ 2084.338717][T19956] usb 6-1: config 0 has no interface number 0
[ 2084.370573][T19956] usb 6-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64
[ 2084.421138][T19956] usb 6-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[ 2084.445216][ T1359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8501'.
[ 2084.468383][T19956] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 2084.511183][T19956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2084.545844][T19956] usb 6-1: Product: syz
[ 2084.569812][T19956] usb 6-1: Manufacturer: syz
[ 2084.592983][T19956] usb 6-1: SerialNumber: syz
[ 2084.631209][T19956] usb 6-1: config 0 descriptor??
[ 2084.903878][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2084.966026][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2085.229179][T19945] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 2085.441943][ T1372] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8503'.
[ 2085.454478][ T1372] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8503'.
[ 2085.464406][ T1371] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8504'.
[ 2085.469344][T19945] usb 5-1: Using ep0 maxpacket: 8
[ 2085.511736][T19945] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2085.545574][T19945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2085.586453][T19945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2085.638195][T19945] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2085.652302][T19956] asix 6-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 2085.678050][T19945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2085.721420][T19945] usb 5-1: Product: syz
[ 2085.725619][T19945] usb 5-1: Manufacturer: syz
[ 2085.739412][T19945] usb 5-1: SerialNumber: syz
[ 2085.769976][T19945] usb 5-1: config 0 descriptor??
[ 2085.779638][T19956] asix 6-1:0.239: probe with driver asix failed with error -71
[ 2085.978106][T19956] usb 6-1: USB disconnect, device number 65
[ 2086.699744][T19956] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 2086.884300][T19956] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[ 2086.901357][T19956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2086.922364][T19956] usb 6-1: config 0 has no interface number 0
[ 2086.937998][T19956] usb 6-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[ 2086.982772][T19956] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2087.020571][T19956] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 239
[ 2087.067669][T19956] usb 6-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[ 2087.088817][T19956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2087.127984][T19956] usb 6-1: Product: syz
[ 2087.132859][T19956] usb 6-1: Manufacturer: syz
[ 2087.137671][T19956] usb 6-1: SerialNumber: syz
[ 2087.171412][T19956] usb 6-1: config 0 descriptor??
[ 2087.215891][T19956] HFC-S_USB 6-1:0.117: probe with driver HFC-S_USB failed with error -5
[ 2087.310651][ T1396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8512'.
[ 2087.633306][ T1403] netlink: 'syz.2.8515': attribute type 10 has an invalid length.
[ 2087.643949][ T1403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8515'.
[ 2087.663412][ T1403] debugfs: 'netdev:nicvf0' already exists in 'phy41'
[ 2087.732556][ T1405] netlink: 'syz.1.8514': attribute type 4 has an invalid length.
[ 2088.010930][T19945] usb 5-1: USB disconnect, device number 112
[ 2088.091455][  T770] udevd[770]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2088.152499][ T1412] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8517'.
[ 2088.187321][ T1412] netlink: 6964 bytes leftover after parsing attributes in process `syz.4.8517'.
[ 2088.729397][T19947] usb 5-1: new full-speed USB device number 113 using dummy_hcd
[ 2088.932376][T19947] usb 5-1: config 0 has an invalid interface number: 139 but max is 0
[ 2088.960597][T19947] usb 5-1: config 0 has no interface number 0
[ 2088.971954][T19947] usb 5-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2088.989262][T19947] usb 5-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[ 2089.019431][T19947] usb 5-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[ 2089.050226][T19947] usb 5-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2089.075843][T19947] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[ 2089.090306][T19947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2089.105876][T19947] usb 5-1: Product: syz
[ 2089.112552][T19947] usb 5-1: Manufacturer: syz
[ 2089.117479][T19947] usb 5-1: SerialNumber: syz
[ 2089.128615][T19947] usb 5-1: config 0 descriptor??
[ 2089.139662][ T1417] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2089.148883][ T1417] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2089.349847][T19956] usb 6-1: USB disconnect, device number 66
[ 2089.585650][ T1428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8523'.
[ 2090.298882][ T1447] tipc: Invalid UDP bearer configuration
[ 2090.298923][ T1447] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2090.314930][T19945] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 2090.489298][T19945] usb 3-1: Using ep0 maxpacket: 8
[ 2090.506060][T19945] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2090.535880][ T1449] netlink: 'syz.1.8530': attribute type 1 has an invalid length.
[ 2090.551349][T19945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2090.570852][ T1449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8530'.
[ 2090.579845][T19945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2090.603878][T19945] usb 3-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2090.615581][T19945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2090.633840][T19945] usb 3-1: Product: syz
[ 2090.642003][T19945] usb 3-1: Manufacturer: syz
[ 2090.655408][T19945] usb 3-1: SerialNumber: syz
[ 2090.669098][T19945] usb 3-1: config 0 descriptor??
[ 2091.574898][T19947] mct_u232 5-1:0.139: MCT U232 converter detected
[ 2091.598240][T19947] usb 5-1: MCT U232 converter now attached to ttyUSB0
[ 2091.667460][T19947] usb 5-1: USB disconnect, device number 113
[ 2091.728614][T19947] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0
[ 2091.777018][T19947] mct_u232 5-1:0.139: device disconnected
[ 2092.865278][ T1471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8536'.
[ 2093.134170][ T1473] FAULT_INJECTION: forcing a failure.
[ 2093.134170][ T1473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2093.183200][ T1473] CPU: 0 UID: 0 PID: 1473 Comm: syz.4.8537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2093.183226][ T1473] Tainted: [L]=SOFTLOCKUP
[ 2093.183232][ T1473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2093.183242][ T1473] Call Trace:
[ 2093.183248][ T1473]  <TASK>
[ 2093.183256][ T1473]  dump_stack_lvl+0xe8/0x150
[ 2093.183283][ T1473]  should_fail_ex+0x414/0x560
[ 2093.183313][ T1473]  _copy_from_user+0x2d/0xb0
[ 2093.183333][ T1473]  kstrtouint_from_user+0xc4/0x170
[ 2093.183351][ T1473]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2093.183379][ T1473]  proc_fail_nth_write+0x88/0x200
[ 2093.183396][ T1473]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2093.183417][ T1473]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2093.183435][ T1473]  vfs_write+0x27e/0xb30
[ 2093.183481][ T1473]  ? __pfx_vfs_write+0x10/0x10
[ 2093.183505][ T1473]  ? __fget_files+0x2a/0x420
[ 2093.183535][ T1473]  ? __fget_files+0x3a0/0x420
[ 2093.183562][ T1473]  ? __fget_files+0x2a/0x420
[ 2093.183620][ T1473]  ksys_write+0x145/0x250
[ 2093.183647][ T1473]  ? __pfx_ksys_write+0x10/0x10
[ 2093.183682][ T1473]  __do_fast_syscall_32+0x1dc/0x570
[ 2093.183709][ T1473]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2093.183732][ T1473]  ? do_fast_syscall_32+0x34/0x80
[ 2093.183758][ T1473]  ? irqentry_exit+0x10f/0x670
[ 2093.183786][ T1473]  do_fast_syscall_32+0x34/0x80
[ 2093.183814][ T1473]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2093.183848][ T1473] RIP: 0023:0xf700d539
[ 2093.183868][ T1473] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2093.183888][ T1473] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 2093.183912][ T1473] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd620
[ 2093.183928][ T1473] RDX: 0000000000000001 RSI: 00000000f73a6ff4 RDI: 0000000000000000
[ 2093.183942][ T1473] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 2093.183955][ T1473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2093.183970][ T1473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2093.184000][ T1473]  </TASK>
[ 2093.485690][T19945] usb 3-1: USB disconnect, device number 110
[ 2093.525973][  T770] udevd[770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2093.732295][ T1483] netlink: 'syz.5.8538': attribute type 4 has an invalid length.
[ 2093.936351][ T1486] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8541'.
[ 2094.120289][   T30] audit: type=1326 audit(1768473597.232:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.221278][   T30] audit: type=1326 audit(1768473597.232:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.266628][   T30] audit: type=1326 audit(1768473597.272:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.324165][   T30] audit: type=1326 audit(1768473597.272:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.427414][   T30] audit: type=1326 audit(1768473597.272:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.555692][   T30] audit: type=1326 audit(1768473597.282:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.649928][   T30] audit: type=1326 audit(1768473597.282:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.681219][ T1501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8547'.
[ 2094.736529][   T30] audit: type=1326 audit(1768473597.282:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.819073][   T30] audit: type=1326 audit(1768473597.282:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2094.910042][   T30] audit: type=1326 audit(1768473597.282:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.2.8542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[ 2095.184019][ T1509] sctp: [Deprecated]: syz.4.8549 (pid 1509) Use of int in max_burst socket option deprecated.
[ 2095.184019][ T1509] Use struct sctp_assoc_value instead
[ 2096.122006][ T1531] netlink: 'syz.6.8556': attribute type 1 has an invalid length.
[ 2096.262934][ T1531] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 2096.499216][T19947] usb 5-1: new full-speed USB device number 114 using dummy_hcd
[ 2096.712902][T19947] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2096.728053][ T1546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8558'.
[ 2096.790473][T19947] usb 5-1: not running at top speed; connect to a high speed hub
[ 2096.810618][T19947] usb 5-1: config 17 has an invalid interface number: 8 but max is 1
[ 2096.818747][T19947] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 2096.849042][T19947] usb 5-1: config 17 has no interface number 0
[ 2096.855603][T19947] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 2096.881562][T19947] usb 5-1: config 17 interface 8 has no altsetting 0
[ 2096.904377][T19947] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 2096.919599][T19947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2096.927764][T19947] usb 5-1: Product: syz
[ 2096.938249][T19947] usb 5-1: Manufacturer: syz
[ 2096.943053][T19947] usb 5-1: SerialNumber: syz
[ 2097.761767][T19947] usb 5-1: selecting invalid altsetting 0
[ 2097.779142][T19947] usb 5-1: 8:6 : no UAC_FORMAT_TYPE desc
[ 2097.784824][T19947] usb 5-1: selecting invalid altsetting 0
[ 2097.873509][T19947] usb 5-1: USB disconnect, device number 114
[ 2097.930040][ T1565] tipc: Started in network mode
[ 2097.961166][ T1565] tipc: Node identity fa1d584b58b3, cluster identity 4711
[ 2097.991335][ T1566] netlink: 'syz.2.8564': attribute type 4 has an invalid length.
[ 2098.018323][ T1565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2098.051121][ T1567] syzkaller0: entered promiscuous mode
[ 2098.072076][ T1567] syzkaller0: entered allmulticast mode
[ 2098.172845][ T1565] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 2098.557771][ T1561] tipc: Resetting bearer <eth:syzkaller0>
[ 2098.643936][ T1561] tipc: Disabling bearer <eth:syzkaller0>
[ 2098.908745][ T1576] FAULT_INJECTION: forcing a failure.
[ 2098.908745][ T1576] name failslab, interval 1, probability 0, space 0, times 0
[ 2098.981439][ T1576] CPU: 1 UID: 0 PID: 1576 Comm: syz.5.8567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2098.981472][ T1576] Tainted: [L]=SOFTLOCKUP
[ 2098.981478][ T1576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2098.981487][ T1576] Call Trace:
[ 2098.981494][ T1576]  <TASK>
[ 2098.981501][ T1576]  dump_stack_lvl+0xe8/0x150
[ 2098.981525][ T1576]  should_fail_ex+0x414/0x560
[ 2098.981554][ T1576]  should_failslab+0xa8/0x100
[ 2098.981575][ T1576]  __kmalloc_cache_noprof+0x84/0x700
[ 2098.981592][ T1576]  ? sctp_v6_to_sk_saddr+0x100/0x1c0
[ 2098.981615][ T1576]  ? sctp_association_new+0x89/0x25e0
[ 2098.981632][ T1576]  ? __asan_memcpy+0x40/0x70
[ 2098.981658][ T1576]  sctp_association_new+0x89/0x25e0
[ 2098.981675][ T1576]  ? sctp_do_bind+0x65f/0x9d0
[ 2098.981694][ T1576]  ? __ipv6_addr_type+0x247/0x2f0
[ 2098.981712][ T1576]  sctp_connect_new_asoc+0x2c5/0x690
[ 2098.981730][ T1576]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 2098.981751][ T1576]  ? __local_bh_enable_ip+0xd0/0x130
[ 2098.981766][ T1576]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 2098.981782][ T1576]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 2098.981800][ T1576]  sctp_sendmsg+0x155c/0x2840
[ 2098.981824][ T1576]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 2098.981838][ T1576]  ? aa_sk_perm+0x15f/0x920
[ 2098.981857][ T1576]  ? aa_sk_perm+0x7ee/0x920
[ 2098.981879][ T1576]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2098.981899][ T1576]  ? sock_rps_record_flow+0x19/0x410
[ 2098.981922][ T1576]  ? inet_sendmsg+0x2f4/0x370
[ 2098.981945][ T1576]  __sock_sendmsg+0x19c/0x270
[ 2098.981971][ T1576]  __sys_sendto+0x3bd/0x520
[ 2098.981989][ T1576]  ? __pfx___sys_sendto+0x10/0x10
[ 2098.982004][ T1576]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2098.982031][ T1576]  ? __fget_files+0x3a0/0x420
[ 2098.982057][ T1576]  ? ksys_write+0x22a/0x250
[ 2098.982073][ T1576]  ? __pfx_ksys_write+0x10/0x10
[ 2098.982088][ T1576]  ? rcu_is_watching+0x15/0xb0
[ 2098.982108][ T1576]  __ia32_sys_sendto+0xdd/0x100
[ 2098.982128][ T1576]  __do_fast_syscall_32+0x1dc/0x570
[ 2098.982145][ T1576]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2098.982160][ T1576]  ? do_fast_syscall_32+0x34/0x80
[ 2098.982177][ T1576]  ? irqentry_exit+0x10f/0x670
[ 2098.982196][ T1576]  do_fast_syscall_32+0x34/0x80
[ 2098.982213][ T1576]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2098.982232][ T1576] RIP: 0023:0xf706d539
[ 2098.982245][ T1576] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2098.982259][ T1576] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[ 2098.982275][ T1576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[ 2098.982286][ T1576] RDX: 0000000000000001 RSI: 000000000400c0d4 RDI: 0000000080000140
[ 2098.982296][ T1576] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[ 2098.982305][ T1576] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2098.982314][ T1576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2098.982353][ T1576]  </TASK>
[ 2099.519778][ T1580] netlink: 'syz.5.8569': attribute type 13 has an invalid length.
[ 2099.767604][ T1580] gretap0: refused to change device tx_queue_len
[ 2099.791676][ T1580] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2100.469316][T19945] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 2100.659279][T19945] usb 3-1: device descriptor read/64, error -71
[ 2100.906678][ T1593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8575'.
[ 2100.949437][T19945] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 2101.031260][ T1598] FAULT_INJECTION: forcing a failure.
[ 2101.031260][ T1598] name failslab, interval 1, probability 0, space 0, times 0
[ 2101.060178][ T1598] CPU: 1 UID: 0 PID: 1598 Comm: syz.5.8577 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2101.060216][ T1598] Tainted: [L]=SOFTLOCKUP
[ 2101.060225][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2101.060239][ T1598] Call Trace:
[ 2101.060248][ T1598]  <TASK>
[ 2101.060258][ T1598]  dump_stack_lvl+0xe8/0x150
[ 2101.060292][ T1598]  should_fail_ex+0x414/0x560
[ 2101.060333][ T1598]  should_failslab+0xa8/0x100
[ 2101.060362][ T1598]  __kmalloc_cache_noprof+0x84/0x700
[ 2101.060384][ T1598]  ? sctp_v6_to_sk_saddr+0x100/0x1c0
[ 2101.060416][ T1598]  ? sctp_association_new+0x89/0x25e0
[ 2101.060446][ T1598]  ? __asan_memcpy+0x40/0x70
[ 2101.060483][ T1598]  sctp_association_new+0x89/0x25e0
[ 2101.060507][ T1598]  ? sctp_do_bind+0x65f/0x9d0
[ 2101.060536][ T1598]  ? __ipv6_addr_type+0x247/0x2f0
[ 2101.060563][ T1598]  sctp_connect_new_asoc+0x2c5/0x690
[ 2101.060590][ T1598]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 2101.060622][ T1598]  ? __local_bh_enable_ip+0xd0/0x130
[ 2101.060643][ T1598]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 2101.060666][ T1598]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 2101.060693][ T1598]  sctp_sendmsg+0x155c/0x2840
[ 2101.060728][ T1598]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 2101.060749][ T1598]  ? aa_sk_perm+0x15f/0x920
[ 2101.060777][ T1598]  ? aa_sk_perm+0x7ee/0x920
[ 2101.060822][ T1598]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2101.060852][ T1598]  ? sock_rps_record_flow+0x19/0x410
[ 2101.060885][ T1598]  ? inet_sendmsg+0x2f4/0x370
[ 2101.060918][ T1598]  __sock_sendmsg+0x19c/0x270
[ 2101.060954][ T1598]  __sys_sendto+0x3bd/0x520
[ 2101.060981][ T1598]  ? __pfx___sys_sendto+0x10/0x10
[ 2101.061004][ T1598]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2101.061043][ T1598]  ? __fget_files+0x3a0/0x420
[ 2101.061082][ T1598]  ? ksys_write+0x22a/0x250
[ 2101.061106][ T1598]  ? __pfx_ksys_write+0x10/0x10
[ 2101.061132][ T1598]  __ia32_sys_sendto+0xdd/0x100
[ 2101.061162][ T1598]  __do_fast_syscall_32+0x1dc/0x570
[ 2101.061188][ T1598]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2101.061209][ T1598]  ? do_fast_syscall_32+0x34/0x80
[ 2101.061234][ T1598]  ? irqentry_exit+0x10f/0x670
[ 2101.061261][ T1598]  do_fast_syscall_32+0x34/0x80
[ 2101.061287][ T1598]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2101.061315][ T1598] RIP: 0023:0xf706d539
[ 2101.061334][ T1598] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2101.061353][ T1598] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[ 2101.061376][ T1598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[ 2101.061392][ T1598] RDX: 0000000000000001 RSI: 000000000400c0d4 RDI: 0000000080000140
[ 2101.061405][ T1598] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[ 2101.061418][ T1598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2101.061431][ T1598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2101.061468][ T1598]  </TASK>
[ 2101.139328][T19945] usb 3-1: device descriptor read/64, error -71
[ 2101.496010][T19945] usb usb3-port1: attempt power cycle
[ 2101.607506][ T1608] netlink: 'syz.1.8580': attribute type 4 has an invalid length.
[ 2101.839155][T19945] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 2101.894162][T19945] usb 3-1: device descriptor read/8, error -71
[ 2102.179217][T19945] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 2102.229113][T19945] usb 3-1: device descriptor read/8, error -71
[ 2102.350890][T19945] usb usb3-port1: unable to enumerate USB device
[ 2102.840845][ T1629] netlink: 'syz.6.8586': attribute type 9 has an invalid length.
[ 2103.459135][ T1637] FAULT_INJECTION: forcing a failure.
[ 2103.459135][ T1637] name failslab, interval 1, probability 0, space 0, times 0
[ 2103.492475][ T1637] CPU: 1 UID: 0 PID: 1637 Comm: syz.4.8590 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2103.492512][ T1637] Tainted: [L]=SOFTLOCKUP
[ 2103.492521][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2103.492534][ T1637] Call Trace:
[ 2103.492544][ T1637]  <TASK>
[ 2103.492554][ T1637]  dump_stack_lvl+0xe8/0x150
[ 2103.492587][ T1637]  should_fail_ex+0x414/0x560
[ 2103.492628][ T1637]  should_failslab+0xa8/0x100
[ 2103.492657][ T1637]  __kmalloc_noprof+0xdf/0x800
[ 2103.492680][ T1637]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 2103.492710][ T1637]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 2103.492741][ T1637]  genl_family_rcv_msg_doit+0xb8/0x300
[ 2103.492771][ T1637]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2103.492803][ T1637]  ? apparmor_capable+0x137/0x1a0
[ 2103.492827][ T1637]  ? bpf_lsm_capable+0x9/0x20
[ 2103.492852][ T1637]  ? security_capable+0x7e/0x2e0
[ 2103.492884][ T1637]  genl_rcv_msg+0x60e/0x790
[ 2103.492914][ T1637]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2103.492934][ T1637]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2103.492958][ T1637]  ? __pfx_nl80211_trigger_scan+0x10/0x10
[ 2103.492989][ T1637]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2103.493028][ T1637]  netlink_rcv_skb+0x208/0x470
[ 2103.493059][ T1637]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2103.493083][ T1637]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2103.493109][ T1637]  ? genl_rcv+0x19/0x40
[ 2103.493147][ T1637]  ? down_read+0x274/0x2e0
[ 2103.493172][ T1637]  ? genl_rcv+0xd/0x40
[ 2103.493194][ T1637]  genl_rcv+0x28/0x40
[ 2103.493211][ T1637]  netlink_unicast+0x82f/0x9e0
[ 2103.493253][ T1637]  ? __pfx_netlink_unicast+0x10/0x10
[ 2103.493277][ T1637]  ? __alloc_skb+0x198/0x3a0
[ 2103.493309][ T1637]  ? netlink_sendmsg+0x642/0xb30
[ 2103.493336][ T1637]  ? skb_put+0x11b/0x210
[ 2103.493365][ T1637]  netlink_sendmsg+0x805/0xb30
[ 2103.493404][ T1637]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2103.493436][ T1637]  ? __import_iovec+0x5d4/0x7f0
[ 2103.493460][ T1637]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2103.493490][ T1637]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2103.493510][ T1637]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2103.493539][ T1637]  __sock_sendmsg+0x21c/0x270
[ 2103.493576][ T1637]  ____sys_sendmsg+0x505/0x820
[ 2103.493609][ T1637]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2103.493642][ T1637]  ? kstrtouint+0x6e/0xe0
[ 2103.493681][ T1637]  ___sys_sendmsg+0x21f/0x2a0
[ 2103.493710][ T1637]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2103.493745][ T1637]  ? get_pid_task+0x20/0x1f0
[ 2103.493776][ T1637]  ? get_pid_task+0x20/0x1f0
[ 2103.493808][ T1637]  ? get_pid_task+0x20/0x1f0
[ 2103.493866][ T1637]  ? __fget_files+0x2a/0x420
[ 2103.493892][ T1637]  ? __fget_files+0x3a0/0x420
[ 2103.493931][ T1637]  __sys_sendmsg+0x164/0x220
[ 2103.493961][ T1637]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2103.493999][ T1637]  ? __pfx_ksys_write+0x10/0x10
[ 2103.494033][ T1637]  __do_fast_syscall_32+0x1dc/0x570
[ 2103.494059][ T1637]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2103.494080][ T1637]  ? do_fast_syscall_32+0x34/0x80
[ 2103.494105][ T1637]  ? irqentry_exit+0x10f/0x670
[ 2103.494131][ T1637]  do_fast_syscall_32+0x34/0x80
[ 2103.494157][ T1637]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2103.494183][ T1637] RIP: 0023:0xf700d539
[ 2103.494203][ T1637] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2103.494229][ T1637] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2103.494252][ T1637] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[ 2103.494267][ T1637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2103.494280][ T1637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2103.494293][ T1637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2103.494306][ T1637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2103.494338][ T1637]  </TASK>
[ 2104.214602][  T981] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 2104.222841][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2104.222902][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2104.297117][ T1652] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8594'.
[ 2104.379399][  T981] usb 5-1: Using ep0 maxpacket: 8
[ 2104.388945][  T981] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 2104.447930][  T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2104.466179][  T981] usb 5-1: config 0 has no interfaces?
[ 2104.472476][  T981] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2104.483440][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2104.511128][  T981] usb 5-1: config 0 descriptor??
[ 2104.561846][ T1656] pim6reg0: tun_chr_ioctl cmd 1074812118
[ 2104.944719][ T1665] syzkaller0: entered promiscuous mode
[ 2104.963704][ T1665] syzkaller0: entered allmulticast mode
[ 2105.033717][ T1665] FAULT_INJECTION: forcing a failure.
[ 2105.033717][ T1665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2105.076818][ T1665] CPU: 1 UID: 0 PID: 1665 Comm: syz.2.8597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2105.076856][ T1665] Tainted: [L]=SOFTLOCKUP
[ 2105.076864][ T1665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2105.076878][ T1665] Call Trace:
[ 2105.076888][ T1665]  <TASK>
[ 2105.076898][ T1665]  dump_stack_lvl+0xe8/0x150
[ 2105.076931][ T1665]  should_fail_ex+0x414/0x560
[ 2105.076972][ T1665]  _copy_from_user+0x2d/0xb0
[ 2105.077002][ T1665]  __sys_sendto+0x25c/0x520
[ 2105.077031][ T1665]  ? __pfx___sys_sendto+0x10/0x10
[ 2105.077053][ T1665]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2105.077093][ T1665]  ? __fget_files+0x3a0/0x420
[ 2105.077141][ T1665]  ? ksys_write+0x22a/0x250
[ 2105.077165][ T1665]  ? __pfx_ksys_write+0x10/0x10
[ 2105.077192][ T1665]  __ia32_sys_sendto+0xdd/0x100
[ 2105.077222][ T1665]  __do_fast_syscall_32+0x1dc/0x570
[ 2105.077247][ T1665]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2105.077271][ T1665]  ? do_fast_syscall_32+0x34/0x80
[ 2105.077293][ T1665]  ? irqentry_exit+0x10f/0x670
[ 2105.077318][ T1665]  do_fast_syscall_32+0x34/0x80
[ 2105.077342][ T1665]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2105.077366][ T1665] RIP: 0023:0xf708d539
[ 2105.077384][ T1665] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2105.077402][ T1665] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[ 2105.077424][ T1665] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440
[ 2105.077438][ T1665] RDX: 000000000000000e RSI: 00000000000400d0 RDI: 00000000800001c0
[ 2105.077451][ T1665] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[ 2105.077464][ T1665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2105.077476][ T1665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2105.077505][ T1665]  </TASK>
[ 2105.140304][T19945] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[ 2105.461209][T19945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2105.481404][T19945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2105.506646][T19945] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2105.524918][T19945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2105.534716][T19945] usb 2-1: Product: syz
[ 2105.538906][T19945] usb 2-1: Manufacturer: syz
[ 2105.544178][T19945] usb 2-1: SerialNumber: syz
[ 2106.455180][ T1673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8599'.
[ 2106.763599][T19945] usb 2-1: 0:2 : does not exist
[ 2106.791425][T19945] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 2106.852944][T19945] usb 2-1: USB disconnect, device number 23
[ 2106.888385][  T770] udevd[770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2107.035506][  T981] usb 5-1: USB disconnect, device number 115
[ 2108.009555][  T981] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 2108.175032][ T1693] netlink: 'syz.6.8605': attribute type 4 has an invalid length.
[ 2108.188564][  T981] usb 3-1: Using ep0 maxpacket: 32
[ 2108.206824][  T981] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[ 2108.217974][  T981] usb 3-1: config 0 has no interface number 0
[ 2108.267080][  T981] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2108.319182][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2108.330741][  T981] usb 3-1: Product: syz
[ 2108.344026][  T981] usb 3-1: Manufacturer: syz
[ 2108.357584][  T981] usb 3-1: SerialNumber: syz
[ 2108.428277][  T981] usb 3-1: config 0 descriptor??
[ 2108.486930][  T981] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2108.572732][ T1697] netlink: 'syz.1.8604': attribute type 9 has an invalid length.
[ 2108.669105][  T981] usb 3-1: qt2_setup_urbs - submit read urb failed -8
[ 2108.733834][  T981] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8
[ 2110.440176][ T1718] FAULT_INJECTION: forcing a failure.
[ 2110.440176][ T1718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2110.480749][ T1718] CPU: 1 UID: 0 PID: 1718 Comm: syz.6.8612 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2110.480786][ T1718] Tainted: [L]=SOFTLOCKUP
[ 2110.480798][ T1718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2110.480808][ T1718] Call Trace:
[ 2110.480815][ T1718]  <TASK>
[ 2110.480822][ T1718]  dump_stack_lvl+0xe8/0x150
[ 2110.480846][ T1718]  should_fail_ex+0x414/0x560
[ 2110.480874][ T1718]  _copy_from_iter+0x1cd/0x1630
[ 2110.480899][ T1718]  ? __pfx__copy_from_iter+0x10/0x10
[ 2110.480939][ T1718]  ? __build_skb_around+0x22d/0x3c0
[ 2110.480968][ T1718]  ? __alloc_skb+0x198/0x3a0
[ 2110.480993][ T1718]  ? skb_put+0x11b/0x210
[ 2110.481026][ T1718]  pfkey_sendmsg+0x230/0x1090
[ 2110.481052][ T1718]  ? __lock_acquire+0x6b6/0x2cf0
[ 2110.481071][ T1718]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 2110.481090][ T1718]  ? aa_sk_perm+0x15f/0x920
[ 2110.481111][ T1718]  ? aa_sk_perm+0x7ee/0x920
[ 2110.481133][ T1718]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2110.481151][ T1718]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[ 2110.481174][ T1718]  ? __asan_memset+0x22/0x50
[ 2110.481199][ T1718]  ? __import_iovec+0x5d4/0x7f0
[ 2110.481216][ T1718]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2110.481244][ T1718]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2110.481259][ T1718]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 2110.481278][ T1718]  __sock_sendmsg+0x21c/0x270
[ 2110.481304][ T1718]  ____sys_sendmsg+0x505/0x820
[ 2110.481327][ T1718]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2110.481350][ T1718]  ? kstrtouint+0x6e/0xe0
[ 2110.481379][ T1718]  ___sys_sendmsg+0x21f/0x2a0
[ 2110.481400][ T1718]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2110.481418][ T1718]  ? get_pid_task+0x20/0x1f0
[ 2110.481438][ T1718]  ? get_pid_task+0x20/0x1f0
[ 2110.481456][ T1718]  ? get_pid_task+0x20/0x1f0
[ 2110.481497][ T1718]  ? __fget_files+0x2a/0x420
[ 2110.481515][ T1718]  ? __fget_files+0x3a0/0x420
[ 2110.481541][ T1718]  __sys_sendmsg+0x164/0x220
[ 2110.481562][ T1718]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2110.481588][ T1718]  ? __pfx_ksys_write+0x10/0x10
[ 2110.481611][ T1718]  __do_fast_syscall_32+0x1dc/0x570
[ 2110.481630][ T1718]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2110.481645][ T1718]  ? do_fast_syscall_32+0x34/0x80
[ 2110.481662][ T1718]  ? irqentry_exit+0x10f/0x670
[ 2110.481680][ T1718]  do_fast_syscall_32+0x34/0x80
[ 2110.481698][ T1718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2110.481722][ T1718] RIP: 0023:0xf7f27539
[ 2110.481736][ T1718] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2110.481750][ T1718] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2110.481766][ T1718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[ 2110.481777][ T1718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2110.481786][ T1718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2110.481795][ T1718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2110.481805][ T1718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2110.481826][ T1718]  </TASK>
[ 2111.154826][ T1729] netlink: 'syz.6.8614': attribute type 4 has an invalid length.
[ 2111.249258][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 2111.305753][T19945] usb 3-1: USB disconnect, device number 115
[ 2111.329647][T24661] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 2111.522314][T24661] usb 6-1: Using ep0 maxpacket: 16
[ 2111.562551][T24661] usb 6-1: config index 0 descriptor too short (expected 65, got 36)
[ 2111.584932][T24661] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2111.635059][T24661] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 2111.667611][T24661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2111.718213][T24661] usb 6-1: config 0 descriptor??
[ 2111.775596][T24661] pxrc 6-1:0.0: Could not find endpoint
[ 2111.905499][ T1740] netlink: 'syz.4.8617': attribute type 13 has an invalid length.
[ 2111.987177][T24661] usb 6-1: USB disconnect, device number 67
[ 2112.968720][ T1740] bond0: left allmulticast mode
[ 2112.990221][ T1740] bond0: left promiscuous mode
[ 2113.490817][ T1761] binder: 1760:1761 ioctl c018620c 0 returned -14
[ 2114.779989][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8632'.
[ 2114.841932][ T1795] netlink: 'syz.1.8632': attribute type 2 has an invalid length.
[ 2114.854052][ T1795] fuse: Unknown parameter '\e'
[ 2114.895885][ T1770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8627'.
[ 2114.909335][  T981] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2115.069370][  T981] usb 5-1: Using ep0 maxpacket: 8
[ 2115.092830][  T981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2115.111758][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2115.125099][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2115.163762][  T981] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[ 2115.191704][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2115.211672][  T981] usb 5-1: Product: syz
[ 2115.224392][  T981] usb 5-1: Manufacturer: syz
[ 2115.234525][  T981] usb 5-1: SerialNumber: syz
[ 2115.266909][  T981] usb 5-1: config 0 descriptor??
[ 2115.289109][T19970] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 2115.469309][T19970] usb 2-1: Using ep0 maxpacket: 8
[ 2115.485464][T19970] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2115.521799][T19970] usb 2-1: config index 0 descriptor too short (expected 25, got 18)
[ 2115.549577][T19970] usb 2-1: config 9 has an invalid interface number: 112 but max is 0
[ 2115.587338][T19970] usb 2-1: config 9 has no interface number 0
[ 2115.609104][T19970] usb 2-1: config 9 interface 112 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2115.678822][T19970] usb 2-1: config 9 interface 112 has no altsetting 0
[ 2115.712723][T19970] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3
[ 2115.726914][T19970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2115.747401][T19970] usb 2-1: Product: syz
[ 2115.757305][T19970] usb 2-1: Manufacturer: syz
[ 2115.768307][T19970] usb 2-1: SerialNumber: syz
[ 2115.853120][T19970] r8152-cfgselector 2-1: Unknown version 0x0000
[ 2116.075695][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2116.095061][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2116.118853][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2116.146594][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2116.172196][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2116.191393][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2116.230176][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2116.254894][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2116.294961][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2116.334862][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2116.411107][ T1815] netlink: 'syz.5.8636': attribute type 7 has an invalid length.
[ 2116.435276][T19970] r8152-cfgselector 2-1: USB disconnect, device number 24
[ 2116.742686][ T1822] netlink: 'syz.2.8638': attribute type 4 has an invalid length.
[ 2117.269366][T19945] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 2117.419568][T19945] usb 2-1: device descriptor read/64, error -71
[ 2117.542948][  T981] usb 5-1: USB disconnect, device number 116
[ 2117.618750][  T770] udevd[770]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2117.684757][ T1827] syzkaller0: entered promiscuous mode
[ 2117.699412][T19945] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 2117.723271][ T1827] syzkaller0: entered allmulticast mode
[ 2117.839283][T19945] usb 2-1: device descriptor read/64, error -71
[ 2117.980689][T19945] usb usb2-port1: attempt power cycle
[ 2118.069089][  T981] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[ 2118.241037][  T981] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8
[ 2118.259392][  T981] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 2118.268531][  T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2118.283405][ T1829] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2118.339182][T19945] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 2118.379746][T19945] usb 2-1: device descriptor read/8, error -71
[ 2118.629316][T19945] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 2118.664656][T19945] usb 2-1: device descriptor read/8, error -71
[ 2118.789456][T19945] usb usb2-port1: unable to enumerate USB device
[ 2119.096715][ T1861] netlink: 'syz.4.8649': attribute type 4 has an invalid length.
[ 2119.219541][ T1860] openvswitch: netlink: Geneve option length err (len 256, max 255).
[ 2119.253047][ T1860] 
[ 2119.255446][ T1860] =====================================================
[ 2119.262407][ T1860] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 2119.269907][ T1860] syzkaller #0 Tainted: G             L     
[ 2119.275921][ T1860] -----------------------------------------------------
[ 2119.282870][ T1860] syz.2.8650/1860 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 2119.290524][ T1860] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[ 2119.299271][ T1860] 
[ 2119.299271][ T1860] and this task is already holding:
[ 2119.306661][ T1860] ffff88807dbc6fa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[ 2119.315403][ T1860] which would create a new lock dependency:
[ 2119.321302][ T1860]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[ 2119.328912][ T1860] 
[ 2119.328912][ T1860] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 2119.338380][ T1860]  (&dev->event_lock#2){..-.}-{3:3}
[ 2119.338418][ T1860] 
[ 2119.338418][ T1860] ... which became SOFTIRQ-irq-safe at:
[ 2119.351346][ T1860]   lock_acquire+0x107/0x340
[ 2119.355990][ T1860]   _raw_spin_lock_irqsave+0x40/0x60
[ 2119.361303][ T1860]   input_event+0x76/0xe0
[ 2119.365659][ T1860]   xpad360_process_packet+0xda/0xdd0
[ 2119.371071][ T1860]   xpad_irq_in+0x14e/0x25f0
[ 2119.375715][ T1860]   __usb_hcd_giveback_urb+0x376/0x540
[ 2119.381213][ T1860]   dummy_timer+0x85f/0x45b0
[ 2119.385828][ T1860]   __hrtimer_run_queues+0x51c/0xc30
[ 2119.391135][ T1860]   hrtimer_run_softirq+0x187/0x2b0
[ 2119.396366][ T1860]   handle_softirqs+0x22b/0x7c0
[ 2119.401244][ T1860]   __irq_exit_rcu+0x60/0x150
[ 2119.405940][ T1860]   irq_exit_rcu+0x9/0x30
[ 2119.410292][ T1860]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2119.416035][ T1860]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2119.422137][ T1860]   __do_fast_syscall_32+0xb9/0x570
[ 2119.427386][ T1860]   do_fast_syscall_32+0x34/0x80
[ 2119.432356][ T1860]   entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2119.438912][ T1860] 
[ 2119.438912][ T1860] to a SOFTIRQ-irq-unsafe lock:
[ 2119.445954][ T1860]  (tasklist_lock){.+.+}-{3:3}
[ 2119.445988][ T1860] 
[ 2119.445988][ T1860] ... which became SOFTIRQ-irq-unsafe at:
[ 2119.458666][ T1860] ...
[ 2119.458678][ T1860]   lock_acquire+0x107/0x340
[ 2119.465889][ T1860]   _raw_read_lock+0x36/0x50
[ 2119.470515][ T1860]   __do_wait+0xde/0x740
[ 2119.474786][ T1860]   do_wait+0x1e8/0x4f0
[ 2119.478974][ T1860]   kernel_wait+0xab/0x170
[ 2119.483448][ T1860]   call_usermodehelper_exec_work+0xbe/0x230
[ 2119.489448][ T1860]   process_scheduled_works+0xad1/0x1770
[ 2119.495104][ T1860]   worker_thread+0x8a0/0xda0
[ 2119.499816][ T1860]   kthread+0x711/0x8a0
[ 2119.503992][ T1860]   ret_from_fork+0x510/0xa50
[ 2119.508686][ T1860]   ret_from_fork_asm+0x1a/0x30
[ 2119.513576][ T1860] 
[ 2119.513576][ T1860] other info that might help us debug this:
[ 2119.513576][ T1860] 
[ 2119.523825][ T1860] Chain exists of:
[ 2119.523825][ T1860]   &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock
[ 2119.523825][ T1860] 
[ 2119.536904][ T1860]  Possible interrupt unsafe locking scenario:
[ 2119.536904][ T1860] 
[ 2119.545280][ T1860]        CPU0                    CPU1
[ 2119.550663][ T1860]        ----                    ----
[ 2119.556052][ T1860]   lock(tasklist_lock);
[ 2119.560319][ T1860]                                local_irq_disable();
[ 2119.567176][ T1860]                                lock(&dev->event_lock#2);
[ 2119.574400][ T1860]                                lock(&f_owner->lock);
[ 2119.581272][ T1860]   <Interrupt>
[ 2119.584738][ T1860]     lock(&dev->event_lock#2);
[ 2119.589613][ T1860] 
[ 2119.589613][ T1860]  *** DEADLOCK ***
[ 2119.589613][ T1860] 
[ 2119.597794][ T1860] 2 locks held by syz.2.8650/1860:
[ 2119.603006][ T1860]  #0: ffff88807a9132a0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0
[ 2119.611598][ T1860]  #1: ffff88807dbc6fa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[ 2119.620774][ T1860] 
[ 2119.620774][ T1860] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 2119.631197][ T1860]    -> (&dev->event_lock#2){..-.}-{3:3} {
[ 2119.637052][ T1860]       IN-SOFTIRQ-W at:
[ 2119.641308][ T1860]                           lock_acquire+0x107/0x340
[ 2119.648005][ T1860]                           _raw_spin_lock_irqsave+0x40/0x60
[ 2119.655424][ T1860]                           input_event+0x76/0xe0
[ 2119.661865][ T1860]                           xpad360_process_packet+0xda/0xdd0
[ 2119.669349][ T1860]                           xpad_irq_in+0x14e/0x25f0
[ 2119.676051][ T1860]                           __usb_hcd_giveback_urb+0x376/0x540
[ 2119.683625][ T1860]                           dummy_timer+0x85f/0x45b0
[ 2119.690338][ T1860]                           __hrtimer_run_queues+0x51c/0xc30
[ 2119.697736][ T1860]                           hrtimer_run_softirq+0x187/0x2b0
[ 2119.705043][ T1860]                           handle_softirqs+0x22b/0x7c0
[ 2119.712002][ T1860]                           __irq_exit_rcu+0x60/0x150
[ 2119.718800][ T1860]                           irq_exit_rcu+0x9/0x30
[ 2119.725245][ T1860]                           sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2119.733080][ T1860]                           asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2119.741267][ T1860]                           __do_fast_syscall_32+0xb9/0x570
[ 2119.748578][ T1860]                           do_fast_syscall_32+0x34/0x80
[ 2119.755627][ T1860]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2119.764148][ T1860]       INITIAL USE at:
[ 2119.768326][ T1860]                          lock_acquire+0x107/0x340
[ 2119.774942][ T1860]                          _raw_spin_lock_irqsave+0x40/0x60
[ 2119.782259][ T1860]                          input_inject_event+0xa5/0x340
[ 2119.789319][ T1860]                          kbd_led_trigger_activate+0xbc/0x100
[ 2119.796934][ T1860]                          led_trigger_set+0x52d/0x950
[ 2119.803807][ T1860]                          led_trigger_set_default+0x260/0x2a0
[ 2119.811419][ T1860]                          led_classdev_register_ext+0x73d/0x960
[ 2119.819165][ T1860]                          input_leds_connect+0x517/0x790
[ 2119.826313][ T1860]                          input_register_device+0xd00/0x1170
[ 2119.833807][ T1860]                          atkbd_connect+0x73b/0xa50
[ 2119.840503][ T1860]                          serio_driver_probe+0x82/0xd0
[ 2119.847458][ T1860]                          really_probe+0x26d/0xad0
[ 2119.854065][ T1860]                          __driver_probe_device+0x18c/0x320
[ 2119.861452][ T1860]                          driver_probe_device+0x4f/0x240
[ 2119.868591][ T1860]                          __driver_attach+0x349/0x650
[ 2119.875461][ T1860]                          bus_for_each_dev+0x233/0x2b0
[ 2119.882426][ T1860]                          serio_handle_event+0x1f9/0x8d0
[ 2119.889553][ T1860]                          process_scheduled_works+0xad1/0x1770
[ 2119.897348][ T1860]                          worker_thread+0x8a0/0xda0
[ 2119.904045][ T1860]                          kthread+0x711/0x8a0
[ 2119.910228][ T1860]                          ret_from_fork+0x510/0xa50
[ 2119.916926][ T1860]                          ret_from_fork_asm+0x1a/0x30
[ 2119.923799][ T1860]     }
[ 2119.926579][ T1860]     ... key      at: [<ffffffff99c465c0>] input_allocate_device.__key.6+0x0/0x20
[ 2119.935885][ T1860]   -> (&client->buffer_lock){....}-{3:3} {
[ 2119.941820][ T1860]      INITIAL USE at:
[ 2119.945905][ T1860]                        lock_acquire+0x107/0x340
[ 2119.952347][ T1860]                        _raw_spin_lock+0x2e/0x40
[ 2119.958794][ T1860]                        evdev_handle_get_val+0x70/0x9f0
[ 2119.965852][ T1860]                        evdev_ioctl_handler+0x1202/0x1f10
[ 2119.973159][ T1860]                        __ia32_compat_sys_ioctl+0x543/0x840
[ 2119.980543][ T1860]                        __do_fast_syscall_32+0x1dc/0x570
[ 2119.987671][ T1860]                        do_fast_syscall_32+0x34/0x80
[ 2119.994460][ T1860]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.002722][ T1860]    }
[ 2120.005416][ T1860]    ... key      at: [<ffffffff99c46860>] evdev_open.__key.26+0x0/0x20
[ 2120.013766][ T1860]    ... acquired at:
[ 2120.017755][ T1860]    _raw_spin_lock+0x2e/0x40
[ 2120.022458][ T1860]    evdev_handle_get_val+0x70/0x9f0
[ 2120.027774][ T1860]    evdev_ioctl_handler+0x1202/0x1f10
[ 2120.033253][ T1860]    __ia32_compat_sys_ioctl+0x543/0x840
[ 2120.038914][ T1860]    __do_fast_syscall_32+0x1dc/0x570
[ 2120.044312][ T1860]    do_fast_syscall_32+0x34/0x80
[ 2120.049357][ T1860]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.055893][ T1860] 
[ 2120.058244][ T1860]  -> (&new->fa_lock){...-}-{3:3} {
[ 2120.063494][ T1860]     IN-SOFTIRQ-R at:
[ 2120.067591][ T1860]                       lock_acquire+0x107/0x340
[ 2120.073953][ T1860]                       _raw_read_lock_irqsave+0x48/0x60
[ 2120.081003][ T1860]                       kill_fasync+0x199/0x4d0
[ 2120.087277][ T1860]                       sock_wake_async+0x137/0x160
[ 2120.093881][ T1860]                       sock_def_readable+0x3c1/0x530
[ 2120.100690][ T1860]                       tcp_data_queue+0x1e14/0x5e30
[ 2120.107402][ T1860]                       tcp_rcv_established+0xf57/0x2580
[ 2120.114447][ T1860]                       tcp_v4_do_rcv+0xa90/0x1430
[ 2120.121009][ T1860]                       tcp_v4_rcv+0x2675/0x2f20
[ 2120.127364][ T1860]                       ip_protocol_deliver_rcu+0x221/0x440
[ 2120.134707][ T1860]                       ip_local_deliver_finish+0x3bb/0x6f0
[ 2120.142118][ T1860]                       NF_HOOK+0x30c/0x3a0
[ 2120.148040][ T1860]                       NF_HOOK+0x30c/0x3a0
[ 2120.153958][ T1860]                       __netif_receive_skb+0x143/0x380
[ 2120.160928][ T1860]                       process_backlog+0x54f/0x1340
[ 2120.167634][ T1860]                       __napi_poll+0xae/0x320
[ 2120.173823][ T1860]                       net_rx_action+0x64a/0xe00
[ 2120.180304][ T1860]                       handle_softirqs+0x22b/0x7c0
[ 2120.186925][ T1860]                       do_softirq+0x76/0xd0
[ 2120.192931][ T1860]                       __local_bh_enable_ip+0xf8/0x130
[ 2120.199891][ T1860]                       sk_stream_wait_memory+0x71f/0xf70
[ 2120.207031][ T1860]                       tcp_sendmsg_locked+0x1dfb/0x5520
[ 2120.214076][ T1860]                       tcp_sendmsg+0x2f/0x50
[ 2120.220172][ T1860]                       __sock_sendmsg+0x19c/0x270
[ 2120.227069][ T1860]                       __sys_sendto+0x3bd/0x520
[ 2120.233423][ T1860]                       __ia32_sys_sendto+0xdd/0x100
[ 2120.240212][ T1860]                       __do_fast_syscall_32+0x1dc/0x570
[ 2120.247258][ T1860]                       do_fast_syscall_32+0x34/0x80
[ 2120.253975][ T1860]                       entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.262161][ T1860]     INITIAL USE at:
[ 2120.266162][ T1860]                      lock_acquire+0x107/0x340
[ 2120.272426][ T1860]                      _raw_write_lock_irq+0x3d/0x50
[ 2120.279120][ T1860]                      fasync_remove_entry+0xf1/0x1c0
[ 2120.285915][ T1860]                      lease_modify+0x1ca/0x3c0
[ 2120.292176][ T1860]                      locks_remove_file+0x4bf/0xe20
[ 2120.298877][ T1860]                      __fput+0x3ab/0xa70
[ 2120.304630][ T1860]                      task_work_run+0x1d4/0x260
[ 2120.311005][ T1860]                      do_exit+0x694/0x22f0
[ 2120.316932][ T1860]                      do_group_exit+0x21c/0x2d0
[ 2120.323289][ T1860]                      get_signal+0x1285/0x1340
[ 2120.329554][ T1860]                      arch_do_signal_or_restart+0x9a/0x7a0
[ 2120.336891][ T1860]                      exit_to_user_mode_loop+0x87/0x4e0
[ 2120.343959][ T1860]                      __do_fast_syscall_32+0x398/0x570
[ 2120.350950][ T1860]                      do_fast_syscall_32+0x34/0x80
[ 2120.357575][ T1860]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.365678][ T1860]     INITIAL READ USE at:
[ 2120.370128][ T1860]                           lock_acquire+0x107/0x340
[ 2120.376826][ T1860]                           _raw_read_lock_irqsave+0x48/0x60
[ 2120.384214][ T1860]                           kill_fasync+0x199/0x4d0
[ 2120.390829][ T1860]                           lease_break_callback+0x26/0x30
[ 2120.398059][ T1860]                           __break_lease+0x6e3/0x1490
[ 2120.404926][ T1860]                           do_dentry_open+0x73a/0x1420
[ 2120.411896][ T1860]                           vfs_open+0x3b/0x340
[ 2120.418334][ T1860]                           path_openat+0x340e/0x3dd0
[ 2120.425110][ T1860]                           do_filp_open+0x1fa/0x410
[ 2120.431893][ T1860]                           do_sys_openat2+0x121/0x200
[ 2120.438769][ T1860]                           __ia32_compat_sys_openat+0x131/0x160
[ 2120.446508][ T1860]                           __do_fast_syscall_32+0x1dc/0x570
[ 2120.453900][ T1860]                           do_fast_syscall_32+0x34/0x80
[ 2120.460952][ T1860]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.469477][ T1860]   }
[ 2120.472082][ T1860]   ... key      at: [<ffffffff99928c80>] fasync_insert_entry.__key+0x0/0x20
[ 2120.480865][ T1860]   ... acquired at:
[ 2120.484776][ T1860]    _raw_read_lock_irqsave+0x48/0x60
[ 2120.490169][ T1860]    kill_fasync+0x199/0x4d0
[ 2120.494803][ T1860]    evdev_pass_values+0x627/0xbd0
[ 2120.499935][ T1860]    evdev_events+0x1e6/0x340
[ 2120.504629][ T1860]    input_pass_values+0x288/0x890
[ 2120.509762][ T1860]    input_event_dispose+0x330/0x6b0
[ 2120.515073][ T1860]    input_inject_event+0x1dd/0x340
[ 2120.520307][ T1860]    evdev_write+0x2fc/0x480
[ 2120.524916][ T1860]    vfs_write+0x27e/0xb30
[ 2120.529345][ T1860]    ksys_write+0x145/0x250
[ 2120.533862][ T1860]    __do_fast_syscall_32+0x1dc/0x570
[ 2120.539255][ T1860]    do_fast_syscall_32+0x34/0x80
[ 2120.544303][ T1860]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.550830][ T1860] 
[ 2120.553164][ T1860] -> (&f_owner->lock){....}-{3:3} {
[ 2120.558404][ T1860]    INITIAL USE at:
[ 2120.562321][ T1860]                    lock_acquire+0x107/0x340
[ 2120.568410][ T1860]                    _raw_write_lock_irq+0x3d/0x50
[ 2120.574930][ T1860]                    __f_setown+0x67/0x370
[ 2120.580771][ T1860]                    f_setown+0x23a/0x300
[ 2120.586514][ T1860]                    sock_ioctl+0x5c5/0x790
[ 2120.592445][ T1860]                    compat_sock_ioctl+0x285/0xc80
[ 2120.598999][ T1860]                    __ia32_compat_sys_ioctl+0x543/0x840
[ 2120.606308][ T1860]                    __do_fast_syscall_32+0x1dc/0x570
[ 2120.613091][ T1860]                    do_fast_syscall_32+0x34/0x80
[ 2120.619529][ T1860]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.627451][ T1860]    INITIAL READ USE at:
[ 2120.631796][ T1860]                         lock_acquire+0x107/0x340
[ 2120.638314][ T1860]                         _raw_read_lock_irqsave+0x48/0x60
[ 2120.645622][ T1860]                         send_sigio+0x38/0x370
[ 2120.651888][ T1860]                         kill_fasync+0x24d/0x4d0
[ 2120.658337][ T1860]                         lease_break_callback+0x26/0x30
[ 2120.665416][ T1860]                         __break_lease+0x6e3/0x1490
[ 2120.672110][ T1860]                         do_dentry_open+0x73a/0x1420
[ 2120.678897][ T1860]                         vfs_open+0x3b/0x340
[ 2120.684984][ T1860]                         path_openat+0x340e/0x3dd0
[ 2120.691591][ T1860]                         do_filp_open+0x1fa/0x410
[ 2120.698110][ T1860]                         do_sys_openat2+0x121/0x200
[ 2120.704824][ T1860]                         __ia32_compat_sys_openat+0x131/0x160
[ 2120.712414][ T1860]                         __do_fast_syscall_32+0x1dc/0x570
[ 2120.719635][ T1860]                         do_fast_syscall_32+0x34/0x80
[ 2120.726506][ T1860]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.734857][ T1860]  }
[ 2120.737370][ T1860]  ... key      at: [<ffffffff99928c60>] file_f_owner_allocate.__key+0x0/0x20
[ 2120.746244][ T1860]  ... acquired at:
[ 2120.750064][ T1860]    _raw_read_lock_irqsave+0x48/0x60
[ 2120.755502][ T1860]    send_sigio+0x38/0x370
[ 2120.759947][ T1860]    kill_fasync+0x24d/0x4d0
[ 2120.764567][ T1860]    lease_break_callback+0x26/0x30
[ 2120.769785][ T1860]    __break_lease+0x6e3/0x1490
[ 2120.774662][ T1860]    do_dentry_open+0x73a/0x1420
[ 2120.779640][ T1860]    vfs_open+0x3b/0x340
[ 2120.783920][ T1860]    path_openat+0x340e/0x3dd0
[ 2120.788724][ T1860]    do_filp_open+0x1fa/0x410
[ 2120.793449][ T1860]    do_sys_openat2+0x121/0x200
[ 2120.798330][ T1860]    __ia32_compat_sys_openat+0x131/0x160
[ 2120.804165][ T1860]    __do_fast_syscall_32+0x1dc/0x570
[ 2120.809573][ T1860]    do_fast_syscall_32+0x34/0x80
[ 2120.814618][ T1860]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2120.821149][ T1860] 
[ 2120.823490][ T1860] 
[ 2120.823490][ T1860] the dependencies between the lock to be acquired
[ 2120.823501][ T1860]  and SOFTIRQ-irq-unsafe lock:
[ 2120.837212][ T1860] -> (tasklist_lock){.+.+}-{3:3} {
[ 2120.842369][ T1860]    HARDIRQ-ON-R at:
[ 2120.846380][ T1860]                     lock_acquire+0x107/0x340
[ 2120.852555][ T1860]                     _raw_read_lock+0x36/0x50
[ 2120.858817][ T1860]                     __do_wait+0xde/0x740
[ 2120.864654][ T1860]                     do_wait+0x1e8/0x4f0
[ 2120.870405][ T1860]                     kernel_wait+0xab/0x170
[ 2120.876410][ T1860]                     call_usermodehelper_exec_work+0xbe/0x230
[ 2120.883974][ T1860]                     process_scheduled_works+0xad1/0x1770
[ 2120.891199][ T1860]                     worker_thread+0x8a0/0xda0
[ 2120.897459][ T1860]                     kthread+0x711/0x8a0
[ 2120.903208][ T1860]                     ret_from_fork+0x510/0xa50
[ 2120.909472][ T1860]                     ret_from_fork_asm+0x1a/0x30
[ 2120.915939][ T1860]    SOFTIRQ-ON-R at:
[ 2120.919968][ T1860]                     lock_acquire+0x107/0x340
[ 2120.926148][ T1860]                     _raw_read_lock+0x36/0x50
[ 2120.932320][ T1860]                     __do_wait+0xde/0x740
[ 2120.938187][ T1860]                     do_wait+0x1e8/0x4f0
[ 2120.943954][ T1860]                     kernel_wait+0xab/0x170
[ 2120.950052][ T1860]                     call_usermodehelper_exec_work+0xbe/0x230
[ 2120.957639][ T1860]                     process_scheduled_works+0xad1/0x1770
[ 2120.964857][ T1860]                     worker_thread+0x8a0/0xda0
[ 2120.971126][ T1860]                     kthread+0x711/0x8a0
[ 2120.976876][ T1860]                     ret_from_fork+0x510/0xa50
[ 2120.983220][ T1860]                     ret_from_fork_asm+0x1a/0x30
[ 2120.989752][ T1860]    INITIAL USE at:
[ 2120.993757][ T1860]                    lock_acquire+0x107/0x340
[ 2120.999853][ T1860]                    _raw_write_lock_irq+0x3d/0x50
[ 2121.006378][ T1860]                    copy_process+0x2185/0x3950
[ 2121.012642][ T1860]                    kernel_clone+0x21e/0x820
[ 2121.018754][ T1860]                    user_mode_thread+0xdd/0x140
[ 2121.025103][ T1860]                    rest_init+0x23/0x300
[ 2121.030849][ T1860]                    start_kernel+0x381/0x3d0
[ 2121.036933][ T1860]                    x86_64_start_reservations+0x24/0x30
[ 2121.043984][ T1860]                    x86_64_start_kernel+0x143/0x1c0
[ 2121.050686][ T1860]                    common_startup_64+0x13e/0x147
[ 2121.057221][ T1860]    INITIAL READ USE at:
[ 2121.061572][ T1860]                         lock_acquire+0x107/0x340
[ 2121.068095][ T1860]                         _raw_read_lock+0x36/0x50
[ 2121.074613][ T1860]                         __do_wait+0xde/0x740
[ 2121.080794][ T1860]                         do_wait+0x1e8/0x4f0
[ 2121.086883][ T1860]                         kernel_wait+0xab/0x170
[ 2121.093247][ T1860]                         call_usermodehelper_exec_work+0xbe/0x230
[ 2121.101156][ T1860]                         process_scheduled_works+0xad1/0x1770
[ 2121.108717][ T1860]                         worker_thread+0x8a0/0xda0
[ 2121.115327][ T1860]                         kthread+0x711/0x8a0
[ 2121.121420][ T1860]                         ret_from_fork+0x510/0xa50
[ 2121.128018][ T1860]                         ret_from_fork_asm+0x1a/0x30
[ 2121.134801][ T1860]  }
[ 2121.137315][ T1860]  ... key      at: [<ffffffff8dc0c058>] tasklist_lock+0x18/0x40
[ 2121.145059][ T1860]  ... acquired at:
[ 2121.148877][ T1860]    _raw_read_lock+0x36/0x50
[ 2121.153571][ T1860]    send_sigurg+0x12b/0x420
[ 2121.158291][ T1860]    sk_send_sigurg+0x6c/0x2e0
[ 2121.163082][ T1860]    queue_oob+0x420/0x4f0
[ 2121.167541][ T1860]    unix_stream_sendmsg+0xc32/0xde0
[ 2121.172852][ T1860]    __sock_sendmsg+0x21c/0x270
[ 2121.177736][ T1860]    ____sys_sendmsg+0x505/0x820
[ 2121.182692][ T1860]    ___sys_sendmsg+0x21f/0x2a0
[ 2121.187568][ T1860]    __sys_sendmsg+0x164/0x220
[ 2121.192367][ T1860]    __do_fast_syscall_32+0x1dc/0x570
[ 2121.197765][ T1860]    do_fast_syscall_32+0x34/0x80
[ 2121.202831][ T1860]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2121.209373][ T1860] 
[ 2121.211720][ T1860] 
[ 2121.211720][ T1860] stack backtrace:
[ 2121.217638][ T1860] CPU: 0 UID: 0 PID: 1860 Comm: syz.2.8650 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2121.217665][ T1860] Tainted: [L]=SOFTLOCKUP
[ 2121.217672][ T1860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2121.217684][ T1860] Call Trace:
[ 2121.217694][ T1860]  <TASK>
[ 2121.217702][ T1860]  dump_stack_lvl+0xe8/0x150
[ 2121.217727][ T1860]  __lock_acquire+0x2a95/0x2cf0
[ 2121.217759][ T1860]  ? send_sigurg+0x12b/0x420
[ 2121.217784][ T1860]  lock_acquire+0x107/0x340
[ 2121.217801][ T1860]  ? send_sigurg+0x12b/0x420
[ 2121.217831][ T1860]  _raw_read_lock+0x36/0x50
[ 2121.217871][ T1860]  ? send_sigurg+0x12b/0x420
[ 2121.217896][ T1860]  send_sigurg+0x12b/0x420
[ 2121.217923][ T1860]  sk_send_sigurg+0x6c/0x2e0
[ 2121.217951][ T1860]  queue_oob+0x420/0x4f0
[ 2121.217972][ T1860]  ? __pfx_queue_oob+0x10/0x10
[ 2121.217994][ T1860]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 2121.218015][ T1860]  unix_stream_sendmsg+0xc32/0xde0
[ 2121.218035][ T1860]  ? rcu_is_watching+0x15/0xb0
[ 2121.218057][ T1860]  ? trace_sched_exit_tp+0x36/0xf0
[ 2121.218083][ T1860]  ? __schedule+0x14b1/0x4fd0
[ 2121.218102][ T1860]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[ 2121.218121][ T1860]  ? __asan_memset+0x22/0x50
[ 2121.218148][ T1860]  ? __import_iovec+0x5d4/0x7f0
[ 2121.218170][ T1860]  ? aa_sock_msg_perm+0xda/0x1b0
[ 2121.218194][ T1860]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2121.218211][ T1860]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[ 2121.218229][ T1860]  __sock_sendmsg+0x21c/0x270
[ 2121.218258][ T1860]  ____sys_sendmsg+0x505/0x820
[ 2121.218282][ T1860]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2121.218307][ T1860]  ? preempt_schedule_thunk+0x16/0x30
[ 2121.218326][ T1860]  ___sys_sendmsg+0x21f/0x2a0
[ 2121.218348][ T1860]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2121.218371][ T1860]  ? futex_private_hash_put+0x13b/0x170
[ 2121.218401][ T1860]  ? futex_wake+0x4b2/0x560
[ 2121.218433][ T1860]  ? __fget_files+0x2a/0x420
[ 2121.218455][ T1860]  ? __fget_files+0x3a0/0x420
[ 2121.218481][ T1860]  __sys_sendmsg+0x164/0x220
[ 2121.218504][ T1860]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2121.218529][ T1860]  ? rcu_is_watching+0x15/0xb0
[ 2121.218555][ T1860]  __do_fast_syscall_32+0x1dc/0x570
[ 2121.218577][ T1860]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2121.218594][ T1860]  ? do_fast_syscall_32+0x34/0x80
[ 2121.218615][ T1860]  ? irqentry_exit+0x10f/0x670
[ 2121.218636][ T1860]  do_fast_syscall_32+0x34/0x80
[ 2121.218657][ T1860]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2121.218680][ T1860] RIP: 0023:0xf708d539
[ 2121.218696][ T1860] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2121.218713][ T1860] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2121.218739][ T1860] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[ 2121.218752][ T1860] RDX: 00000000240408c1 RSI: 0000000000000000 RDI: 0000000000000000
[ 2121.218763][ T1860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2121.218774][ T1860] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2121.218785][ T1860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2121.218803][ T1860]  </TASK>
[ 2121.929955][  T981] usb 6-1: string descriptor 0 read error: -71
[ 2121.978700][  T981] hub 6-1:32.0: USB hub found
[ 2122.006298][  T981] hub 6-1:32.0: config failed, can't read hub descriptor (err -22)
[ 2122.080460][  T981] usb 6-1: USB disconnect, device number 68