last executing test programs:

6m6.399456313s ago: executing program 2 (id=1625):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x288, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000180)={'bond0\x00', 0x0})
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x4f27, 0x5, 0x10000, 0x30, 0x66, 0x4c7, 0x0, 0x8000, 0xa, 0x104, 0xffffffff, 0x1, 0xd, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x400, 0x22086, 0x24, 0x0, 0x20001e5c, 0x7ffd, 0x4, 0x3c, 0x1, 0x6, 0x0, 0x1000000]})
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x8000, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xf472, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
ptrace$setsig(0x4203, r3, 0x9, &(0x7f0000000200)={0x21, 0xfff, 0x3})
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb)
read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020)

6m0.898890305s ago: executing program 2 (id=1634):
open_tree(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x89901)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000001600)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
syz_open_dev$I2C(0x0, 0x80, 0x14000)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r6, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0)
mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x5, &(0x7f0000000040)=0x7)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x300)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)

5m59.848520577s ago: executing program 2 (id=1636):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0xff9de1bcb3367476, 0x5003)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30)
socket$nl_route(0x10, 0x3, 0x0)
eventfd(0xffffffff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

5m56.204049981s ago: executing program 2 (id=1643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

5m54.736254352s ago: executing program 2 (id=1647):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$sg(0x0, 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2", 0x25}], 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
move_pages(r1, 0x6, &(0x7f0000000040)=[&(0x7f00008e3000/0x1000)=nil, &(0x7f00009e5000/0x1000)=nil, &(0x7f0000225000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000004c000/0x2000)=nil, &(0x7f00002e7000/0x4000)=nil], &(0x7f0000000180)=[0x1ff, 0x8ce7, 0x2, 0x0, 0xa, 0xd4fa], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000086b1d010140000102030109025f000301bc00060904000000010100000a24010600020221"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f000000f140), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f000000f280)=@multiplanar_userptr={0x1, 0xa, 0x4, 0x10000, 0x1, {}, {0x2, 0x0, 0x5, 0x7, 0x8, 0x9, "525067fc"}, 0x79, 0x2, {0x0}})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

5m51.483413081s ago: executing program 2 (id=1650):
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100300000008ffffffff00000000000109022d000100000000090400000103000000092100ecff01220500090581032000030400090502030800ba02004154a0a8b5b7a42ab07d2d582438e97bfdb1732eaba2248bbb"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x5, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000800)={0x3, 0x1}, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x28}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0)
sendmmsg$inet6(r5, 0x0, 0x0, 0x40800)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0xc)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_io_uring_setup(0x234, 0x0, &(0x7f0000000280), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000980)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd3000fddbdf25090000003c000380080001000f000000080003000000000014000600fec80000000000000000000000000001140002"], 0x50}}, 0x20008054)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xa8, 0x0, 0x8, 0x70bd29, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x62}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x26040800)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000028000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000300)="f30f12a6a912362e0fc71a64672e3e0f1eeb66b80d0000000f23c80f21f866350c0010000f23f866b9800000c00f326635000800000f30c4e3f9cec6890f013bb84f038ee8b0f3ee0f01ca", 0x4b}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0xd000, 0xd000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5m35.749046561s ago: executing program 32 (id=1650):
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100300000008ffffffff00000000000109022d000100000000090400000103000000092100ecff01220500090581032000030400090502030800ba02004154a0a8b5b7a42ab07d2d582438e97bfdb1732eaba2248bbb"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x5, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000800)={0x3, 0x1}, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x28}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0)
sendmmsg$inet6(r5, 0x0, 0x0, 0x40800)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0xc)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_io_uring_setup(0x234, 0x0, &(0x7f0000000280), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000980)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd3000fddbdf25090000003c000380080001000f000000080003000000000014000600fec80000000000000000000000000001140002"], 0x50}}, 0x20008054)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xa8, 0x0, 0x8, 0x70bd29, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x62}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x26040800)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000028000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000300)="f30f12a6a912362e0fc71a64672e3e0f1eeb66b80d0000000f23c80f21f866350c0010000f23f866b9800000c00f326635000800000f30c4e3f9cec6890f013bb84f038ee8b0f3ee0f01ca", 0x4b}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0xd000, 0xd000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15.64958072s ago: executing program 0 (id=2480):
listen(0xffffffffffffffff, 0x100)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
close(r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x9, 0x200b, 0x1})
write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0xfce)
add_key$keyring(0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff)
unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)

14.426251847s ago: executing program 0 (id=2484):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0xff9de1bcb3367476, 0x5003)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0)
eventfd(0xffffffff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

8.602816642s ago: executing program 0 (id=2497):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000040c410cf8a00000000000109022400010000000009040000010300000009210000050122050009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000740)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="002124000000243029a98d"], 0x0, 0x0, 0x0}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x5423, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d4980fc7682bc4c2999aaddd8bceb38fe8eca2a80100000037c4e14ddee2660f38810b", 0x38}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$USERFAULTFD_IOC_NEW(r7, 0xaa00)

8.274175812s ago: executing program 1 (id=2499):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x722)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r2], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000002b0000c5c500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0xffc, 0x1010ffff, 0x400, 0x0, 0x5, 0x7})
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
getpid()

7.992044158s ago: executing program 4 (id=2501):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x421, 0x1, 0xcc7, 0x7fffffff, 0x5c952399, 0x4005, 0x3ff, 0x2, 0x2fd, 0x1, 0x1, 0x9, 0x0, 0xfffffffc, 0x8, 0xfffffffa, 0x1ff, 0x10001, 0xa, 0x0, 0x20001e54, 0x7fffffff, 0x3, 0x3e, 0x8, 0x4, 0x8000000, 0xdffffffa]})

7.872614684s ago: executing program 4 (id=2502):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x10002b, 0x5, 0x0, 0xff, 0x105})
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))

7.491702375s ago: executing program 4 (id=2503):
listen(0xffffffffffffffff, 0x100)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
close(r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x9, 0x200b, 0x1})
write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0xfce)
add_key$keyring(0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff)
unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)

7.465880349s ago: executing program 5 (id=2504):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x8400)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000002c0)=0xffffffff)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x11e)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r3 = socket(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f0000001580), 0x5)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$TIOCOUTQ(r4, 0x5411, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0)
read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0x0, r7, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50)
read$FUSE(r6, &(0x7f0000004340)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r6, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r8}, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000001c0)={'xfrm0\x00', @multicast})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

7.173543913s ago: executing program 4 (id=2506):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$session_to_parent(0x12)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
r6 = openat$smackfs_change_rule(0xffffff9c, 0x0, 0x2, 0x0)
write$proc_mixer(r6, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xe4)
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2004a890}, 0x4044800)

6.032474702s ago: executing program 4 (id=2507):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r3 = fcntl$dupfd(r2, 0x0, r2)
syz_usb_connect(0x2, 0x35, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008240206210126ff0905", @ANYRES64, @ANYBLOB], 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

5.838405945s ago: executing program 3 (id=2508):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1_to_team\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x7, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1001a}}, 0x50)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)

5.832026776s ago: executing program 5 (id=2509):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x20, r1, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40480c4)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}})

5.808012364s ago: executing program 1 (id=2510):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000004a000000000000002e450f2658c800000066bad004b875a9"], 0x4a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000080)={&(0x7f0000000880)={{@local, 0x4}, {@hyper, 0x7}, 0x400, "549f4be5bda2201a072524da108bd78c11b7bb4a7e839084bbde68dc95de5300da0a4d125220aad9dfa019ecd15f1ebd544822344e4c794b79478371ab0bde243b47fa0c018cca08a916a8076fee18db838d25705d3b0375fba930f973ce893c149c33fcf470fddfeacec67048fd4dae3305c964f61a3acb8acbb91fa7d713c1d1fc5e210b6f1d991eda8f1b7632df79871355dfd223fcd4e01fb7dcc8067b8db33717d3a3f539c9a2b63e1a0712273705a2d1e9b99207f7396e48dd916596abd0aa0ffa5914c00f4afde63988dcce28c713591a71d15668f07893228047f527febf2a2830620bd411fb87c5081c387a2dc4d0da90e2cebd85480ce7e698d7eefa5e3a864afc326fb27030d03f13a67f9d9f49c70ea64b75606673913edf763b92ff0fc80ff98115066b8efa863651e8865c4a64268a04dcb09a917e51aa1d2f6b410cb4560699afcf8bb671c7017f6a0376b608e8cd66a2ad8dbaf1328d32166e3ca94f874b05edc004ea4f790cc080b639c7f3387a147e0e6b3285aceb54cfbc4e6b24cbb8623dcfafb6037c1e4627a405c4ef296d7ef0d24b05f5c5323b5c8adcbcd28afdc407fec6de708e14dc10f665e895d3f48021c7e15dbd7f9cde458434bff9dc9b4b34f8eba8e002ab9e7cca56d9fb4d247b15cbc5fdbb31d7115cfb1839428b1f7eda38fe35cc173c7d992fe15e388962bfeaa32ff19f736a35a827d3c976a9f68b6d1f294717471cf1500ffadc1bf72427e324b15fa249777f2cc15af306ab1116d9ac3996de80ee281497548dbc35437b59e2d84a2e5a228194fb526c050909780185d73b4d4dad6f9b95fdbed60d3ef6ba64667adedb80ffd4094e5c74ab08e76ec7d168ca7d0a1a43cd2a8727d218d0c0cc29e0802ecc0d9b8b034b1a13e254f31e285803e4caa8a817de83ba714504db855220610f5a42816e9f12c57cf37528077b5275e4dd0ebfe9b04c1a0e8d72c0b02fbf513e1851f1ac2961dd06d0d46bf08e51a6bbcd4a124a4d99b6131667d600b10b4fb7156d6f792978e56b6abd99ef5be073ee1151987051f80b6587f35efaefdbfed393c930d147b5022ec22c62a0e249f9b29ba23a4af8bc8209b1edc4db6806d97cddc7c2fb1ff43630b73471e00bebe77e189f463f1a7564d8017a06523f5c1625761526d4c27cbe1e40188d54699d524b929cae59cb2dfce7d7c7fe4992be21e5249c6afad08408d33faea82a9537b9f282009c7453166a1af67e48d43b63a7aaf346ac43ddf39721542dd62c5b2467b67fb493f7d66871a418bf048eb0a6a9ae02fa14ea2493d9c00af5d3663bc4e8638fc545f825a7fa92e29523b5c26d850216f37cfc92ffd366137b33c49b7f385efe99082a741d9a581a4ee3d62213fd910f9c0761b571656e75543685b6b5876dfd3c12753d19a152e95b90e5f551a6a6296ddb"}, 0x418, 0x10})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x7fffffff, 0xdb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
unshare(0x20000400)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x2, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32)
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000020095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0xd1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x105, 0xf038, 0xf06, 0x9, 0xcc, 0x5d, 0x1}, 0x9c)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

5.590214558s ago: executing program 5 (id=2511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x1, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='mptcp_subflow_get_send\x00', r3, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ab)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x5, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0x1, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x4, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0xb, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x0, 0x20a7fd9e, 0xfffffffd, 0xffffffff, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e3f04116b7810f7ab36a61181a2a1672"], 0xf8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r6 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0xdaf)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7)

5.557340561s ago: executing program 1 (id=2512):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000010000040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a31000000000900030073797a32000000004c000000060a010400000000000000004e297315cf0e9343000000002400048020000180080001006e61740014000280080003400000000908000140000000200900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x0, @pix={0x4350, 0xc, 0x584e4f53, 0x8, 0x25, 0x7, 0x4, 0x5, 0x1, 0x0, 0x0, 0x5}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x2c020400)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TCFLSH(r3, 0x400455c8, 0x2)
ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0))

4.777544792s ago: executing program 4 (id=2513):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x10002b, 0x5, 0x0, 0xff, 0x105})
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))

4.7217541s ago: executing program 3 (id=2514):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001480)=ANY=[], 0xe0}}], 0x2, 0x0)

4.573545277s ago: executing program 0 (id=2515):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002100)=@x86={0xaf, 0x8, 0x9, 0x0, 0x3, 0x6d, 0xe, 0x52, 0x8, 0xc, 0x2, 0x10, 0x0, 0x7, 0x7, 0x8, 0x76, 0x9, 0xf9, '\x00', 0xab, 0x9})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="30003300c0000000ffffffffffff0802110000005050505050"], 0x4c}}, 0x0)
r6 = epoll_create1(0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000068000100bcfffffffeffffff0a0000000000000006000700030000000c000880080001000500000008000500", @ANYRES32=r10, @ANYBLOB], 0x34}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r12, 0x4)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRESDEC=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)

4.322893904s ago: executing program 3 (id=2516):
listen(0xffffffffffffffff, 0x100)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
close(r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x9, 0x200b, 0x1})
write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0xfce)
add_key$keyring(0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff)
unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)

4.081117606s ago: executing program 3 (id=2518):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (fail_nth: 1)

4.012254957s ago: executing program 1 (id=2519):
unshare(0x28000080)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0xd931d3864d39dcca)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00')
socket$inet6(0xa, 0x2, 0x3a)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x8, 0x800, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r6, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r6], 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)

3.310358262s ago: executing program 3 (id=2520):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

3.264512275s ago: executing program 0 (id=2521):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x6}, {}, {0x40}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}, {}, {}, {0x20}, {0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e}, {}, {0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x401}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0xc0105702, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002301000034020000020000000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

2.751270329s ago: executing program 3 (id=2522):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0xff9de1bcb3367476, 0x5003)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0)
eventfd(0xffffffff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

1.978486426s ago: executing program 5 (id=2523):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0), 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x31435641, 0x0, 0x9, [{}, {0x0, 0x200}, {}, {0x76e6}, {}, {}, {0x0, 0x2}, {0x0, 0x3fd}], 0x2}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r3, 0x3b83, &(0x7f0000001640)={0x28, 0x10000, 0x0, 0x0, 0x34c768, 0x7, 0x4, 0x1f6313})

1.929662138s ago: executing program 1 (id=2524):
r0 = socket$inet6(0xa, 0x803, 0x6)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
process_mrelease(0xffffffffffffffff, 0x0)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10)
io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c, 0x0}}], 0x2, 0x0)

1.553211146s ago: executing program 5 (id=2525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002680)={0x1fd8, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xb, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}, @generic="83b461"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}, @nested={0x1fa0, 0x8, 0x0, 0x1, [@nested={0x1008, 0x48, 0x0, 0x1, [@typed={0x1001, 0x7e, 0x0, 0x0, @binary="6269847fe665d109f237e8aa4ae44e2514f2cde37fe084f741d6bcc181ce33b60a746cd135e0ecb743df5994a5d7531d4dc69b4286f0eb2e067a94bfcb1d9fedcc3ebbe22497c3d26fbb4703b276eb9ba405957ac276c398d7672512fdde0e974136b57b9cb4069433cd41e9409014b94d11820dd926dbf1a529cb695c96fd87ae807f14189bde5e66a781c0a8f834fb71491cf3747e563bf97d4381b2616614d65fd05c613c1893ca6284730cafd60f239cd4dbf9bcd38ef2f58b8a6cdb12fa560bf030e0b03555d4f4885584b3b90833426b73b2fb10bdf2f6c6c4c1ed01ec4433aa60c971a2a6a262e9f6e2754edceb165579abe5a6a9cb950341330ce6b127fd413bf592728e1c4c93a44ba4fac87a1eadce5b0ab06b5946182c4fb06edb0a8af229254a656c0f198c66b13b80d802ea2f6cc8b72697073e8f519c601d2183fd07a34535e203a42d8bf3b67fe3dc561012dfdb4fc0921e727ab4f203516fc620bb67ccfefe2e5b54f48a4e3c7209edea271b4fc1f4c166dbf9cf672492a1fe8bd66b332dd5c398744c47dff3513b410b05189847696a7769f8aa369dc8e495eb7ed5a65b8bff2dd308a33e724672092ce3869f44cfe6a6609bcab86156dad58886c71c781def420ca6165af9d1d86c64a44597194b3554342907242e3b0c90bd34c758e55febca1f1e622cdafb184edaf9aa9a78db29dc75188f8daaedbada26fe4aa3d47124557f0e108c171e040a0e432b2a692507869189e780c789bf6cdfa78c9bfdd70cab3428f1fccd956da26387c213f072887ca4bf1cbb970bb590cbebe25de8fbc01f5e2763a7e84ec6ebecba3adc83b5fd51eab2362a9a684645db8ff844ac59b2c9061cc4994029666194033b4750f53f051716755981f27d7d59bb5dfc3c7938a0bf6f9fa7ba42df6799ce5c5c1e5bdc3e2d3318657fe11e79fded29af5b19d926bf6caa2021386dea2b65414b6af4636652e605824d0988a9bfa77f3ba6d802b3e74adc5acd1ba3ec58955fedf76ac2180d7502ac58807f59eb78bde17678b1ddd5f4d2ff5829ac55adb0a846ae2058680ea0d0c393eed1771f365ae7b30ba68b60e8253e64b91056af02f8067762631ae00a7aec9e11750ffb3f23db5fbff9fc0fe70d9b39d0bc01d7525987acbbca0271f9eadffeb9daa04dc35033b69614ea669ba1910973f7cbe64597c80492c75622a05a6f8e9976c42d27b0cc4f11d14ae58ffddb2563e264f2a9eb02f418b3f9e1336b75071c34f054bd2985acbc0558917dc7b1da59f568acc5841422d3807630110cffc4dbc5dc6e3c13923f220009c920ea98485b382e8cdcc97970ee384ba0745eae7190ff8da592324049994fb85bdd3441f556f672d1dbf74130673fdeadb7b101ed6e192fc2c3c88cc3bb0237655555f5fe93c18b5e0310044be0f01ad5802b6fc83cbf98d4825704d1ae4e2c71b1df430a06f8fe5aa5d69fb699b107272ba187953e8f98dd761f702467a470c0f76574be777ed9b441d63d2795142e26160b3cd645617a369faa3fe79785ea21d325c4da1608b499f75dc80fdf738902f5284c7ec34e1eca30e86b3928e74764332d728e93a4840758521af2579863d3cd0fc564e4cfc10b7f45e9da01c3e722d330390b74be977716d11af83439aa18ad395ebd8feac1538f236d10e2f2df9e93b9f44e8ac7b297a91997483c74ebbb004b85008ea113be842076d222b73f68640d9ed8d8f29391e0d98336889e66ced137b53472d34f2e2ed733ba6808ff4d4c5e6c43ccd6b3fd1f20e7e89ff92f6b7dbad5d71c0dbe7988b36c1e2407af8680a04ca83527ebfe15cec2f83515a01376332c4c92afb8a6dae17d78b94d995104866ea2382be72d3d6416dae77fb2e6c2a3bdf43ed1695171234cb6d972ea22f8166366839b0e2adfe559603f00938af296b9b3ac8e27ebf4de11d3b66bd37228348d068e1afd21c23760ce9d43c851df1fcb8403a2a0c42b34b1d9eb53a74ae168499621e5a7146506f1a4a50434e10cb22ef2e5140b5bc84a87b10d1fa045b93f42d2b45ad106eb5727ffd739157ff803478ec44ff4da487669a81987597bb9db70e9e2f294bda987158e851c9972d3da14ba0cc84651ba6686403ce12fe49582110f2adb8015b243f9063adf38105a4b234809a845f011b15f09e9a8c350561503310f4b999b4201245a5770a824e52e12dda7c3cd7d3155175c47ed707d47b82882420580949d1b11e4b797fa50030673dcbc67eeabf6c927d2dd1ee5083cb8a151b6c9306d62766e2da7f3476a4e67dea0261c6f9082e3b707ae6c71456935a1bfacabe9cdc19494aa85bd92ff14afc9cc9527f87440335cc7730e03bfb753dd4302dd57e19a685b46ed1a7abe551e3f8ef79b1c47bfa4ee892a8f250706d18d45fa9aae02b9905a66249721956e06be0620d32402ef579150e61e9d48ac6b91da3349564d2c6268c0417d5b268a7f3f55b9a4fe1302936216516d3e6da20ce58979a4405d22d45fbb79e6f9dd1df43fa0faeb2e10391f53dcf9197dccc94e99ae0fbb40ee0aa8f99c7dd564c39cdb1691d2230a1ebbb8d4471296d80d318407eacf3b54ad57b48ca0fbaebc41b5fded9b569233ae6bd1d579edb6e547af6f4a3fb36f650dcbdeb2c6cc0d8a63c2118fbe5e7542b821ce959335567ac80a9a1014c8111a855f45dced1c4e7fe8799581346f6551c3ae3f0c4df81f0e9685825202f77d5435d8560e434625f4c66375481c146c2fc904e71f34b9d73d72d4b984c32a05c6fb2c18042d89be1a179ec0853ad32285a3e1ca6410d2f80a4acafb0c4c201ef4e73a4f252f94af707d6778ef957dd30e8181dd3c5414e9c73c8fd415603a60b9631af437081a864e4a20d1ffca9e85ff09a7a9856cda192cb31d5fc7f4faccf11a67611e2a150e9976cf10dd5efd0495886573511323d7501d9e0dc5f98366e0b4a6d0465a63ab08ace7463e14b3158d0f14def4c8822b9352c4c60d1876d6a8e6f165d8105925c63f92d2b853e8f85f76bf2ae79b6f8f5ee079c5429e0af81085ba4629ec03dd7b60f61d77b7d7958e4bdb77a124da8cccc7a0a118c439eff9efdfbf23c3e4f36f129cf85f0e6ae5294bfeff29ec622c2d307f05c6ffe545d9913f7314c62800428bdab35aaadf999649dfe41fb39afb04834d408032e5bcf047377575eace64f71efa94c7a2741893341b9616993d986f27d145bcf173d4b5a8eadd242a6e8ea71c5ace620dfc56a77807087e6298408d551cad16fa644c88b8990210aa03fcaf9bbadb66e8c71fcee171f9b10549b35645e161eb11a85351c2eacd3492907efddb9dde627e9e827ae24708e798c7a119abb8cccfb8b8f472afe3739a6eae7c08b04603660803a5e6e1054441d12ad7f1908e2c80c80f29e76a1eb9c66571d353fabc8f5714c11416cc3d8e8d3b83dbeaace4fe0747f32c43e60067179dd397ce81c58e3d6e566c9e65c1b439107aca3a1f81e638127ecff2f429b1c6f5faec8ff0420ec3257428fdfb60d5064a1da3c84d25eac722bbfa1ff58ebbd13c021ae37d19ce74ef9737809f8643c36d09ddfb7da04c96bf1fc84d6b8b2ad95dbe325ed29d1961d15da29dba900912dd02ab017cd5df918d13c252d4900c360821b2582c16a1e8ea1deaef6983fe13e2a20e477a96c7288607bb070830972846b5ba30bebed0f668e5b6d5d39f2622497c57bb8cafb23f9ddf57e594d77f11011e16ec397db8966d3eb8fd1a5969e07588db3026100ef761d4f5c04e42246f57e0c34dc1a16b8b7dcca4b14cdd6fccea3cc1f1f2088188db7ba2c8bc9c84e8f0e78c87d2f22312bb5c803b57c4f52f9ac866e99248d2a6b445fe5390ca99c593364109ccf23a3a210bde45b11f114d358558cd08b684adce1e85adb8418ac20a279803bf6a9da19eb74a46fa6d30e0acc9cee1841f3293adde91275f5faa07a86079ef9875005b00a448144c6bb4163c89ec63ded7641947163734dd2da5cf3ade4436db2f308a7126a90b31b8b0c0d0032536a56c96d3cea70d3226dff8e8e147992c410e5e699c9f9af0229e463066de24e101047ac1693d9a5fbfb0c45091d82374165b12c03bf486cfed9c55e1a942ac6c08e693b2fbb9c671971d6a13e4723876ea0176f6bf81a2d63148f42ab90b37092f228c7d33d11e669c1a12025d693a9d8ed16a00265df58510c5841db0910038409ec1dbcbafcf301ecb5e63de17d1172f96aedba9592be058d50c6bef6a28d197f97202494af348646ae676be08d9538a980e986fe23451eb46cec545e51244e7be72e495cbfa30466184cdb3439750a6125ca0ea1a7df6e81499bb81729b98717fae12d9d0973d3efe31a9102819dda5ec9b898e6f133395b334efeddea7915cc5f652456c469f9aed8aecc2eae7a25074e1856b0527adb86aa365f1be4216cd8ea51d8965ed057b4d78a4ef993df67f1b664b1f0cdb55efc9c3a1533dd99f4af5ed9fd3fe465b5ffad35d035c9ad982a9cf7dcfe6a930f495304db5f2b9b20db129fdfd7b88aa07c9713adf733bf6c70018f562eaa7f206c33d5c7eb524c74c411008df7d42895c8fd6863cc77e39b5f8352e1983ade98a88abd3ecb947f7273e8e10af9f197a227d44644cb3b8e9720384f0cfeefb3f25d437d1b380facb5b0c20e91411abf1ee6f2fbfacd26de4370ad02d41160652f53c911f951a2c2a9879b910e5e86d0dc182d92cf1c37c678aabb9cf1eb715495d4f4b662f69f62294299a69a8131dcc741f753e1785e166fbf967950990b2400ccacd36b591cc6bc182078e63fd2d870c62714cc66badda8ccee9a6c2d2793a712f63b42edcfc1bcde334ad615640b9839598fe7f9774b5ce7a7f5fc67d0a771410baa36128933f46187d9d25dd18d010ec7e11954f1ffbc16c1bc59d986bab494efad71903553dfa42c28233fd4a66a3ca14cf34a22a3b225f024cfc664d2f26b17180c8e833862049ab31e8e0f54406f49c8f46243032f89e344d9152764bc217a7fe6f83bce80bff80b8c2ee55985a38d6953aed1d899dc60c47460996bbb7728ce051ad0aae83f9e69cdd1046251d539f703667315cc04755636a11c9c6e2cdedc99719951361fdad021911ff79b443c60a6f08bc81baa2c2094cdc65081243e4bb242acac9246edefc6004c1f9a2919781794de1737e1e23f1a9e0f3159ba61df3be61031f5a3be1c3765a10b738a2d974dd47baa207686cc31d7589d56cb88486dc2728d07ac5cdc5cb0c1da4649efc7c8e48cbe3b4279de8a24c8ad03ab3526fd0d766ec89668aa52b8b9de6f8c1f2ea7056f9d459608de18f0e53392f666c670c0e41753010fed54b42c1ad29fa0f74dc62c2b530efc67a179211e9da37425182ffd73de4229c32c819fd7d1534518671ab7984e824f5e3a369e05b5b9894554b5fb46acbadceecc58993f34b8df9c8a7cfe6bfa7b82800208bfad1adc9278b297e5e599a4e570402848ceb432631397c50020716e6ee7df01551254dec14798a6ad4178edb8bd71bf7ce53774203918d920f02d4f59c1f136656b63534b12d9ca5787aec382f09da17edb59775d30fb63bc98eca130aff7a8ca36d07840908ddd4694ecca2d214d63b41fef5e1f79c0bbe8d24cae15ad6567e4d296e32d4b20d5ab48c66bbb601e5cfd39733acff18db7eb2f3ba730d4c77a4c50f165c7620c76d71c7b78e0eef38d0c7d6cfc864ecfe80c410efb06fc55255bad6bde49e709d6fa208cdae8cec582f6221d65849d7a1a1fa98a9ffe839"}]}, @nested={0xf94, 0x105, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid}, @nested={0xf85, 0xea, 0x0, 0x1, [@generic="0a7d59fc86e2b6fb8d7b15ab4f181c466787aba129ad568649b468280a1754513f10768df67d301bb2d6d4ea8a178d04e60e65779fe36d955d40ca17935bb0ca91bfbddef182fb403a26c6d4dbf0e17d482c50fdeaa6446765ef1041e9d1fcc19cfa7146ec293ce5d723f10dc3d04a04e6fb9661932e9fd15e174b3dfd4e1798d660ffe1de5106955e62a3e99d872f7c86a32e9fffb470cd26", @nested={0x6a5, 0x3a, 0x0, 0x1, [@generic="f37d7d7eaa26f4e62ccc983285e3e8aff796d849a5ee2e14d0fa81dbc3451b3f802d1cda7c940baa31aa393c4a3de0974cdd531be7c298a37b25626b03d5237f4a89355762aef807b1f62389b03351adf5678793f5b206d8e241f9d34525548413a3fb0010c532abcd6bb7a243b2f31509021b53c118e0d8ee23cd", @nested={0x4c5, 0x116, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @u32=0x3}, @nested={0x3a5, 0xa, 0x0, 0x1, [@generic="b4e4c59d0e98277f4608489f2845ca558250db257f98ee8c6180cfa837ece90445ab672305c9fecb4fd9f1b005c65244440c75daa3c93069a0ab82206097358e0a8353b7a5cdfc9c3e61905c5ed0e6a300ea84d5064ea5f3ef3f6cf8c1e9763ae6766cfbf5d0fb2ffbc2387d805abaa6742fd8dbff729ea28523f43a932be47a76fe4945e141d4052c6846e31c336e5dad70b64f87e0d7300ca768d79c72a1084da3f7cd7fa7c016db7e2b6498e951f15f62041dd7802772cfe65d40891346a85950f9326c24593fa60f0a2758e2f710cd78ea07c89a9056db", @nested={0xdd, 0x94, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @pid}, @nested={0x4, 0xd2}, @generic="1f12b5e2a3a48113ca9c2827bad2cb78149d058b1c15bdb043e13997da7d94c02b2fb5da88632204fb3a4428c82791ddec", @nested={0x4, 0x28}, @typed={0x53, 0x4e, 0x0, 0x0, @binary="984f3b627efc6c6c5521ed4306da91dea7c62c2adb99af94890a87cc7d66395e650568cee55005e37e086b742f10e68e2d5ed29cbd34f166d767dee739da3fcbc25075ad852986b1db687fe5103afd"}, @typed={0x8, 0x100, 0x0, 0x0, @fd=r0}, @typed={0x39, 0x24, 0x0, 0x0, @binary="f2e4b3b01ea8b0846aa3e45b0cb6585e140be95fc85a5a1b05b2710577a4d3f8dd8f96c99f49f5b630db2a166768818f46ec21fc06"}]}, @typed={0xbd, 0x1, 0x0, 0x0, @binary="2ef0ee35250ca97b11c042f9b95bc639869f7a5ae184b17b6be04167b71869598d4367852110edb790acef25da3accf5928e1af084561c6b0a83751aa54e0b68cacec128723709694c8960c0a08dfc2635b308f291f64676c17eb701e6f9a81f1e37e9e0c80eca6b720685f9766ae16d4a9e8d87b656d08c124c77a6faf07b696969cc5d03fb6c954f4ba901927bbc281c080b6c7f89bde68cb1919dc08da7e65aeee888ab1cd0752f48d72cb36411157c9f124833afbc5925"}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x113, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x105, 0xf5, 0x0, 0x1, [@generic="1c91728150a06dd80d92c669c1ffb33d93b10e7002cdf7411094dde86b0effb8f46cd676112bb98f5173b52ad15bc20e01e0177790b25e7da0e5ba1bf374a9b3289e41a09de6dc70478e7606f65586285694cfba47796c9bdb7f1ffa1aaea4ee29dc8f6300b4c373eb3fa3d7940d26c1985605ad19a53fe74755857f0b478907c7dfd26d90950957c661547872d2039a8603", @typed={0x8, 0x52, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x103}, @generic="7e66817e5eb7d5a5cddaae4aab0fce314b57f38a7be49888fb818a69bbaad25bb5", @generic="8f6c58953e3a5eafe49fa2944072846e7672febfc83e04597fc13da1cc5b81d5248bb82ba2d12a6604fa8fd0dc0f5618efc97a8f38af1aaf90ab38fbb50348f3b39b"]}, @typed={0xf, 0x17, 0x0, 0x0, @str='8{+]$:!{[:\x00'}]}, @generic="ad7fd6ebebe32d2501bca78d0588d78f4e656d13e53c2c4ab15d58f2a62deb8d91365115cbedb1c9ddfdb46ce0fb1975470b4e8c8b0936c6b793571571555222fb73eaf397b30203a574d4b1ab5120c37d516208b454336e6b303d1ddf2d8f79e61aeba0e1dd90f57378f033116271bb555a839baada4b56e3d386be8df7a11674f2a41f5c88800ceed175eac60e5d02ca7878c5d966cfc9d91f98c3a3c7165dd21cb8e55e35dd4007760bdcd8e1a052b8902595c20686ec39a7ba46793e8bf12a8dce3b0173c298da98cd9cf925d457b5061daa034f5ab5946d6c4779fc92af84a3f30c006169321763b795cbd68f450202f1", @generic="bdafb9308bf6", @typed={0x8, 0x104, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x71}, @typed={0x8, 0xc9, 0x0, 0x0, @pid}, @nested={0x4, 0xe2}]}, @generic="29b630dd4a4e2704a80ca3bd93fb4979432fbe4334f77eaf996439a374830a686c017aa079a18bb53250498243b33e8f326283a21b1d6881be95732d6100372b930ad615da9c67501128d29601b10b7420c19be68b4c2821b392d1ba25e15de6a7a7b9a68c96d4e7aa8c1e3bd844d0e3f1d966276316096f198b4557a328b535bb397b28c910e869f1ef0eca39910274e253d985d6ecf7964c480eea7b9261ad684d680df58d44482dfab9c2f15a1cf793bf49d59eda6c190c76c956cd9ecdf2e3061be2c9c95cd52ddad6df0b63c044bf56b135725801f77dc3dd065f82926c3d68b4de1db51b6d55c62b", @generic="3005046c0947180ab792d8bf087229686238068a2060c769962c20e0672d9fb7b5c0d0ca6ad66d537c8170d7c2a321803b3c26c206aa2f1825a3b0550cc6a8fc5a9ab6d26e8d85b6cdd66790a93c29719ecb2168b4996d09cf325ebb49e00d5d19ad729e5863a0e4d22e07a580e70757032d70"]}, @nested={0x83d, 0x133, 0x0, 0x1, [@generic="09c15be1c94253dbca3b1b05d34aca0cc5070940a6fee2917b7869069a718a16bd16d2a35b3e4cc476cc58313219e9d4f7f9e15f6d04851dbef8b089ef6378e0c52ee65c5c0e214d937d66b87179c9af782f34d4b7ad218382a62eaf3e1faa732cb0a5d050490fd5951c594aeeb16f4c24ec36e51a9ad216907aff8557ea2244855fe16c0fd002c333722c1106df89a86015487a73eaa93c779e3dfff7a73b087cfc99cf2745e6516b5d1ae42afe63bf8472cd3c6e216ad285a8bf38444f1a5e596a9a020ab84150f521ea0bc5fc4198938c6bfdb2b7ff0a70fd6f0ac4502d8e8ee82d8124d1f9255f42b453484264a37ba3b2c7e97b3aaa63", @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@remote}, @generic="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"]}]}]}]}]}, 0x1fd8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

129.968014ms ago: executing program 1 (id=2526):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521)

127.944015ms ago: executing program 0 (id=2527):
listen(0xffffffffffffffff, 0x100)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
close(r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}], 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x9, 0x200b, 0x1})
write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0xfce)
add_key$keyring(0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff)
unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)

0s ago: executing program 5 (id=2528):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x4e24, 0x3, 'wlc\x00', 0x5, 0xd9, 0x14}, {@remote, 0x4e23, 0x3, 0x4, 0x7, 0xe}}, 0x44)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}}, 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xfffffffc, 0x4, 0x3, 0x0, 0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x10}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r7, 0x0, 0x0, 0x10000, 0x4)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
modify_ldt$read(0x0, 0x0, 0x0)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f)
write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (fail_nth: 3)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x7b, 0xfffffffffffffee1)

kernel console output (not intermixed with test programs):

187:0 - no destination available
[ 1011.102844][ T5952] usb 2-1: new low-speed USB device number 70 using dummy_hcd
[ 1011.137852][T13860] vlan1: entered promiscuous mode
[ 1011.143492][T13860] vlan1: entered allmulticast mode
[ 1011.148646][T13860] veth0_vlan: entered allmulticast mode
[ 1011.212597][T12313] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1011.242548][    T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1011.265806][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1011.281153][ T5952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1011.376447][ T5952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1011.394867][T12313] usb 6-1: config 0 has an invalid interface number: 46 but max is 0
[ 1011.397136][ T5952] usb 2-1: string descriptor 0 read error: -22
[ 1011.409465][ T5952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1011.418948][T12313] usb 6-1: config 0 has no interface number 0
[ 1011.418997][T12313] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1011.431757][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.453175][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1011.461594][    T9] usb 4-1: config 0 has no interface number 0
[ 1011.472017][ T5952] usb 2-1: invalid UAC_HEADER (v1)
[ 1011.477771][T12313] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1011.477994][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1011.510048][T12313] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[ 1011.519511][T12313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.540400][T12313] usb 6-1: Product: syz
[ 1011.544928][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1011.557280][T12313] usb 6-1: Manufacturer: syz
[ 1011.561943][T12313] usb 6-1: SerialNumber: syz
[ 1011.581628][ T5952] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1011.582666][    T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1011.620712][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1011.630278][T12313] usb 6-1: config 0 descriptor??
[ 1011.638432][T12313] ums-karma 6-1:0.46: USB Mass Storage device detected
[ 1011.693732][    T9] usb 4-1: config 0 descriptor??
[ 1011.733401][T12313] ums-karma 6-1:0.46: probe with driver ums-karma failed with error -5
[ 1012.273238][T12313] IPVS: starting estimator thread 0...
[ 1012.289513][T13857] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1012.392739][T13871] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1012.406530][    T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.002D/input/input73
[ 1012.604263][T13870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1960'.
[ 1012.613574][T13870] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1960'.
[ 1012.635908][T13870] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1012.748613][T12300] usb 6-1: USB disconnect, device number 16
[ 1013.059281][ T5952] usb 2-1: USB disconnect, device number 70
[ 1013.173477][    T9] holtek_kbd 0003:04D9:A055.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1
[ 1013.210675][    T9] usb 4-1: USB disconnect, device number 90
[ 1013.481600][T13878] fido_id[13878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1013.505825][T13880] FAULT_INJECTION: forcing a failure.
[ 1013.505825][T13880] name failslab, interval 1, probability 0, space 0, times 0
[ 1013.542268][T13880] CPU: 1 UID: 0 PID: 13880 Comm: syz.0.1966 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1013.542298][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1013.542312][T13880] Call Trace:
[ 1013.542321][T13880]  <TASK>
[ 1013.542331][T13880]  dump_stack_lvl+0x189/0x250
[ 1013.542361][T13880]  ? __pfx____ratelimit+0x10/0x10
[ 1013.542384][T13880]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1013.542412][T13880]  ? __pfx__printk+0x10/0x10
[ 1013.542446][T13880]  ? __pfx___might_resched+0x10/0x10
[ 1013.542470][T13880]  ? fs_reclaim_acquire+0x7d/0x100
[ 1013.542501][T13880]  should_fail_ex+0x414/0x560
[ 1013.542530][T13880]  should_failslab+0xa8/0x100
[ 1013.542582][T13880]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1013.542605][T13880]  ? rtnl_newlink+0xed/0x1c70
[ 1013.542632][T13880]  ? kasan_save_free_info+0x46/0x50
[ 1013.542665][T13880]  rtnl_newlink+0xed/0x1c70
[ 1013.542693][T13880]  ? netlink_sendmsg+0x805/0xb30
[ 1013.542723][T13880]  ? __sock_sendmsg+0x21c/0x270
[ 1013.542746][T13880]  ? ____sys_sendmsg+0x505/0x830
[ 1013.542778][T13880]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1013.542810][T13880]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1013.542842][T13880]  ? do_syscall_64+0xfa/0x3b0
[ 1013.542865][T13880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.542897][T13880]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1013.542952][T13880]  ? kasan_quarantine_put+0xdd/0x220
[ 1013.542985][T13880]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1013.543016][T13880]  ? nlmon_xmit+0xb0/0x100
[ 1013.543042][T13880]  ? kmem_cache_free+0x18f/0x400
[ 1013.543072][T13880]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1013.543095][T13880]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1013.543118][T13880]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1013.543141][T13880]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1013.543167][T13880]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1013.543190][T13880]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1013.543211][T13880]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1013.543234][T13880]  ? __dev_queue_xmit+0x1cd7/0x3a70
[ 1013.543259][T13880]  ? __lock_acquire+0xab9/0xd20
[ 1013.543298][T13880]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1013.543322][T13880]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1013.543350][T13880]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1013.543375][T13880]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1013.543398][T13880]  ? ref_tracker_free+0x63a/0x7d0
[ 1013.543420][T13880]  ? __copy_skb_header+0xa7/0x550
[ 1013.543444][T13880]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1013.543480][T13880]  netlink_rcv_skb+0x205/0x470
[ 1013.543510][T13880]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1013.543590][T13880]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1013.543636][T13880]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1013.543665][T13880]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1013.543701][T13880]  netlink_unicast+0x75c/0x8e0
[ 1013.543753][T13880]  netlink_sendmsg+0x805/0xb30
[ 1013.543794][T13880]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1013.543833][T13880]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1013.543856][T13880]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1013.543888][T13880]  __sock_sendmsg+0x21c/0x270
[ 1013.543917][T13880]  ____sys_sendmsg+0x505/0x830
[ 1013.543957][T13880]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1013.544001][T13880]  ? import_iovec+0x74/0xa0
[ 1013.544035][T13880]  ___sys_sendmsg+0x21f/0x2a0
[ 1013.544072][T13880]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1013.544146][T13880]  ? __fget_files+0x2a/0x420
[ 1013.544170][T13880]  ? __fget_files+0x3a0/0x420
[ 1013.544207][T13880]  __x64_sys_sendmsg+0x19b/0x260
[ 1013.544243][T13880]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1013.544288][T13880]  ? __pfx_ksys_write+0x10/0x10
[ 1013.544306][T13880]  ? rcu_is_watching+0x15/0xb0
[ 1013.544335][T13880]  ? do_syscall_64+0xbe/0x3b0
[ 1013.544364][T13880]  do_syscall_64+0xfa/0x3b0
[ 1013.544386][T13880]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1013.544409][T13880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.544431][T13880]  ? clear_bhb_loop+0x60/0xb0
[ 1013.544459][T13880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.544479][T13880] RIP: 0033:0x7fb8b498ebe9
[ 1013.544499][T13880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1013.544517][T13880] RSP: 002b:00007fb8b5751038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1013.544547][T13880] RAX: ffffffffffffffda RBX: 00007fb8b4bb5fa0 RCX: 00007fb8b498ebe9
[ 1013.544564][T13880] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000005
[ 1013.544578][T13880] RBP: 00007fb8b5751090 R08: 0000000000000000 R09: 0000000000000000
[ 1013.544590][T13880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1013.544603][T13880] R13: 00007fb8b4bb6038 R14: 00007fb8b4bb5fa0 R15: 00007fff57b92878
[ 1013.544638][T13880]  </TASK>
[ 1014.590373][T13896] IPVS: stopping backup sync thread 13664 ...
[ 1015.396326][ T5952] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1015.404833][T12300] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1015.446498][T13899] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1015.577649][ T5952] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1015.592502][ T5952] usb 1-1: config 0 has no interface number 0
[ 1015.598674][ T5952] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.611431][ T5952] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.628558][ T5952] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1015.637973][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.650382][ T5952] usb 1-1: config 0 descriptor??
[ 1015.673956][ T5157] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1015.684324][ T5157] CPU: 0 UID: 0 PID: 5157 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1015.684352][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1015.684367][ T5157] Workqueue: hci5 hci_rx_work
[ 1015.684395][ T5157] Call Trace:
[ 1015.684404][ T5157]  <TASK>
[ 1015.684415][ T5157]  dump_stack_lvl+0x189/0x250
[ 1015.684457][ T5157]  ? kernfs_path_from_node+0x2c/0x260
[ 1015.684488][ T5157]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1015.684514][ T5157]  ? __pfx__printk+0x10/0x10
[ 1015.684546][ T5157]  ? kernfs_path_from_node+0x2c/0x260
[ 1015.684572][ T5157]  ? kernfs_path_from_node+0x2c/0x260
[ 1015.684602][ T5157]  ? kernfs_path_from_node+0x22c/0x260
[ 1015.684628][ T5157]  ? kernfs_path_from_node+0x2c/0x260
[ 1015.684660][ T5157]  sysfs_create_dir_ns+0x259/0x280
[ 1015.684690][ T5157]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1015.684720][ T5157]  ? do_raw_spin_unlock+0x122/0x240
[ 1015.684756][ T5157]  kobject_add_internal+0x59f/0xb40
[ 1015.684796][ T5157]  kobject_add+0x155/0x220
[ 1015.684829][ T5157]  ? __pfx_kobject_add+0x10/0x10
[ 1015.684858][ T5157]  ? _raw_spin_unlock+0x28/0x50
[ 1015.684898][ T5157]  ? get_device_parent+0x366/0x3a0
[ 1015.684937][ T5157]  device_add+0x408/0xb50
[ 1015.684976][ T5157]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1015.685016][ T5157]  le_conn_complete_evt+0xc3a/0x1220
[ 1015.685061][ T5157]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1015.685093][ T5157]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1015.685118][ T5157]  ? __asan_memcpy+0x40/0x70
[ 1015.685152][ T5157]  ? __pfx___mutex_lock+0x10/0x10
[ 1015.685178][ T5157]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1015.685203][ T5157]  ? skb_pull_data+0xfb/0x200
[ 1015.685234][ T5157]  hci_le_conn_complete_evt+0x187/0x450
[ 1015.685273][ T5157]  hci_event_packet+0x78c/0x1200
[ 1015.685301][ T5157]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1015.685333][ T5157]  ? __pfx_hci_event_packet+0x10/0x10
[ 1015.685359][ T5157]  ? kcov_remote_start+0x4d3/0x7f0
[ 1015.685393][ T5157]  ? lockdep_hardirqs_on+0x90/0x150
[ 1015.685427][ T5157]  ? hci_send_to_monitor+0xe2/0x570
[ 1015.685463][ T5157]  hci_rx_work+0x46a/0xe80
[ 1015.685497][ T5157]  ? process_scheduled_works+0x9ef/0x17b0
[ 1015.685526][ T5157]  process_scheduled_works+0xade/0x17b0
[ 1015.685586][ T5157]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1015.685631][ T5157]  worker_thread+0x8a0/0xda0
[ 1015.685688][ T5157]  kthread+0x70e/0x8a0
[ 1015.685724][ T5157]  ? __pfx_worker_thread+0x10/0x10
[ 1015.685749][ T5157]  ? __pfx_kthread+0x10/0x10
[ 1015.685782][ T5157]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1015.685803][ T5157]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1015.685824][ T5157]  ? __pfx_kthread+0x10/0x10
[ 1015.685856][ T5157]  ret_from_fork+0x3fc/0x770
[ 1015.685882][ T5157]  ? __pfx_ret_from_fork+0x10/0x10
[ 1015.685911][ T5157]  ? __switch_to_asm+0x39/0x70
[ 1015.685938][ T5157]  ? __switch_to_asm+0x33/0x70
[ 1015.685965][ T5157]  ? __pfx_kthread+0x10/0x10
[ 1015.685997][ T5157]  ret_from_fork_asm+0x1a/0x30
[ 1015.686046][ T5157]  </TASK>
[ 1015.686078][ T5157] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1015.894660][T12300] usb 4-1: Using ep0 maxpacket: 16
[ 1015.908749][ T5157] Bluetooth: hci5: failed to register connection device
[ 1016.029856][T12300] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[ 1016.275974][T12300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.676801][T12300] usb 4-1: Product: syz
[ 1016.689720][T12300] usb 4-1: Manufacturer: syz
[ 1016.704627][T12300] usb 4-1: SerialNumber: syz
[ 1016.752048][T12300] usb 4-1: config 0 descriptor??
[ 1016.769912][T12300] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[ 1016.896249][ T5952] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.002E/input/input74
[ 1016.988175][T12300] usb 4-1: USB disconnect, device number 91
[ 1019.305606][ T5952] holtek_kbd 0003:04D9:A055.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1
[ 1019.390880][ T5952] usb 1-1: USB disconnect, device number 73
[ 1019.850458][T13932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1019.857142][T13932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1019.866639][T13932] vhci_hcd vhci_hcd.0: Device attached
[ 1020.330776][T13935] vhci_hcd: connection closed
[ 1020.355039][T12314] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[ 1020.418633][ T8267] vhci_hcd: stop threads
[ 1020.511928][ T8267] vhci_hcd: release socket
[ 1020.662412][ T8267] vhci_hcd: disconnect device
[ 1020.686058][ T5157] Bluetooth: hci5: command 0x0405 tx timeout
[ 1021.114518][T13940] fido_id[13940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1021.355691][T13947] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1021.916140][T13948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'.
[ 1022.063934][T13956] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1022.682854][   T30] kauditd_printk_skb: 43 callbacks suppressed
[ 1022.682877][   T30] audit: type=1804 audit(1755290495.159:424): pid=13961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1989" name="file0" dev="ramfs" ino=38902 res=1 errno=0
[ 1022.848484][T13961] FAULT_INJECTION: forcing a failure.
[ 1022.848484][T13961] name failslab, interval 1, probability 0, space 0, times 0
[ 1022.949668][T13961] CPU: 0 UID: 0 PID: 13961 Comm: syz.5.1989 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1022.949698][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1022.949711][T13961] Call Trace:
[ 1022.949720][T13961]  <TASK>
[ 1022.949729][T13961]  dump_stack_lvl+0x189/0x250
[ 1022.949759][T13961]  ? __pfx____ratelimit+0x10/0x10
[ 1022.949782][T13961]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1022.949806][T13961]  ? __pfx__printk+0x10/0x10
[ 1022.949839][T13961]  ? __pfx___might_resched+0x10/0x10
[ 1022.949866][T13961]  should_fail_ex+0x414/0x560
[ 1022.949893][T13961]  ? bpf_uprobe_multi_link_attach+0x585/0xf10
[ 1022.949922][T13961]  should_failslab+0xa8/0x100
[ 1022.949947][T13961]  __kvmalloc_node_noprof+0x161/0x5f0
[ 1022.949970][T13961]  ? bpf_uprobe_multi_link_attach+0x585/0xf10
[ 1022.949998][T13961]  ? bpf_uprobe_multi_link_attach+0x566/0xf10
[ 1022.950052][T13961]  bpf_uprobe_multi_link_attach+0x585/0xf10
[ 1022.950099][T13961]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[ 1022.950130][T13961]  ? __fget_files+0x2a/0x420
[ 1022.950181][T13961]  ? __fget_files+0x2a/0x420
[ 1022.950206][T13961]  ? __fget_files+0x2a/0x420
[ 1022.950234][T13961]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[ 1022.950264][T13961]  link_create+0x647/0x7e0
[ 1022.950291][T13961]  __sys_bpf+0x599/0x860
[ 1022.950326][T13961]  ? __pfx___sys_bpf+0x10/0x10
[ 1022.950380][T13961]  ? rcu_is_watching+0x15/0xb0
[ 1022.950414][T13961]  __x64_sys_bpf+0x7c/0x90
[ 1022.950444][T13961]  do_syscall_64+0xfa/0x3b0
[ 1022.950467][T13961]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1022.950490][T13961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1022.950512][T13961]  ? clear_bhb_loop+0x60/0xb0
[ 1022.950539][T13961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1022.950561][T13961] RIP: 0033:0x7fee77f8ebe9
[ 1022.950582][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1022.950601][T13961] RSP: 002b:00007fee78de3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1022.950625][T13961] RAX: ffffffffffffffda RBX: 00007fee781b5fa0 RCX: 00007fee77f8ebe9
[ 1022.950641][T13961] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[ 1022.950655][T13961] RBP: 00007fee78de3090 R08: 0000000000000000 R09: 0000000000000000
[ 1022.950669][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1022.950683][T13961] R13: 00007fee781b6038 R14: 00007fee781b5fa0 R15: 00007fffff4cc958
[ 1022.950718][T13961]  </TASK>
[ 1023.192228][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1023.801151][T13972] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1024.132721][    T9] usb 2-1: new low-speed USB device number 71 using dummy_hcd
[ 1024.151527][T13980] FAULT_INJECTION: forcing a failure.
[ 1024.151527][T13980] name failslab, interval 1, probability 0, space 0, times 0
[ 1024.177062][T13980] CPU: 0 UID: 0 PID: 13980 Comm: syz.0.1994 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1024.177083][T13980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1024.177092][T13980] Call Trace:
[ 1024.177099][T13980]  <TASK>
[ 1024.177107][T13980]  dump_stack_lvl+0x189/0x250
[ 1024.177128][T13980]  ? __pfx____ratelimit+0x10/0x10
[ 1024.177145][T13980]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1024.177163][T13980]  ? __pfx__printk+0x10/0x10
[ 1024.177187][T13980]  ? __pfx___might_resched+0x10/0x10
[ 1024.177204][T13980]  ? fs_reclaim_acquire+0x7d/0x100
[ 1024.177227][T13980]  should_fail_ex+0x414/0x560
[ 1024.177257][T13980]  should_failslab+0xa8/0x100
[ 1024.177283][T13980]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1024.177306][T13980]  ? rtnl_newlink+0xed/0x1c70
[ 1024.177334][T13980]  ? kasan_save_free_info+0x46/0x50
[ 1024.177358][T13980]  rtnl_newlink+0xed/0x1c70
[ 1024.177376][T13980]  ? netlink_sendmsg+0x805/0xb30
[ 1024.177396][T13980]  ? __sock_sendmsg+0x21c/0x270
[ 1024.177413][T13980]  ? ____sys_sendmsg+0x505/0x830
[ 1024.177434][T13980]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1024.177455][T13980]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1024.177477][T13980]  ? do_syscall_64+0xfa/0x3b0
[ 1024.177493][T13980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.177514][T13980]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1024.177551][T13980]  ? kasan_quarantine_put+0xdd/0x220
[ 1024.177574][T13980]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1024.177595][T13980]  ? nlmon_xmit+0xb0/0x100
[ 1024.177613][T13980]  ? kmem_cache_free+0x18f/0x400
[ 1024.177633][T13980]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1024.177649][T13980]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1024.177666][T13980]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1024.177682][T13980]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1024.177700][T13980]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1024.177716][T13980]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1024.177730][T13980]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1024.177759][T13980]  ? __dev_queue_xmit+0x1cd7/0x3a70
[ 1024.177777][T13980]  ? __lock_acquire+0xab9/0xd20
[ 1024.177809][T13980]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1024.177828][T13980]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1024.177850][T13980]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1024.177868][T13980]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1024.177885][T13980]  ? ref_tracker_free+0x63a/0x7d0
[ 1024.177900][T13980]  ? __copy_skb_header+0xa7/0x550
[ 1024.177915][T13980]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1024.177938][T13980]  netlink_rcv_skb+0x205/0x470
[ 1024.177958][T13980]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1024.177978][T13980]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1024.178007][T13980]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1024.178027][T13980]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1024.178050][T13980]  netlink_unicast+0x75c/0x8e0
[ 1024.178081][T13980]  netlink_sendmsg+0x805/0xb30
[ 1024.178108][T13980]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1024.178135][T13980]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1024.178149][T13980]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1024.178170][T13980]  __sock_sendmsg+0x21c/0x270
[ 1024.178209][T13980]  ____sys_sendmsg+0x505/0x830
[ 1024.178246][T13980]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1024.178288][T13980]  ? import_iovec+0x74/0xa0
[ 1024.178313][T13980]  ___sys_sendmsg+0x21f/0x2a0
[ 1024.178339][T13980]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1024.178390][T13980]  ? __fget_files+0x2a/0x420
[ 1024.178407][T13980]  ? __fget_files+0x3a0/0x420
[ 1024.178432][T13980]  __x64_sys_sendmsg+0x19b/0x260
[ 1024.178458][T13980]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1024.178490][T13980]  ? __pfx_ksys_write+0x10/0x10
[ 1024.178502][T13980]  ? rcu_is_watching+0x15/0xb0
[ 1024.178523][T13980]  ? do_syscall_64+0xbe/0x3b0
[ 1024.178543][T13980]  do_syscall_64+0xfa/0x3b0
[ 1024.178559][T13980]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1024.178575][T13980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.178589][T13980]  ? clear_bhb_loop+0x60/0xb0
[ 1024.178608][T13980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.178623][T13980] RIP: 0033:0x7fb8b498ebe9
[ 1024.178637][T13980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1024.178650][T13980] RSP: 002b:00007fb8b5751038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1024.178666][T13980] RAX: ffffffffffffffda RBX: 00007fb8b4bb5fa0 RCX: 00007fb8b498ebe9
[ 1024.178696][T13980] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[ 1024.178707][T13980] RBP: 00007fb8b5751090 R08: 0000000000000000 R09: 0000000000000000
[ 1024.178717][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1024.178726][T13980] R13: 00007fb8b4bb6038 R14: 00007fb8b4bb5fa0 R15: 00007fff57b92878
[ 1024.178754][T13980]  </TASK>
[ 1024.626265][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1024.765036][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1024.775005][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1024.785249][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1024.797711][    T9] usb 2-1: string descriptor 0 read error: -22
[ 1024.804336][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1024.813785][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.830413][    T9] usb 2-1: invalid UAC_HEADER (v1)
[ 1024.853771][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1024.932614][   T43] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1024.972937][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1025.048242][    T9] usb 2-1: USB disconnect, device number 71
[ 1025.112504][   T43] usb 4-1: device descriptor read/64, error -71
[ 1025.352491][   T43] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1025.812549][   T43] usb 4-1: device descriptor read/64, error -71
[ 1025.924796][   T43] usb usb4-port1: attempt power cycle
[ 1026.412529][T12314] vhci_hcd: vhci_device speed not set
[ 1026.635309][T14002] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1026.883559][T14004] netlink: 'syz.4.2002': attribute type 2 has an invalid length.
[ 1027.572474][   T43] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1027.620971][   T43] usb 4-1: device descriptor read/8, error -71
[ 1027.891886][T14014] 9pnet_fd: Insufficient options for proto=fd
[ 1027.926946][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2003'.
[ 1028.327572][T14020] netlink: 'syz.4.2006': attribute type 2 has an invalid length.
[ 1028.361135][T14020] k�*�]�: entered promiscuous mode
[ 1029.161972][T14030] sctp: [Deprecated]: syz.3.2008 (pid 14030) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1029.161972][T14030] Use struct sctp_sack_info instead
[ 1029.552515][T12310] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1029.719438][T14033] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2012'.
[ 1029.743181][T12310] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1029.767816][T12310] usb 1-1: config 0 has no interface number 0
[ 1029.774332][T12310] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1029.788427][T12310] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1029.798638][T12310] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1029.812333][T12310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.830252][T12310] usb 1-1: config 0 descriptor??
[ 1030.028607][T14040] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1030.139871][T14041] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1030.905391][T12310] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.002F/input/input75
[ 1031.142656][   T24] usb 2-1: new low-speed USB device number 72 using dummy_hcd
[ 1031.144261][T12310] holtek_kbd 0003:04D9:A055.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1
[ 1031.378193][T12310] usb 1-1: USB disconnect, device number 74
[ 1031.659262][   T30] audit: type=1800 audit(1755290504.069:425): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2014" name="file1" dev="tmpfs" ino=2546 res=0 errno=0
[ 1032.330325][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1032.416093][T14055] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 1032.876004][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.911907][T14046] fido_id[14046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1033.042737][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1033.054768][   T24] usb 2-1: string descriptor 0 read error: -71
[ 1033.061890][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1033.071069][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.101953][   T24] usb 2-1: can't set config #1, error -71
[ 1033.136897][   T24] usb 2-1: USB disconnect, device number 72
[ 1033.271112][T14065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2020'.
[ 1033.377095][T14067] virtio-fs: tag </dev/md0> not found
[ 1033.622540][T12310] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1033.872806][T12310] usb 6-1: Using ep0 maxpacket: 32
[ 1034.752528][T12310] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1034.772918][T12310] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1034.782539][T12310] usb 6-1: can't read configurations, error -71
[ 1034.863010][T14081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2025'.
[ 1034.955804][T14085] netlink: 'syz.3.2027': attribute type 1 has an invalid length.
[ 1034.963982][T14085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2027'.
[ 1036.189700][T14107] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1037.142483][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2029'.
[ 1037.142917][   T24] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[ 1037.390335][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1037.475283][T14112] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1037.506886][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1037.758837][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1037.984917][   T24] usb 6-1: string descriptor 0 read error: -22
[ 1038.006606][   T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1038.035761][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1038.096607][   T24] usb 6-1: invalid UAC_HEADER (v1)
[ 1038.799210][   T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1038.820329][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1039.031215][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2036'.
[ 1039.242756][    C1] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1040.210923][T12300] usb 6-1: USB disconnect, device number 19
[ 1040.961933][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2042'.
[ 1041.282269][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1041.447801][   T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1041.484232][   T24] usb 6-1: config 0 has no interface number 0
[ 1041.532167][   T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1041.592562][   T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1041.617293][   T24] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1042.264808][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1042.296769][   T24] usb 6-1: config 0 descriptor??
[ 1042.392655][ T5952] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1042.653865][ T5952] usb 1-1: Using ep0 maxpacket: 16
[ 1042.732538][ T5952] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1042.741684][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.765504][   T24] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0030/input/input76
[ 1042.777034][ T5952] usb 1-1: Product: syz
[ 1042.781234][ T5952] usb 1-1: Manufacturer: syz
[ 1042.789886][ T5952] usb 1-1: SerialNumber: syz
[ 1042.828722][ T5952] usb 1-1: config 0 descriptor??
[ 1042.863592][ T5952] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1042.951317][   T24] holtek_kbd 0003:04D9:A055.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1
[ 1042.995806][   T24] usb 6-1: USB disconnect, device number 20
[ 1043.067751][ T5952] gp8psk: usb in 128 operation failed.
[ 1043.088227][ T5952] gp8psk: usb in 137 operation failed.
[ 1043.101934][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1043.113313][T12300] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[ 1043.244618][ T5952] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[ 1043.467540][T12300] usb 4-1: too many configurations: 227, using maximum allowed: 8
[ 1043.475560][ T5952] usb 1-1: media controller created
[ 1043.478375][T14173] fido_id[14173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1044.270176][T12300] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[ 1044.345249][T12300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.384910][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1044.403077][T12300] usb 4-1: config 0 descriptor??
[ 1044.535914][T12300] pwc: Samsung MPC-C10 USB webcam detected.
[ 1044.541900][T12300] pwc: Warning: more than 1 configuration available.
[ 1044.818753][T14190] FAULT_INJECTION: forcing a failure.
[ 1044.818753][T14190] name failslab, interval 1, probability 0, space 0, times 0
[ 1044.832867][T14190] CPU: 1 UID: 0 PID: 14190 Comm: syz.0.2054 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1044.832897][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1044.832912][T14190] Call Trace:
[ 1044.832922][T14190]  <TASK>
[ 1044.832932][T14190]  dump_stack_lvl+0x189/0x250
[ 1044.832965][T14190]  ? __pfx____ratelimit+0x10/0x10
[ 1044.832990][T14190]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1044.833017][T14190]  ? __pfx__printk+0x10/0x10
[ 1044.833054][T14190]  ? __pfx___might_resched+0x10/0x10
[ 1044.833078][T14190]  ? fs_reclaim_acquire+0x7d/0x100
[ 1044.833111][T14190]  should_fail_ex+0x414/0x560
[ 1044.833142][T14190]  should_failslab+0xa8/0x100
[ 1044.833170][T14190]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1044.833192][T14190]  ? genl_start+0x1c9/0x6c0
[ 1044.833223][T14190]  genl_start+0x1c9/0x6c0
[ 1044.833245][T14190]  ? netlink_lookup+0x30/0x200
[ 1044.833284][T14190]  __netlink_dump_start+0x466/0x7e0
[ 1044.833325][T14190]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[ 1044.833363][T14190]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 1044.833388][T14190]  ? genl_get_cmd+0x7d9/0x910
[ 1044.833417][T14190]  ? __pfx_genl_start+0x10/0x10
[ 1044.833439][T14190]  ? __pfx_genl_dumpit+0x10/0x10
[ 1044.833460][T14190]  ? __pfx_genl_done+0x10/0x10
[ 1044.833503][T14190]  genl_rcv_msg+0x5da/0x790
[ 1044.833536][T14190]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1044.833557][T14190]  ? ref_tracker_free+0x63a/0x7d0
[ 1044.833582][T14190]  ? __pfx_nl80211_dump_station+0x10/0x10
[ 1044.833609][T14190]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1044.833649][T14190]  netlink_rcv_skb+0x205/0x470
[ 1044.833689][T14190]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1044.833715][T14190]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1044.833768][T14190]  ? down_read+0x1ad/0x2e0
[ 1044.833800][T14190]  genl_rcv+0x28/0x40
[ 1044.833825][T14190]  netlink_unicast+0x75c/0x8e0
[ 1044.833868][T14190]  netlink_sendmsg+0x805/0xb30
[ 1044.833913][T14190]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1044.833956][T14190]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1044.833979][T14190]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1044.834013][T14190]  __sock_sendmsg+0x21c/0x270
[ 1044.834045][T14190]  ____sys_sendmsg+0x505/0x830
[ 1044.834096][T14190]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1044.834144][T14190]  ? import_iovec+0x74/0xa0
[ 1044.834181][T14190]  ___sys_sendmsg+0x21f/0x2a0
[ 1044.834229][T14190]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1044.834307][T14190]  ? __fget_files+0x2a/0x420
[ 1044.834331][T14190]  ? __fget_files+0x3a0/0x420
[ 1044.834369][T14190]  __x64_sys_sendmsg+0x19b/0x260
[ 1044.834406][T14190]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1044.834453][T14190]  ? __pfx_ksys_write+0x10/0x10
[ 1044.834471][T14190]  ? rcu_is_watching+0x15/0xb0
[ 1044.834520][T14190]  ? do_syscall_64+0xbe/0x3b0
[ 1044.834551][T14190]  do_syscall_64+0xfa/0x3b0
[ 1044.834575][T14190]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1044.834606][T14190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1044.834629][T14190]  ? clear_bhb_loop+0x60/0xb0
[ 1044.834658][T14190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1044.834690][T14190] RIP: 0033:0x7fb8b498ebe9
[ 1044.834711][T14190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1044.834731][T14190] RSP: 002b:00007fb8b570f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1044.834756][T14190] RAX: ffffffffffffffda RBX: 00007fb8b4bb6180 RCX: 00007fb8b498ebe9
[ 1044.834774][T14190] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007
[ 1044.834788][T14190] RBP: 00007fb8b570f090 R08: 0000000000000000 R09: 0000000000000000
[ 1044.834803][T14190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1044.834817][T14190] R13: 00007fb8b4bb6218 R14: 00007fb8b4bb6180 R15: 00007fff57b92878
[ 1044.834855][T14190]  </TASK>
[ 1045.195071][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1045.259606][ T5952] gp8psk_fe: Frontend revision 1 attached
[ 1045.266068][ T5952] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1045.275680][ T5952] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1045.329678][ T5952] gp8psk: usb in 138 operation failed.
[ 1045.335365][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[ 1045.345614][ T5952] gp8psk: found Genpix USB device pID = 201 (hex)
[ 1045.355189][ T5952] usb 1-1: USB disconnect, device number 75
[ 1045.541894][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[ 1047.782489][T12310] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1047.861446][T14208] netlink: 'syz.0.2060': attribute type 39 has an invalid length.
[ 1047.934997][T12310] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1047.965149][T12310] usb 6-1: config 0 has no interface number 0
[ 1047.971381][T12310] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1048.078329][T12310] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1048.118830][T12310] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1048.128602][T12310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.155819][T12310] usb 6-1: config 0 descriptor??
[ 1048.267562][T12300] pwc: send_video_command error -71
[ 1048.289378][T12300] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1048.344489][T12300] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 1049.333989][T12300] usb 4-1: USB disconnect, device number 96
[ 1049.358958][T12310] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0031/input/input77
[ 1049.404115][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2059'.
[ 1049.413475][T14219] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2059'.
[ 1049.455823][T14219] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1049.590614][T12310] holtek_kbd 0003:04D9:A055.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1
[ 1050.782501][T12310] usb 6-1: reset high-speed USB device number 21 using dummy_hcd
[ 1051.139146][T14233] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1052.632786][   T43] usb 1-1: new low-speed USB device number 76 using dummy_hcd
[ 1052.816013][   T43] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1052.826798][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.855062][   T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1052.898463][   T43] usb 1-1: string descriptor 0 read error: -22
[ 1052.914459][   T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1052.957258][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.023034][T12300] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1053.094157][   T43] usb 1-1: invalid UAC_HEADER (v1)
[ 1053.289475][T12300] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1053.429374][T12300] usb 2-1: config 0 has no interface number 0
[ 1053.444689][   T43] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1053.487722][T12300] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.511682][T12300] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.571108][T12300] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1053.668833][T12300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.769121][T12300] usb 2-1: config 0 descriptor??
[ 1053.997284][T14250] overlayfs: failed to clone upperpath
[ 1054.212706][    C1] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1054.378291][T12314] usb 1-1: USB disconnect, device number 76
[ 1054.568286][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[ 1054.577679][T14252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2069'.
[ 1054.616868][T14252] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1054.918531][T12300] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0032/input/input78
[ 1055.269844][T12300] holtek_kbd 0003:04D9:A055.0032: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[ 1055.933498][T12310] usb 6-1: device descriptor read/64, error -110
[ 1056.040930][T14258] vlan2: entered promiscuous mode
[ 1056.079946][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'.
[ 1056.140228][T14258] hsr_slave_1: entered promiscuous mode
[ 1056.168418][T14258] vlan2: entered allmulticast mode
[ 1056.192686][T12310] usb 6-1: reset high-speed USB device number 21 using dummy_hcd
[ 1056.208930][T14258] hsr_slave_1: entered allmulticast mode
[ 1056.222610][T12300] usb 2-1: reset high-speed USB device number 73 using dummy_hcd
[ 1056.342519][T12310] usb 6-1: device descriptor read/64, error -32
[ 1056.586762][T12310] usb 6-1: reset high-speed USB device number 21 using dummy_hcd
[ 1056.615806][T12310] usb 6-1: device descriptor read/8, error -32
[ 1056.696391][T14261] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1056.872745][T12310] usb 6-1: reset high-speed USB device number 21 using dummy_hcd
[ 1056.926547][T12310] usb 6-1: device descriptor read/8, error -32
[ 1057.072780][T12310] raw-gadget.0 gadget.5: failed to queue suspend event
[ 1057.101646][T14216] raw-gadget.0 gadget.5: failed to queue disconnect event
[ 1057.142913][    T9] usb 6-1: USB disconnect, device number 21
[ 1057.621805][T14276] vlan1: entered promiscuous mode
[ 1057.629493][T14276] vlan1: entered allmulticast mode
[ 1057.634875][T14276] veth0_vlan: entered allmulticast mode
[ 1057.640552][T14276] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[ 1060.887764][T14293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2081'.
[ 1060.954239][ T5952] usb 2-1: USB disconnect, device number 73
[ 1067.528979][T14339] IPVS: stopping backup sync thread 10752 ...
[ 1068.160376][T14346] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2095'.
[ 1068.374729][    T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1068.778656][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1069.099230][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1069.114000][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1069.141611][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1069.157108][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1069.182757][T14351] comedi comedi2: comedi_config --init_data is deprecated
[ 1069.193913][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.332815][    T9] usb 4-1: config 0 descriptor??
[ 1069.699216][    T9] hdpvr 4-1:0.0: firmware version 0x1e dated ��q|RC�@�2���2[�7�B���D�^jvi0�
[ 1069.699216][    T9] ��
[ 1070.111591][    T9] hdpvr 4-1:0.0: device init failed
[ 1070.127612][    T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[ 1070.168695][    T9] usb 4-1: USB disconnect, device number 97
[ 1073.984083][T14389] IPVS: stopping backup sync thread 13899 ...
[ 1074.925943][T14393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2109'.
[ 1075.293070][T14403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1075.621803][T14408] NILFS (nullb0): couldn't find nilfs on the device
[ 1077.018993][T14428] FAULT_INJECTION: forcing a failure.
[ 1077.018993][T14428] name failslab, interval 1, probability 0, space 0, times 0
[ 1077.213118][T14428] CPU: 0 UID: 0 PID: 14428 Comm: syz.1.2122 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1077.213151][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1077.213166][T14428] Call Trace:
[ 1077.213176][T14428]  <TASK>
[ 1077.213187][T14428]  dump_stack_lvl+0x189/0x250
[ 1077.213220][T14428]  ? __pfx____ratelimit+0x10/0x10
[ 1077.213245][T14428]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1077.213271][T14428]  ? __pfx__printk+0x10/0x10
[ 1077.213308][T14428]  ? __pfx___might_resched+0x10/0x10
[ 1077.213339][T14428]  should_fail_ex+0x414/0x560
[ 1077.213369][T14428]  should_failslab+0xa8/0x100
[ 1077.213397][T14428]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[ 1077.213422][T14428]  ? xfrm_add_sa+0x1eb9/0x4070
[ 1077.213461][T14428]  kmemdup_noprof+0x2b/0x70
[ 1077.213492][T14428]  xfrm_add_sa+0x1eb9/0x4070
[ 1077.213534][T14428]  ? __pfx_xfrm_add_sa+0x10/0x10
[ 1077.213579][T14428]  ? __nla_parse+0x40/0x60
[ 1077.213613][T14428]  xfrm_user_rcv_msg+0x7a0/0xab0
[ 1077.213652][T14428]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1077.213722][T14428]  ? __mutex_trylock_common+0x153/0x260
[ 1077.213755][T14428]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1077.213789][T14428]  ? rcu_is_watching+0x15/0xb0
[ 1077.213815][T14428]  ? trace_contention_end+0x39/0x120
[ 1077.213851][T14428]  netlink_rcv_skb+0x205/0x470
[ 1077.213886][T14428]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1077.213923][T14428]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1077.213974][T14428]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1077.214012][T14428]  xfrm_netlink_rcv+0x79/0x90
[ 1077.214044][T14428]  netlink_unicast+0x75c/0x8e0
[ 1077.214087][T14428]  netlink_sendmsg+0x805/0xb30
[ 1077.214130][T14428]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1077.214166][T14428]  ? rcu_is_watching+0x15/0xb0
[ 1077.214195][T14428]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1077.214218][T14428]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1077.214252][T14428]  __sock_sendmsg+0x21c/0x270
[ 1077.214284][T14428]  ____sys_sendmsg+0x505/0x830
[ 1077.214326][T14428]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1077.214373][T14428]  ? import_iovec+0x74/0xa0
[ 1077.214410][T14428]  ___sys_sendmsg+0x21f/0x2a0
[ 1077.214449][T14428]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1077.214527][T14428]  ? __fget_files+0x2a/0x420
[ 1077.214552][T14428]  ? __fget_files+0x3a0/0x420
[ 1077.214597][T14428]  __x64_sys_sendmsg+0x19b/0x260
[ 1077.214636][T14428]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1077.214683][T14428]  ? __pfx_ksys_write+0x10/0x10
[ 1077.214703][T14428]  ? rcu_is_watching+0x15/0xb0
[ 1077.214734][T14428]  ? do_syscall_64+0xbe/0x3b0
[ 1077.214764][T14428]  do_syscall_64+0xfa/0x3b0
[ 1077.214788][T14428]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1077.214813][T14428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.214836][T14428]  ? clear_bhb_loop+0x60/0xb0
[ 1077.214865][T14428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.214888][T14428] RIP: 0033:0x7fdf75b8ebe9
[ 1077.214909][T14428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1077.214931][T14428] RSP: 002b:00007fdf769e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1077.214956][T14428] RAX: ffffffffffffffda RBX: 00007fdf75db5fa0 RCX: 00007fdf75b8ebe9
[ 1077.214974][T14428] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1077.214989][T14428] RBP: 00007fdf769e3090 R08: 0000000000000000 R09: 0000000000000000
[ 1077.215004][T14428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1077.215018][T14428] R13: 00007fdf75db6038 R14: 00007fdf75db5fa0 R15: 00007ffcb2af0c88
[ 1077.215055][T14428]  </TASK>
[ 1077.223456][T14432] overlayfs: failed to resolve './file1/file0': -2
[ 1081.132946][T14434] IPVS: stopping backup sync thread 14436 ...
[ 1082.973331][T14442] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2125'.
[ 1082.974677][T14451] netlink: 'syz.1.2123': attribute type 1 has an invalid length.
[ 1084.716645][T14451] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1087.001903][T14479] FAULT_INJECTION: forcing a failure.
[ 1087.001903][T14479] name failslab, interval 1, probability 0, space 0, times 0
[ 1087.040046][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'.
[ 1087.053583][T14479] CPU: 1 UID: 0 PID: 14479 Comm: syz.3.2132 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1087.053612][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1087.053628][T14479] Call Trace:
[ 1087.053637][T14479]  <TASK>
[ 1087.053648][T14479]  dump_stack_lvl+0x189/0x250
[ 1087.053680][T14479]  ? __pfx____ratelimit+0x10/0x10
[ 1087.053705][T14479]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1087.053730][T14479]  ? __pfx__printk+0x10/0x10
[ 1087.053766][T14479]  ? __pfx___might_resched+0x10/0x10
[ 1087.053809][T14479]  should_fail_ex+0x414/0x560
[ 1087.053846][T14479]  should_failslab+0xa8/0x100
[ 1087.053873][T14479]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1087.053896][T14479]  ? __alloc_skb+0x112/0x2d0
[ 1087.053931][T14479]  __alloc_skb+0x112/0x2d0
[ 1087.053967][T14479]  netlink_sendmsg+0x5c6/0xb30
[ 1087.054010][T14479]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1087.054051][T14479]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1087.054072][T14479]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1087.054105][T14479]  __sock_sendmsg+0x21c/0x270
[ 1087.054135][T14479]  ____sys_sendmsg+0x505/0x830
[ 1087.054174][T14479]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1087.054219][T14479]  ? import_iovec+0x74/0xa0
[ 1087.054254][T14479]  ___sys_sendmsg+0x21f/0x2a0
[ 1087.054290][T14479]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1087.054365][T14479]  ? __fget_files+0x2a/0x420
[ 1087.054389][T14479]  ? __fget_files+0x3a0/0x420
[ 1087.054436][T14479]  __x64_sys_sendmsg+0x19b/0x260
[ 1087.054470][T14479]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1087.054512][T14479]  ? __pfx_ksys_write+0x10/0x10
[ 1087.054529][T14479]  ? rcu_is_watching+0x15/0xb0
[ 1087.054556][T14479]  ? do_syscall_64+0xbe/0x3b0
[ 1087.054584][T14479]  do_syscall_64+0xfa/0x3b0
[ 1087.054606][T14479]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1087.054631][T14479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1087.054652][T14479]  ? clear_bhb_loop+0x60/0xb0
[ 1087.054677][T14479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1087.054697][T14479] RIP: 0033:0x7f3005d8ebe9
[ 1087.054714][T14479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1087.054732][T14479] RSP: 002b:00007f3006c18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1087.054754][T14479] RAX: ffffffffffffffda RBX: 00007f3005fb5fa0 RCX: 00007f3005d8ebe9
[ 1087.054770][T14479] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015
[ 1087.054784][T14479] RBP: 00007f3006c18090 R08: 0000000000000000 R09: 0000000000000000
[ 1087.054797][T14479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1087.054810][T14479] R13: 00007f3005fb6038 R14: 00007f3005fb5fa0 R15: 00007ffeda072038
[ 1087.054848][T14479]  </TASK>
[ 1088.055062][T14480] vlan2: entered promiscuous mode
[ 1088.060187][T14480] batadv0: entered promiscuous mode
[ 1088.371423][T14491] IPVS: stopping backup sync thread 13956 ...
[ 1089.448539][T14499] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2139'.
[ 1089.672004][T14497] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1089.679723][T14501] overlay: ./file0 is not a directory
[ 1089.718448][T14497] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1090.784020][T12314] tipc: Node number set to 1801266386
[ 1091.347379][T14521] FAULT_INJECTION: forcing a failure.
[ 1091.347379][T14521] name failslab, interval 1, probability 0, space 0, times 0
[ 1091.362841][T14521] CPU: 0 UID: 0 PID: 14521 Comm: syz.3.2146 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1091.362872][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1091.362886][T14521] Call Trace:
[ 1091.362896][T14521]  <TASK>
[ 1091.362906][T14521]  dump_stack_lvl+0x189/0x250
[ 1091.362936][T14521]  ? __pfx____ratelimit+0x10/0x10
[ 1091.362960][T14521]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1091.362987][T14521]  ? __pfx__printk+0x10/0x10
[ 1091.363023][T14521]  ? __pfx___might_resched+0x10/0x10
[ 1091.363054][T14521]  should_fail_ex+0x414/0x560
[ 1091.363085][T14521]  should_failslab+0xa8/0x100
[ 1091.363113][T14521]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1091.363137][T14521]  ? __alloc_skb+0x112/0x2d0
[ 1091.363173][T14521]  __alloc_skb+0x112/0x2d0
[ 1091.363210][T14521]  tipc_msg_build+0x13b/0xcf0
[ 1091.363242][T14521]  ? tipc_node_find+0xb3/0x480
[ 1091.363264][T14521]  ? __pfx_tipc_msg_build+0x10/0x10
[ 1091.363295][T14521]  ? rcu_is_watching+0x15/0xb0
[ 1091.363418][T14521]  tipc_send_group_msg+0x25d/0x570
[ 1091.363459][T14521]  ? __pfx_tipc_send_group_msg+0x10/0x10
[ 1091.363497][T14521]  ? __tipc_sendmsg+0x1ba7/0x2960
[ 1091.363524][T14521]  __tipc_sendmsg+0x1bd3/0x2960
[ 1091.363552][T14521]  ? rcu_is_watching+0x15/0xb0
[ 1091.363601][T14521]  ? __pfx___tipc_sendmsg+0x10/0x10
[ 1091.363633][T14521]  ? preempt_schedule_common+0x83/0xd0
[ 1091.363664][T14521]  ? __pfx___schedule+0x10/0x10
[ 1091.363700][T14521]  ? irqentry_exit+0x74/0x90
[ 1091.363729][T14521]  ? tipc_sendmsg+0x47/0x70
[ 1091.363754][T14521]  ? preempt_schedule_common+0x83/0xd0
[ 1091.363778][T14521]  ? preempt_schedule+0xae/0xc0
[ 1091.363799][T14521]  ? __pfx_preempt_schedule+0x10/0x10
[ 1091.363841][T14521]  ? __local_bh_enable_ip+0x13e/0x1c0
[ 1091.363867][T14521]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1091.363903][T14521]  tipc_sendmsg+0x55/0x70
[ 1091.363925][T14521]  ? __pfx_tipc_sendmsg+0x10/0x10
[ 1091.363948][T14521]  __sock_sendmsg+0x21c/0x270
[ 1091.363979][T14521]  ____sys_sendmsg+0x505/0x830
[ 1091.364021][T14521]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1091.364067][T14521]  ? import_iovec+0x74/0xa0
[ 1091.364104][T14521]  ___sys_sendmsg+0x21f/0x2a0
[ 1091.364142][T14521]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1091.364219][T14521]  ? __fget_files+0x2a/0x420
[ 1091.364244][T14521]  ? __fget_files+0x3a0/0x420
[ 1091.364293][T14521]  __x64_sys_sendmsg+0x19b/0x260
[ 1091.364331][T14521]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1091.364378][T14521]  ? __pfx_ksys_write+0x10/0x10
[ 1091.364396][T14521]  ? rcu_is_watching+0x15/0xb0
[ 1091.364432][T14521]  ? do_syscall_64+0xbe/0x3b0
[ 1091.364461][T14521]  do_syscall_64+0xfa/0x3b0
[ 1091.364488][T14521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1091.364509][T14521]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1091.364532][T14521]  ? clear_bhb_loop+0x60/0xb0
[ 1091.364573][T14521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1091.364596][T14521] RIP: 0033:0x7f3005d8ebe9
[ 1091.364628][T14521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1091.364653][T14521] RSP: 002b:00007f3006bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1091.364676][T14521] RAX: ffffffffffffffda RBX: 00007f3005fb6090 RCX: 00007f3005d8ebe9
[ 1091.364692][T14521] RDX: 0000000000048800 RSI: 00002000000001c0 RDI: 0000000000000005
[ 1091.364713][T14521] RBP: 00007f3006bf7090 R08: 0000000000000000 R09: 0000000000000000
[ 1091.364726][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1091.364750][T14521] R13: 00007f3005fb6128 R14: 00007f3005fb6090 R15: 00007ffeda072038
[ 1091.364783][T14521]  </TASK>
[ 1091.718838][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1092.546328][   T30] audit: type=1800 audit(1755290565.019:426): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2150" name="bus" dev="overlay" ino=2328 res=0 errno=0
[ 1092.566300][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1092.685235][T14534] IPVS: stopping backup sync thread 14535 ...
[ 1094.464929][T14552] bridge1: entered promiscuous mode
[ 1094.583060][ T5952] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[ 1095.567743][T14565] bridge0: port 3(syz_tun) entered blocking state
[ 1095.578530][T14565] bridge0: port 3(syz_tun) entered disabled state
[ 1095.586312][T14565] syz_tun: entered allmulticast mode
[ 1095.599661][T14565] syz_tun: entered promiscuous mode
[ 1095.618694][T14565] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1096.462735][T14569] netlink: 'syz.5.2160': attribute type 2 has an invalid length.
[ 1096.875153][T14573] FAULT_INJECTION: forcing a failure.
[ 1096.875153][T14573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1096.888451][T14573] CPU: 0 UID: 0 PID: 14573 Comm: syz.5.2162 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1096.888469][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1096.888482][T14573] Call Trace:
[ 1096.888490][T14573]  <TASK>
[ 1096.888499][T14573]  dump_stack_lvl+0x189/0x250
[ 1096.888527][T14573]  ? __pfx____ratelimit+0x10/0x10
[ 1096.888546][T14573]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1096.888568][T14573]  ? __pfx__printk+0x10/0x10
[ 1096.888587][T14573]  ? __might_fault+0xb0/0x130
[ 1096.888609][T14573]  should_fail_ex+0x414/0x560
[ 1096.888626][T14573]  _copy_from_user+0x2d/0xb0
[ 1096.888656][T14573]  ___sys_sendmsg+0x158/0x2a0
[ 1096.888688][T14573]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1096.888742][T14573]  ? __fget_files+0x2a/0x420
[ 1096.888768][T14573]  ? __fget_files+0x3a0/0x420
[ 1096.888798][T14573]  __x64_sys_sendmsg+0x19b/0x260
[ 1096.888830][T14573]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1096.888866][T14573]  ? __pfx_ksys_write+0x10/0x10
[ 1096.888891][T14573]  ? do_syscall_64+0xbe/0x3b0
[ 1096.888909][T14573]  do_syscall_64+0xfa/0x3b0
[ 1096.888923][T14573]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1096.888943][T14573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.888962][T14573]  ? clear_bhb_loop+0x60/0xb0
[ 1096.888985][T14573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.889003][T14573] RIP: 0033:0x7fee77f8ebe9
[ 1096.889021][T14573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1096.889034][T14573] RSP: 002b:00007fee78de3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1096.889048][T14573] RAX: ffffffffffffffda RBX: 00007fee781b5fa0 RCX: 00007fee77f8ebe9
[ 1096.889059][T14573] RDX: 0000000020000000 RSI: 00002000000004c0 RDI: 0000000000000006
[ 1096.889068][T14573] RBP: 00007fee78de3090 R08: 0000000000000000 R09: 0000000000000000
[ 1096.889077][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1096.889089][T14573] R13: 00007fee781b6038 R14: 00007fee781b5fa0 R15: 00007fffff4cc958
[ 1096.889119][T14573]  </TASK>
[ 1097.385945][T14576] IPVS: stopping backup sync thread 14002 ...
[ 1098.334218][T14583] evm: overlay not supported
[ 1098.790148][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2167'.
[ 1098.818121][ T5952] usb 4-1: device descriptor read/all, error -71
[ 1099.641072][T14585] loop6: detected capacity change from 0 to 524287999
[ 1100.267366][T14609] fuse: Bad value for 'group_id'
[ 1100.272547][T14609] fuse: Bad value for 'group_id'
[ 1102.795044][T14618] pim6reg1: entered promiscuous mode
[ 1102.963555][T14618] pim6reg1: entered allmulticast mode
[ 1103.627617][T12310] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1103.839243][T14637] vlan1: entered promiscuous mode
[ 1103.845552][T14637] vlan1: entered allmulticast mode
[ 1103.850744][T14637] veth0_vlan: entered allmulticast mode
[ 1104.329879][T12310] usb 1-1: device descriptor read/64, error -71
[ 1104.582565][T12310] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1105.331853][T12310] usb 1-1: device descriptor read/64, error -71
[ 1105.444990][T12310] usb usb1-port1: attempt power cycle
[ 1106.104732][T12310] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1106.617711][T12310] usb 1-1: device not accepting address 79, error -71
[ 1106.764486][T14657] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1106.793626][T14657] bridge0: entered allmulticast mode
[ 1107.114834][    T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1107.258882][T14664] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1107.869958][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1107.878479][    T9] usb 6-1: config 0 has no interface number 0
[ 1107.885935][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1107.898861][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1107.913072][    T9] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1107.923271][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.944806][    T9] usb 6-1: config 0 descriptor??
[ 1108.052635][T12310] usb 1-1: new low-speed USB device number 80 using dummy_hcd
[ 1108.155892][T12310] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1108.166468][T12310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1108.177934][T12310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1108.203993][T12310] usb 1-1: string descriptor 0 read error: -22
[ 1108.217740][T12310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1108.234123][T12310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.349959][T12310] usb 1-1: invalid UAC_HEADER (v1)
[ 1108.554604][T12310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1108.585203][    T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0033/input/input79
[ 1109.455023][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1109.707818][    T9] holtek_kbd 0003:04D9:A055.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1
[ 1109.746348][    T9] usb 6-1: USB disconnect, device number 22
[ 1110.011202][   T43] usb 1-1: USB disconnect, device number 80
[ 1110.059394][T14672] fido_id[14672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1110.413938][T12788] Bluetooth: hci5: unexpected event for opcode 0x0000
[ 1110.444483][   T43] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1110.628288][   T43] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1111.012666][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.566081][   T43] usb 1-1: config 0 descriptor??
[ 1111.597374][T14688] syz.5.2194: attempt to access beyond end of device
[ 1111.597374][T14688] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0
[ 1111.812986][T14693] overlayfs: failed to clone upperpath
[ 1111.877895][   T43] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1112.239979][   T43] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[ 1112.276073][T14694] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1112.280583][   T43] [drm] Initialized udl on minor 2
[ 1112.312135][   T43] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[ 1112.331443][   T43] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1112.586139][T14674] xt_l2tp: v2 sid > 0xffff: 262144
[ 1112.816264][   T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1112.824529][   T43] usb 1-1: USB disconnect, device number 81
[ 1112.831505][   T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1114.053337][    T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1114.054745][T14719] netlink: 'syz.0.2205': attribute type 1 has an invalid length.
[ 1114.069694][T14719] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2205'.
[ 1114.218359][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1114.229817][    T9] usb 2-1: config 0 has no interface number 0
[ 1114.239358][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1114.328834][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1114.392112][    T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1114.429261][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.445365][T12788] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1114.454763][T12788] Bluetooth: hci5: Injecting HCI hardware error event
[ 1114.463483][T12788] Bluetooth: hci5: hardware error 0x00
[ 1114.470771][    T9] usb 2-1: config 0 descriptor??
[ 1114.640231][T14730] IPVS: stopping backup sync thread 14040 ...
[ 1114.963911][    T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0034/input/input80
[ 1115.211435][    T9] holtek_kbd 0003:04D9:A055.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[ 1115.358411][    T9] usb 2-1: USB disconnect, device number 74
[ 1115.661319][T14746] fido_id[14746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1116.522796][T12788] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1117.964182][T14764] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1120.889585][T14794] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1120.900538][T14797] netlink: 'syz.0.2230': attribute type 64 has an invalid length.
[ 1120.908575][T14797] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2230'.
[ 1121.168969][T14799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2231'.
[ 1122.936836][T14810] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1123.334414][    T9] Process accounting resumed
[ 1125.421402][T14825] syz.1.2237: attempt to access beyond end of device
[ 1125.421402][T14825] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1125.435543][T14825] syz.1.2237: attempt to access beyond end of device
[ 1125.435543][T14825] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1125.448914][T14825] Mount JFS Failure: -5
[ 1125.962164][T14811] Process accounting resumed
[ 1126.098506][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'.
[ 1126.419937][T14828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.442759][ T5952] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1126.612426][ T5952] usb 2-1: Using ep0 maxpacket: 16
[ 1126.620937][ T5952] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[ 1126.631531][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1126.639903][ T5952] usb 2-1: Product: syz
[ 1126.644444][ T5952] usb 2-1: Manufacturer: syz
[ 1126.649068][ T5952] usb 2-1: SerialNumber: syz
[ 1126.657131][ T5952] usb 2-1: config 0 descriptor??
[ 1126.665282][ T5952] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[ 1126.868977][T12310] usb 2-1: USB disconnect, device number 75
[ 1127.116937][T14849] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1128.389289][T14856] : entered promiscuous mode
[ 1128.534233][ T5952] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1128.682464][ T5952] usb 2-1: device descriptor read/64, error -71
[ 1128.942249][T14863] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1129.052686][ T5952] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1129.312756][ T5952] usb 2-1: device descriptor read/64, error -71
[ 1129.504534][ T5952] usb usb2-port1: attempt power cycle
[ 1130.852549][ T5952] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1130.877764][T14890] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1130.947019][ T5952] usb 2-1: device descriptor read/8, error -71
[ 1131.083183][T14894] FAULT_INJECTION: forcing a failure.
[ 1131.083183][T14894] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.096750][T14894] CPU: 0 UID: 0 PID: 14894 Comm: syz.0.2261 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1131.096780][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1131.096795][T14894] Call Trace:
[ 1131.096804][T14894]  <TASK>
[ 1131.096815][T14894]  dump_stack_lvl+0x189/0x250
[ 1131.096845][T14894]  ? __pfx____ratelimit+0x10/0x10
[ 1131.096870][T14894]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1131.096904][T14894]  ? __pfx__printk+0x10/0x10
[ 1131.096940][T14894]  ? __pfx___might_resched+0x10/0x10
[ 1131.096971][T14894]  should_fail_ex+0x414/0x560
[ 1131.097000][T14894]  should_failslab+0xa8/0x100
[ 1131.097026][T14894]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1131.097051][T14894]  ? __alloc_skb+0x112/0x2d0
[ 1131.097087][T14894]  __alloc_skb+0x112/0x2d0
[ 1131.097122][T14894]  netlink_sendmsg+0x5c6/0xb30
[ 1131.097166][T14894]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1131.097208][T14894]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1131.097231][T14894]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1131.097263][T14894]  __sock_sendmsg+0x21c/0x270
[ 1131.097294][T14894]  ____sys_sendmsg+0x52d/0x830
[ 1131.097335][T14894]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1131.097380][T14894]  ? import_iovec+0x74/0xa0
[ 1131.097416][T14894]  ___sys_sendmsg+0x21f/0x2a0
[ 1131.097454][T14894]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1131.097538][T14894]  ? __might_fault+0xb0/0x130
[ 1131.097566][T14894]  __sys_sendmmsg+0x227/0x430
[ 1131.097607][T14894]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1131.097638][T14894]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1131.097694][T14894]  ? ksys_write+0x22a/0x250
[ 1131.097718][T14894]  ? __pfx_ksys_write+0x10/0x10
[ 1131.097736][T14894]  ? rcu_is_watching+0x15/0xb0
[ 1131.097769][T14894]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1131.097819][T14894]  do_syscall_64+0xfa/0x3b0
[ 1131.097842][T14894]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1131.097865][T14894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.097887][T14894]  ? clear_bhb_loop+0x60/0xb0
[ 1131.097923][T14894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.097945][T14894] RIP: 0033:0x7fb8b498ebe9
[ 1131.097963][T14894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1131.097983][T14894] RSP: 002b:00007fb8b5751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1131.098006][T14894] RAX: ffffffffffffffda RBX: 00007fb8b4bb5fa0 RCX: 00007fb8b498ebe9
[ 1131.098022][T14894] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1131.098037][T14894] RBP: 00007fb8b5751090 R08: 0000000000000000 R09: 0000000000000000
[ 1131.098070][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1131.098084][T14894] R13: 00007fb8b4bb6038 R14: 00007fb8b4bb5fa0 R15: 00007fff57b92878
[ 1131.098119][T14894]  </TASK>
[ 1131.463501][ T5952] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1131.510408][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'.
[ 1131.523268][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'.
[ 1131.532705][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'.
[ 1131.683069][ T5952] usb 2-1: device not accepting address 79, error -71
[ 1131.690336][ T5952] usb usb2-port1: unable to enumerate USB device
[ 1132.564609][ T5952] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1133.350175][ T5952] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1134.325033][ T5952] usb 2-1: config 0 has no interface number 0
[ 1134.331512][ T5952] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1134.343898][ T5952] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1134.354409][ T5952] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1134.365004][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1134.402058][ T5952] usb 2-1: config 0 descriptor??
[ 1134.681895][T12310] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1134.824655][T14927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2271'.
[ 1134.845165][T12310] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1134.855005][T12310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1134.948208][T14929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2266'.
[ 1134.957675][T14929] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2266'.
[ 1134.978103][T14929] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1135.089210][T12310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1135.198791][T12310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.232983][T12310] usb 6-1: Product: syz
[ 1135.237831][T12310] usb 6-1: Manufacturer: syz
[ 1135.247969][T12310] usb 6-1: SerialNumber: syz
[ 1135.843229][T14932] overlayfs: missing 'lowerdir'
[ 1135.960662][ T5952] usbhid 2-1:0.1: can't add hid device: -71
[ 1135.973817][ T5952] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[ 1136.002009][ T5952] usb 2-1: USB disconnect, device number 80
[ 1136.032771][T12310] usb 6-1: USB disconnect, device number 23
[ 1136.100213][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1136.323976][T14933] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1136.626640][T14941] overlay: ./file0 is not a directory
[ 1136.635678][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1139.022618][T14960] 9pnet_fd: Insufficient options for proto=fd
[ 1139.193081][T14962] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1140.011870][T14971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2283'.
[ 1140.246703][T14959] comedi comedi1: comedi_config --init_data is deprecated
[ 1140.510280][T14977] vxcan1: entered allmulticast mode
[ 1141.113897][T14998] FAULT_INJECTION: forcing a failure.
[ 1141.113897][T14998] name failslab, interval 1, probability 0, space 0, times 0
[ 1141.128084][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz.3.2292 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1141.128106][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1141.128117][T14998] Call Trace:
[ 1141.128125][T14998]  <TASK>
[ 1141.128134][T14998]  dump_stack_lvl+0x189/0x250
[ 1141.128158][T14998]  ? __pfx____ratelimit+0x10/0x10
[ 1141.128177][T14998]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1141.128196][T14998]  ? __pfx__printk+0x10/0x10
[ 1141.128226][T14998]  ? __lock_acquire+0xab9/0xd20
[ 1141.128245][T14998]  should_fail_ex+0x414/0x560
[ 1141.128267][T14998]  should_failslab+0xa8/0x100
[ 1141.128288][T14998]  __kmalloc_noprof+0xcb/0x4f0
[ 1141.128304][T14998]  ? vmci_handle_arr_create+0x71/0x140
[ 1141.128328][T14998]  vmci_handle_arr_create+0x71/0x140
[ 1141.128350][T14998]  vmci_ctx_rcv_notifications_get+0x9e/0x180
[ 1141.128382][T14998]  vmci_host_unlocked_ioctl+0x1d68/0x2650
[ 1141.128410][T14998]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[ 1141.128437][T14998]  ? do_vfs_ioctl+0xf37/0x1990
[ 1141.128464][T14998]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1141.128493][T14998]  ? kasan_quarantine_put+0xdd/0x220
[ 1141.128527][T14998]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1141.128546][T14998]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1141.128563][T14998]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 1141.128579][T14998]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1141.128598][T14998]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1141.128636][T14998]  ? __lock_acquire+0xab9/0xd20
[ 1141.128662][T14998]  ? __asan_memset+0x22/0x50
[ 1141.128695][T14998]  ? smack_file_ioctl+0x24a/0x340
[ 1141.128721][T14998]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1141.128746][T14998]  ? __fget_files+0x2a/0x420
[ 1141.128764][T14998]  ? __fget_files+0x3a0/0x420
[ 1141.128782][T14998]  ? __fget_files+0x2a/0x420
[ 1141.128803][T14998]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1141.128822][T14998]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[ 1141.128844][T14998]  __se_sys_ioctl+0xfc/0x170
[ 1141.128870][T14998]  do_syscall_64+0xfa/0x3b0
[ 1141.128888][T14998]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1141.128905][T14998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.128922][T14998]  ? clear_bhb_loop+0x60/0xb0
[ 1141.128942][T14998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.128958][T14998] RIP: 0033:0x7f3005d8ebe9
[ 1141.128984][T14998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1141.128999][T14998] RSP: 002b:00007f3006c18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1141.129019][T14998] RAX: ffffffffffffffda RBX: 00007f3005fb5fa0 RCX: 00007f3005d8ebe9
[ 1141.129031][T14998] RDX: 0000200000000040 RSI: 00000000000007a6 RDI: 0000000000000003
[ 1141.129042][T14998] RBP: 00007f3006c18090 R08: 0000000000000000 R09: 0000000000000000
[ 1141.129053][T14998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1141.129063][T14998] R13: 00007f3005fb6038 R14: 00007f3005fb5fa0 R15: 00007ffeda072038
[ 1141.129089][T14998]  </TASK>
[ 1142.008363][T15010] fuse: Unknown parameter 'grou00000000000000000000'
[ 1142.926679][T15008] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1143.412516][ T5952] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[ 1144.274709][ T5952] usb 6-1: config index 0 descriptor too short (expected 19, got 18)
[ 1144.284008][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1144.392832][   T24] usb 4-1: new full-speed USB device number 100 using dummy_hcd
[ 1144.436727][ T5952] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1144.470433][ T5952] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=3d.2c
[ 1144.503741][ T5952] usb 6-1: New USB device strings: Mfr=56, Product=121, SerialNumber=0
[ 1144.512207][ T5952] usb 6-1: Product: syz
[ 1144.576480][ T5952] usb 6-1: Manufacturer: syz
[ 1144.593978][   T24] usb 4-1: too many configurations: 227, using maximum allowed: 8
[ 1144.610930][ T5952] usb 6-1: config 0 descriptor??
[ 1144.641819][   T24] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[ 1144.671333][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.750864][   T24] usb 4-1: config 0 descriptor??
[ 1144.797422][   T24] pwc: Samsung MPC-C10 USB webcam detected.
[ 1144.815838][   T24] pwc: Warning: more than 1 configuration available.
[ 1144.906774][T15015] input: syz0 as /devices/virtual/input/input81
[ 1145.085615][T12314] usb 6-1: USB disconnect, device number 24
[ 1145.809805][   T24] pwc: send_video_command error -71
[ 1145.862536][   T24] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1145.929753][   T24] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 1145.986550][   T24] usb 4-1: USB disconnect, device number 100
[ 1149.213643][T15053] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1149.683295][T12314] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[ 1149.910338][T15056] netlink: 'syz.4.2308': attribute type 2 has an invalid length.
[ 1149.962760][T12314] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1149.976785][T12314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1150.000971][T12314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1150.024615][T12314] usb 1-1: string descriptor 0 read error: -22
[ 1150.032837][T12314] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1150.074378][T12314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.114791][T12314] usb 1-1: invalid UAC_HEADER (v1)
[ 1150.897291][T12314] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1151.027293][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1151.104256][T15066] netlink: 'syz.4.2311': attribute type 6 has an invalid length.
[ 1151.302760][T12314] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1151.462780][T12314] usb 4-1: Using ep0 maxpacket: 16
[ 1151.474100][T12314] usb 4-1: config 0 has an invalid interface number: 249 but max is 0
[ 1151.487441][T12314] usb 4-1: config 0 has no interface number 0
[ 1151.495924][T12314] usb 4-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64
[ 1151.532223][T12314] usb 4-1: config 0 interface 249 has no altsetting 0
[ 1151.558047][T12314] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1
[ 1151.580395][T12314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.597614][T12314] usb 4-1: Product: syz
[ 1151.606389][T12314] usb 4-1: Manufacturer: syz
[ 1151.622038][T12314] usb 4-1: SerialNumber: syz
[ 1151.644445][T12314] usb 4-1: config 0 descriptor??
[ 1151.659447][T15065] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1151.677728][T12314] aircable 4-1:0.249: aircable converter detected
[ 1151.688853][T12314] usb 4-1: aircable converter now attached to ttyUSB0
[ 1152.282695][    C0] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1152.477338][   T24] usb 1-1: USB disconnect, device number 82
[ 1152.709331][   T43] usb 4-1: USB disconnect, device number 101
[ 1152.779937][   T43] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[ 1152.827241][   T43] aircable 4-1:0.249: device disconnected
[ 1153.836789][T15094] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1153.912667][   T24] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[ 1153.989795][T15099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1154.134811][   T24] usb 1-1: too many configurations: 227, using maximum allowed: 8
[ 1154.251063][T15104] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1154.300142][   T24] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[ 1154.309382][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.321930][   T24] usb 1-1: config 0 descriptor??
[ 1154.432306][   T24] pwc: Samsung MPC-C10 USB webcam detected.
[ 1154.487471][   T24] pwc: Warning: more than 1 configuration available.
[ 1154.536469][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2323'.
[ 1154.562225][T15108] syz_tun (unregistering): left allmulticast mode
[ 1154.568991][T15108] syz_tun (unregistering): left promiscuous mode
[ 1154.584742][T15108] bridge0: port 3(syz_tun) entered disabled state
[ 1156.736154][   T24] pwc: send_video_command error -71
[ 1156.898563][   T24] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1156.907836][   T24] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 1156.950114][   T24] usb 1-1: USB disconnect, device number 83
[ 1157.156065][T15128] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2329'.
[ 1157.220422][T15128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1158.212135][    T9] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[ 1158.363259][    T9] usb 1-1: device descriptor read/64, error -71
[ 1159.353024][    T9] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[ 1159.524444][    T9] usb 1-1: device descriptor read/64, error -71
[ 1159.823980][    T9] usb usb1-port1: attempt power cycle
[ 1160.183442][    T9] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[ 1160.279301][    T9] usb 1-1: device descriptor read/8, error -71
[ 1160.603193][    T9] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[ 1160.633381][    T9] usb 1-1: device descriptor read/8, error -71
[ 1160.767836][    T9] usb usb1-port1: unable to enumerate USB device
[ 1162.390375][T15175] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2342'.
[ 1163.308583][T15182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'.
[ 1163.342712][T15182] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2346'.
[ 1163.494114][T15182] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1165.082571][   T43] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1165.227409][T15207] FAULT_INJECTION: forcing a failure.
[ 1165.227409][T15207] name failslab, interval 1, probability 0, space 0, times 0
[ 1165.240465][T15207] CPU: 0 UID: 0 PID: 15207 Comm: syz.1.2351 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1165.240496][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1165.240511][T15207] Call Trace:
[ 1165.240520][T15207]  <TASK>
[ 1165.240531][T15207]  dump_stack_lvl+0x189/0x250
[ 1165.240562][T15207]  ? __pfx____ratelimit+0x10/0x10
[ 1165.240587][T15207]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1165.240626][T15207]  ? __pfx__printk+0x10/0x10
[ 1165.240661][T15207]  ? __pfx___might_resched+0x10/0x10
[ 1165.240692][T15207]  should_fail_ex+0x414/0x560
[ 1165.240723][T15207]  should_failslab+0xa8/0x100
[ 1165.240751][T15207]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1165.240775][T15207]  ? __alloc_skb+0x112/0x2d0
[ 1165.240813][T15207]  __alloc_skb+0x112/0x2d0
[ 1165.240850][T15207]  netlink_sendmsg+0x5c6/0xb30
[ 1165.240894][T15207]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1165.240937][T15207]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1165.240960][T15207]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1165.240994][T15207]  __sock_sendmsg+0x21c/0x270
[ 1165.241025][T15207]  ____sys_sendmsg+0x505/0x830
[ 1165.241067][T15207]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1165.241113][T15207]  ? import_iovec+0x74/0xa0
[ 1165.241150][T15207]  ___sys_sendmsg+0x21f/0x2a0
[ 1165.241189][T15207]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1165.241270][T15207]  ? __fget_files+0x2a/0x420
[ 1165.241297][T15207]  ? __fget_files+0x3a0/0x420
[ 1165.241335][T15207]  __x64_sys_sendmsg+0x19b/0x260
[ 1165.241372][T15207]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1165.241418][T15207]  ? __pfx_ksys_write+0x10/0x10
[ 1165.241438][T15207]  ? rcu_is_watching+0x15/0xb0
[ 1165.241469][T15207]  ? do_syscall_64+0xbe/0x3b0
[ 1165.241499][T15207]  do_syscall_64+0xfa/0x3b0
[ 1165.241524][T15207]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1165.241547][T15207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.241572][T15207]  ? clear_bhb_loop+0x60/0xb0
[ 1165.241607][T15207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.241630][T15207] RIP: 0033:0x7fdf75b8ebe9
[ 1165.241650][T15207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1165.241672][T15207] RSP: 002b:00007fdf769c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1165.241696][T15207] RAX: ffffffffffffffda RBX: 00007fdf75db6090 RCX: 00007fdf75b8ebe9
[ 1165.241714][T15207] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[ 1165.241729][T15207] RBP: 00007fdf769c2090 R08: 0000000000000000 R09: 0000000000000000
[ 1165.241744][T15207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1165.241759][T15207] R13: 00007fdf75db6128 R14: 00007fdf75db6090 R15: 00007ffcb2af0c88
[ 1165.241795][T15207]  </TASK>
[ 1165.264522][   T43] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1165.557371][   T43] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1165.569113][   T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1165.590754][   T43] usb 1-1: config 1 has no interface number 0
[ 1165.597288][   T43] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[ 1165.719210][   T43] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1165.770600][   T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1165.785737][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.067180][T15221] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1166.658470][   T43] usb 1-1: Product: syz
[ 1166.662933][   T43] usb 1-1: Manufacturer: syz
[ 1166.667718][   T43] usb 1-1: SerialNumber: syz
[ 1166.683156][   T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 1166.690127][   T43] cdc_ncm 1-1:1.1: bind() failure
[ 1166.948373][T15224] fuse: Unknown parameter '0x0000000000000003'
[ 1167.371674][T15231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1167.393553][T15231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1168.185911][    T9] usb 1-1: USB disconnect, device number 88
[ 1168.529087][T15244] overlay: ./file0 is not a directory
[ 1168.582578][   T43] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[ 1168.747300][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1168.772549][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1168.803677][   T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1168.816358][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.832481][   T43] usb 2-1: Product: syz
[ 1168.839000][   T43] usb 2-1: Manufacturer: syz
[ 1168.864106][   T43] usb 2-1: SerialNumber: syz
[ 1169.115828][   T43] usb 2-1: 0:2 : does not exist
[ 1169.155763][   T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1169.205027][   T43] usb 2-1: USB disconnect, device number 81
[ 1169.289234][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1169.715402][T15259] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1170.705194][T15266] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2368'.
[ 1170.838393][T15263] ubi31: attaching mtd0
[ 1170.955009][T15263] ubi31: scanning is finished
[ 1170.983782][T15269] syzkaller0: mtu less than device minimum
[ 1171.830154][T15263] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1171.980554][T15263] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1172.043160][T15263] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1172.050289][T15263] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1172.102907][T15263] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1172.208491][T15263] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1172.319234][T15263] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3170552276
[ 1172.433202][T15263] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1172.652482][T15273] ubi31: background thread "ubi_bgt31d" started, PID 15273
[ 1172.710825][T15281] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1172.787564][    T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1172.942531][    T9] usb 2-1: device descriptor read/64, error -71
[ 1173.212504][    T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1173.352493][    T9] usb 2-1: device descriptor read/64, error -71
[ 1174.053398][    T9] usb usb2-port1: attempt power cycle
[ 1174.340387][T12310] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1174.402552][    T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1174.426448][    T9] usb 2-1: device descriptor read/8, error -71
[ 1174.464016][T15303] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1174.546570][T12310] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1174.663716][T12310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1174.737978][T12310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1174.773018][    T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1174.878090][    T9] usb 2-1: device descriptor read/8, error -71
[ 1174.888291][T12310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1175.145439][    T9] usb usb2-port1: unable to enumerate USB device
[ 1175.152281][T12310] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1175.161850][T12310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.183826][T12310] usb 4-1: config 0 descriptor??
[ 1175.193184][T15293] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1175.701802][T15315] FAULT_INJECTION: forcing a failure.
[ 1175.701802][T15315] name failslab, interval 1, probability 0, space 0, times 0
[ 1175.701862][T12310] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1175.774717][T15315] CPU: 1 UID: 0 PID: 15315 Comm: syz.5.2382 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1175.774749][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1175.774764][T15315] Call Trace:
[ 1175.774773][T15315]  <TASK>
[ 1175.774784][T15315]  dump_stack_lvl+0x189/0x250
[ 1175.774816][T15315]  ? __pfx____ratelimit+0x10/0x10
[ 1175.774856][T15315]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1175.774883][T15315]  ? __pfx__printk+0x10/0x10
[ 1175.774919][T15315]  ? __pfx___might_resched+0x10/0x10
[ 1175.774944][T15315]  ? fs_reclaim_acquire+0x7d/0x100
[ 1175.774976][T15315]  should_fail_ex+0x414/0x560
[ 1175.775007][T15315]  should_failslab+0xa8/0x100
[ 1175.775034][T15315]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1175.775058][T15315]  ? __alloc_skb+0x112/0x2d0
[ 1175.775095][T15315]  __alloc_skb+0x112/0x2d0
[ 1175.775132][T15315]  netlink_ack+0x146/0xa50
[ 1175.775160][T15315]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1175.775183][T15315]  ? __pfx_nl802154_pre_doit+0x10/0x10
[ 1175.775205][T15315]  ? __pfx_nl802154_post_doit+0x10/0x10
[ 1175.775244][T15315]  netlink_rcv_skb+0x28c/0x470
[ 1175.775276][T15315]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1175.775302][T15315]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1175.775351][T15315]  ? down_read+0x1ad/0x2e0
[ 1175.775382][T15315]  genl_rcv+0x28/0x40
[ 1175.775403][T15315]  netlink_unicast+0x75c/0x8e0
[ 1175.775443][T15315]  netlink_sendmsg+0x805/0xb30
[ 1175.775488][T15315]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1175.775529][T15315]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1175.775552][T15315]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1175.775586][T15315]  __sock_sendmsg+0x21c/0x270
[ 1175.775617][T15315]  ____sys_sendmsg+0x505/0x830
[ 1175.775658][T15315]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1175.775705][T15315]  ? import_iovec+0x74/0xa0
[ 1175.775740][T15315]  ___sys_sendmsg+0x21f/0x2a0
[ 1175.775779][T15315]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1175.775863][T15315]  ? __fget_files+0x2a/0x420
[ 1175.775889][T15315]  ? __fget_files+0x3a0/0x420
[ 1175.775927][T15315]  __x64_sys_sendmsg+0x19b/0x260
[ 1175.775965][T15315]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1175.776012][T15315]  ? __pfx_ksys_write+0x10/0x10
[ 1175.776041][T15315]  ? do_syscall_64+0xbe/0x3b0
[ 1175.776071][T15315]  do_syscall_64+0xfa/0x3b0
[ 1175.776094][T15315]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1175.776117][T15315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1175.776140][T15315]  ? clear_bhb_loop+0x60/0xb0
[ 1175.776168][T15315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1175.776190][T15315] RIP: 0033:0x7fee77f8ebe9
[ 1175.776211][T15315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1175.776231][T15315] RSP: 002b:00007fee78dc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1175.776255][T15315] RAX: ffffffffffffffda RBX: 00007fee781b6090 RCX: 00007fee77f8ebe9
[ 1175.776272][T15315] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000005
[ 1175.776286][T15315] RBP: 00007fee78dc2090 R08: 0000000000000000 R09: 0000000000000000
[ 1175.776300][T15315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1175.776314][T15315] R13: 00007fee781b6128 R14: 00007fee781b6090 R15: 00007fffff4cc958
[ 1175.776350][T15315]  </TASK>
[ 1175.792667][T12310] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1176.283289][T15315] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2382'.
[ 1176.310252][T12310] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1176.317953][T12310] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1176.325538][T12310] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1176.434989][T12310] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1176.570789][T12310] usb 4-1: USB disconnect, device number 102
[ 1176.642612][T15324] fido_id[15324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 1177.112500][   T43] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1177.214616][T15329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2386'.
[ 1177.240102][T15329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2386'.
[ 1177.392841][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 1177.440907][   T43] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1177.855488][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1178.174804][   T43] usb 6-1: config 0 descriptor??
[ 1178.293159][T15334] syzkaller0: entered promiscuous mode
[ 1178.318110][T15334] syzkaller0: entered allmulticast mode
[ 1178.364729][T15346] FAULT_INJECTION: forcing a failure.
[ 1178.364729][T15346] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1178.426929][T15346] CPU: 0 UID: 0 PID: 15346 Comm: syz.3.2390 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1178.426963][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1178.426978][T15346] Call Trace:
[ 1178.426987][T15346]  <TASK>
[ 1178.426997][T15346]  dump_stack_lvl+0x189/0x250
[ 1178.427028][T15346]  ? __pfx____ratelimit+0x10/0x10
[ 1178.427051][T15346]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1178.427075][T15346]  ? __pfx__printk+0x10/0x10
[ 1178.427101][T15346]  ? __might_fault+0xb0/0x130
[ 1178.427133][T15346]  should_fail_ex+0x414/0x560
[ 1178.427161][T15346]  _copy_from_user+0x2d/0xb0
[ 1178.427194][T15346]  ___sys_sendmsg+0x158/0x2a0
[ 1178.427232][T15346]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1178.427305][T15346]  ? __fget_files+0x2a/0x420
[ 1178.427327][T15346]  ? __fget_files+0x3a0/0x420
[ 1178.427363][T15346]  __x64_sys_sendmsg+0x19b/0x260
[ 1178.427396][T15346]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1178.427443][T15346]  ? __pfx_ksys_write+0x10/0x10
[ 1178.427461][T15346]  ? rcu_is_watching+0x15/0xb0
[ 1178.427492][T15346]  ? do_syscall_64+0xbe/0x3b0
[ 1178.427521][T15346]  do_syscall_64+0xfa/0x3b0
[ 1178.427544][T15346]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1178.427565][T15346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1178.427586][T15346]  ? clear_bhb_loop+0x60/0xb0
[ 1178.427613][T15346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1178.427630][T15346] RIP: 0033:0x7f3005d8ebe9
[ 1178.427650][T15346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1178.427670][T15346] RSP: 002b:00007f3006c18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1178.427695][T15346] RAX: ffffffffffffffda RBX: 00007f3005fb5fa0 RCX: 00007f3005d8ebe9
[ 1178.427723][T15346] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1178.427737][T15346] RBP: 00007f3006c18090 R08: 0000000000000000 R09: 0000000000000000
[ 1178.427751][T15346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1178.427764][T15346] R13: 00007f3005fb6038 R14: 00007f3005fb5fa0 R15: 00007ffeda072038
[ 1178.427798][T15346]  </TASK>
[ 1178.699782][   T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1178.712291][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1178.809699][T15351] netlink: 'syz.3.2392': attribute type 1 has an invalid length.
[ 1178.822051][T15351] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2392'.
[ 1178.897923][   T30] audit: type=1400 audit(1755290651.379:427): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15347 comm="syz.1.2391" src=1 dest=20000
[ 1178.934444][   T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1178.955021][   T43] usb 6-1: media controller created
[ 1179.179000][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030b54800: rx timeout, send abort
[ 1179.435863][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1179.571666][   T43] az6027: usb out operation failed. (-71)
[ 1179.589785][   T43] az6027: usb out operation failed. (-71)
[ 1179.620056][   T43] stb0899_attach: Driver disabled by Kconfig
[ 1179.627297][   T43] az6027: no front-end attached
[ 1179.627297][   T43] 
[ 1179.673819][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030b57c00: rx timeout, send abort
[ 1179.689151][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030b54800: abort rx timeout. Force session deactivation
[ 1179.761190][   T43] az6027: usb out operation failed. (-71)
[ 1179.776549][   T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1179.820441][   T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input84
[ 1179.959055][   T43] dvb-usb: schedule remote query interval to 400 msecs.
[ 1179.972674][   T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1180.058011][   T43] usb 6-1: USB disconnect, device number 25
[ 1180.182503][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030b57c00: abort rx timeout. Force session deactivation
[ 1181.239384][T15364] kAFS: unable to lookup cell ''
[ 1181.257014][   T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1182.692566][   T43] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1182.846582][   T43] usb 4-1: device descriptor read/64, error -71
[ 1183.143941][   T43] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1183.353145][   T43] usb 4-1: device descriptor read/64, error -71
[ 1183.474859][   T43] usb usb4-port1: attempt power cycle
[ 1183.521057][T15384] IPVS: stopping backup sync thread 15104 ...
[ 1184.309994][T15379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2402'.
[ 1184.319116][T15379] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2402'.
[ 1184.328653][T15379] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1184.716690][T12300] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0
[ 1184.725521][   T43] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1184.753198][   T43] usb 4-1: device descriptor read/8, error -71
[ 1184.786714][T12300] hid-generic 0000:0000:0000.0036: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1184.992690][   T43] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1185.037148][   T43] usb 4-1: device descriptor read/8, error -71
[ 1185.265196][   T43] usb usb4-port1: unable to enumerate USB device
[ 1186.122566][   T43] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1186.285782][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 1186.298820][   T43] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1186.309681][   T43] usb 6-1: config 0 has an invalid descriptor of length 29, skipping remainder of the config
[ 1186.331625][   T43] usb 6-1: config 0 has no interface number 0
[ 1186.339980][   T43] usb 6-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1186.340260][T15410] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[ 1186.363773][   T43] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1186.392250][   T43] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1186.546036][T15410] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1186.571776][T15417] fuseblk: Bad value for 'rootmode'
[ 1186.615504][   T43] usb 6-1: Product: syz
[ 1186.619903][   T43] usb 6-1: SerialNumber: syz
[ 1186.629649][   T43] usb 6-1: config 0 descriptor??
[ 1187.292593][   T43] smsc95xx v2.0.0
[ 1187.307279][   T43] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1187.327027][   T43] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22
[ 1187.350583][T15422] IPVS: stopping backup sync thread 14810 ...
[ 1187.412550][T12310] usb 4-1: new full-speed USB device number 107 using dummy_hcd
[ 1187.584515][T12310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1187.609869][T12310] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[ 1187.619812][T12310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1187.639837][T12310] usb 4-1: config 0 descriptor??
[ 1187.651435][T15417] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1188.742133][T12310] belkin 0003:050D:3201.0037: unknown main item tag 0x0
[ 1188.778974][T12310] belkin 0003:050D:3201.0037: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0
[ 1188.822951][   T43] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1188.992802][   T43] usb 2-1: Using ep0 maxpacket: 16
[ 1189.004324][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1189.015172][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1189.028367][   T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1189.042823][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.054517][   T43] usb 2-1: Product: syz
[ 1189.059510][   T43] usb 2-1: Manufacturer: syz
[ 1189.064880][   T43] usb 2-1: SerialNumber: syz
[ 1189.960778][T12300] usb 6-1: USB disconnect, device number 26
[ 1190.326345][   T24] usb 4-1: USB disconnect, device number 107
[ 1190.836237][   T43] usb 2-1: 0:2 : does not exist
[ 1190.874965][T15453] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2423'.
[ 1190.925962][   T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1190.955895][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2423'.
[ 1190.967667][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'.
[ 1191.115481][   T43] usb 2-1: USB disconnect, device number 86
[ 1191.195298][T15453] netlink: 'syz.5.2423': attribute type 4 has an invalid length.
[ 1191.343445][T15458] IPVS: stopping backup sync thread 15459 ...
[ 1192.084483][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1193.182452][    T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1194.208690][    T9] usb 1-1: device descriptor read/64, error -71
[ 1195.389082][    T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1195.577918][    T9] usb 1-1: device descriptor read/64, error -71
[ 1195.713933][    T9] usb usb1-port1: attempt power cycle
[ 1195.918648][T15489] xt_bpf: check failed: parse error
[ 1196.376914][T15494] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1199.449613][T15498] vivid-007: =================  START STATUS  =================
[ 1199.479132][T15498] vivid-007: Enable Output Cropping: true
[ 1199.514534][T15498] vivid-007: Enable Output Composing: true
[ 1199.612847][T15498] vivid-007: Enable Output Scaler: true
[ 1199.618793][T15498] vivid-007: Tx RGB Quantization Range: Automatic
[ 1199.728509][T15498] vivid-007: Transmit Mode: HDMI
[ 1199.831707][T15498] vivid-007: Hotplug Present: 0x00000000
[ 1199.877012][T15498] vivid-007: RxSense Present: 0x00000000
[ 1199.896852][T15498] vivid-007: EDID Present: 0x00000000
[ 1199.941092][T15498] vivid-007: ==================  END STATUS  ==================
[ 1201.125318][   T30] audit: type=1326 audit(1755290673.609:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15523 comm="syz.1.2445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf75b8ebe9 code=0x0
[ 1202.145981][T15533] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1202.202979][T15533] /dev/nullb0: Can't open blockdev
[ 1202.900274][T12310] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1203.111178][T12310] usb 4-1: Using ep0 maxpacket: 16
[ 1203.149272][T12310] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1203.182806][T12310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.212735][T12310] usb 4-1: Product: syz
[ 1203.216997][T12310] usb 4-1: Manufacturer: syz
[ 1203.252634][T12310] usb 4-1: SerialNumber: syz
[ 1203.260849][T12310] usb 4-1: config 0 descriptor??
[ 1203.474183][T12310] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1204.045830][T12310] gp8psk: usb in 128 operation failed.
[ 1204.080630][T12310] gp8psk: usb in 137 operation failed.
[ 1204.097707][T12310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1204.111784][T12310] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[ 1204.192993][T12310] usb 4-1: media controller created
[ 1204.262182][T12310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1204.478166][T12310] gp8psk_fe: Frontend revision 1 attached
[ 1204.497732][T12310] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1204.546608][T12310] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1204.703924][T12310] gp8psk: usb in 138 operation failed.
[ 1204.727923][T12310] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[ 1204.808515][T12310] gp8psk: found Genpix USB device pID = 201 (hex)
[ 1204.831700][T12310] usb 4-1: USB disconnect, device number 108
[ 1205.003045][   T43] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1205.184549][   T43] usb 6-1: Using ep0 maxpacket: 16
[ 1205.214269][   T43] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[ 1205.255475][T12310] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[ 1205.264694][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.324937][   T43] usb 6-1: Product: syz
[ 1205.346493][   T43] usb 6-1: Manufacturer: syz
[ 1205.384335][   T43] usb 6-1: SerialNumber: syz
[ 1205.437351][   T43] usb 6-1: config 0 descriptor??
[ 1205.478519][   T43] ums-onetouch 6-1:0.0: USB Mass Storage device detected
[ 1205.676290][T12313] usb 6-1: USB disconnect, device number 27
[ 1205.723428][T12310] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1205.892687][T12310] usb 4-1: Using ep0 maxpacket: 16
[ 1205.916469][T12310] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[ 1205.947015][T12310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.965879][T12310] usb 4-1: Product: syz
[ 1205.974717][T12310] usb 4-1: Manufacturer: syz
[ 1205.980477][T12310] usb 4-1: SerialNumber: syz
[ 1205.992167][T12310] usb 4-1: config 0 descriptor??
[ 1206.006507][T12310] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[ 1207.532897][   T43] usb 4-1: USB disconnect, device number 109
[ 1207.563236][T15579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2461'.
[ 1207.572567][T15579] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2461'.
[ 1207.581992][T15579] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1207.598162][T12310] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1207.775363][T12310] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1207.800010][T12310] usb 6-1: config 0 has no interface number 0
[ 1207.813454][T12310] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1207.825068][T12310] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1207.836370][T12310] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1207.845987][T12310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.864762][T15583] delete_channel: no stack
[ 1207.870379][T12310] usb 6-1: config 0 descriptor??
[ 1208.832634][T12310] usbhid 6-1:0.1: can't add hid device: -71
[ 1208.856778][T12310] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[ 1208.922529][T15595] netlink: 'syz.3.2469': attribute type 12 has an invalid length.
[ 1208.935509][T12310] usb 6-1: USB disconnect, device number 28
[ 1208.978255][T15596] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1208.999695][T15595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2469'.
[ 1209.079603][T15595] unsupported nlmsg_type 40
[ 1209.627859][T15599] macsec1: entered promiscuous mode
[ 1209.633565][T15599] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[ 1209.640735][T15599] macsec1: entered allmulticast mode
[ 1209.646212][T15599] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[ 1209.721322][T15607] ubi: mtd0 is already attached to ubi31
[ 1211.813128][T12310] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1212.026391][T15620] nvme_fabrics: unknown parameter or missing value '�' in ctrl creation request
[ 1212.255354][T15622] fuse: Bad value for 'fd'
[ 1213.124742][T12310] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1213.137572][T12310] usb 6-1: config 2 has an invalid interface number: 99 but max is 0
[ 1213.147966][T12310] usb 6-1: config 2 has no interface number 0
[ 1213.154195][T12310] usb 6-1: config 2 interface 99 has no altsetting 0
[ 1213.163557][T12310] usb 6-1: New USB device found, idVendor=0840, idProduct=0082, bcdDevice= 0.01
[ 1213.172945][T12310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.181024][T12310] usb 6-1: Product: syz
[ 1213.789927][T12310] usb 6-1: Manufacturer:  
[ 1213.794714][T12310] usb 6-1: SerialNumber: syz
[ 1214.349054][T15636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2478'.
[ 1215.051803][T12310] usb-storage 6-1:2.99: USB Mass Storage device detected
[ 1215.081286][T12310] usb-storage 6-1:2.99: Quirks match for vid 0840 pid 0082: 10
[ 1215.188675][T12310] usb 6-1: USB disconnect, device number 29
[ 1215.543868][   T43] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1215.756784][T15649] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1215.976270][   T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1215.993793][   T43] usb 1-1: config 0 has no interface number 0
[ 1216.007272][   T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1216.028939][   T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1216.051892][   T43] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[ 1216.075970][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.115856][   T43] usb 1-1: config 0 descriptor??
[ 1217.417142][T15670] fuse: Bad value for 'fd'
[ 1219.124444][   T43] usbhid 1-1:0.1: can't add hid device: -71
[ 1219.130642][   T43] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1219.208717][   T43] usb 1-1: USB disconnect, device number 92
[ 1219.790869][T15680] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2491'.
[ 1220.117300][T15686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2494'.
[ 1221.209767][T15690] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[ 1221.270308][T15694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1221.446789][T15699] binder: BINDER_SET_CONTEXT_MGR already set
[ 1221.453444][T15699] binder: 15698:15699 ioctl 4018620d 200000000140 returned -16
[ 1221.516136][T15700] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2500'.
[ 1221.527654][T15701] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2500'.
[ 1221.533575][   T43] usb 1-1: new full-speed USB device number 93 using dummy_hcd
[ 1221.593016][   T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1221.694930][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1221.714409][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1221.727320][   T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1221.739277][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1221.753868][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1221.774261][   T24] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1221.794218][   T43] usb 1-1: config 0 descriptor??
[ 1221.808155][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1221.864451][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1221.910671][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.927371][   T24] usb 2-1: Product: syz
[ 1221.934017][   T24] usb 2-1: Manufacturer: syz
[ 1222.090720][   T24] usb 2-1: SerialNumber: syz
[ 1222.221544][T15712] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1222.258414][   T43] hid-u2fzero 0003:10C4:8ACF.0038: unknown main item tag 0x3
[ 1222.273492][   T43] hid-u2fzero 0003:10C4:8ACF.0038: item fetching failed at offset 4/5
[ 1222.326922][   T43] hid-u2fzero 0003:10C4:8ACF.0038: probe with driver hid-u2fzero failed with error -22
[ 1222.339039][T15697] netlink: 'syz.1.2499': attribute type 2 has an invalid length.
[ 1222.346975][T15697] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2499'.
[ 1222.370392][   T24] usb 2-1: 0:2 : does not exist
[ 1222.390151][   T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1222.459177][T15715] random: crng reseeded on system resumption
[ 1222.473242][   T24] usb 2-1: USB disconnect, device number 87
[ 1222.735834][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1222.825967][T15722] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2506'.
[ 1223.860028][T15730] bridge0: port 3(gretap0) entered blocking state
[ 1223.869152][T15730] bridge0: port 3(gretap0) entered disabled state
[ 1223.881010][T15730] gretap0: entered allmulticast mode
[ 1223.899940][T15730] gretap0: entered promiscuous mode
[ 1224.134958][T15737] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2512'.
[ 1224.877196][    T9] usb 1-1: USB disconnect, device number 93
[ 1225.399696][T15747] netlink: 'syz.0.2515': attribute type 1 has an invalid length.
[ 1225.429623][   T30] audit: type=1326 audit(1755290697.899:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1225.500766][   T30] audit: type=1326 audit(1755290697.899:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1225.524648][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1225.625138][   T30] audit: type=1326 audit(1755290697.899:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1225.702981][T15752] FAULT_INJECTION: forcing a failure.
[ 1225.702981][T15752] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1225.713749][   T30] audit: type=1326 audit(1755290697.899:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1225.737842][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1225.762144][T15752] CPU: 0 UID: 0 PID: 15752 Comm: syz.3.2518 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1225.762178][T15752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1225.762195][T15752] Call Trace:
[ 1225.762205][T15752]  <TASK>
[ 1225.762217][T15752]  dump_stack_lvl+0x189/0x250
[ 1225.762250][T15752]  ? __pfx____ratelimit+0x10/0x10
[ 1225.762277][T15752]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1225.762307][T15752]  ? __pfx__printk+0x10/0x10
[ 1225.762336][T15752]  ? __might_fault+0xb0/0x130
[ 1225.762373][T15752]  should_fail_ex+0x414/0x560
[ 1225.762405][T15752]  _copy_from_user+0x2d/0xb0
[ 1225.762439][T15752]  __sys_bpf+0x1ed/0x860
[ 1225.762479][T15752]  ? __pfx___sys_bpf+0x10/0x10
[ 1225.762537][T15752]  ? ksys_write+0x22a/0x250
[ 1225.762563][T15752]  ? __pfx_ksys_write+0x10/0x10
[ 1225.762593][T15752]  __x64_sys_bpf+0x7c/0x90
[ 1225.762632][T15752]  do_syscall_64+0xfa/0x3b0
[ 1225.762658][T15752]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1225.762684][T15752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1225.762708][T15752]  ? clear_bhb_loop+0x60/0xb0
[ 1225.762756][T15752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1225.762778][T15752] RIP: 0033:0x7f3005d8ebe9
[ 1225.762799][T15752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1225.762820][T15752] RSP: 002b:00007f3006c18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1225.762845][T15752] RAX: ffffffffffffffda RBX: 00007f3005fb5fa0 RCX: 00007f3005d8ebe9
[ 1225.762862][T15752] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1225.762877][T15752] RBP: 00007f3006c18090 R08: 0000000000000000 R09: 0000000000000000
[ 1225.762892][T15752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1225.762906][T15752] R13: 00007f3005fb6038 R14: 00007f3005fb5fa0 R15: 00007ffeda072038
[ 1225.762943][T15752]  </TASK>
[ 1226.122668][   T30] audit: type=1326 audit(1755290697.899:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1226.204192][   T30] audit: type=1326 audit(1755290697.899:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1226.321026][   T30] audit: type=1326 audit(1755290697.899:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1226.363575][T15762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1226.382750][T15762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1226.393687][T15762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1226.403467][T15762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1226.414542][T15762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1226.475149][T15756] lo speed is unknown, defaulting to 1000
[ 1226.500593][   T30] audit: type=1326 audit(1755290697.909:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1226.522621][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1226.529766][   T30] audit: type=1326 audit(1755290697.909:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1226.552014][   T30] audit: type=1326 audit(1755290697.909:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8b498ebe9 code=0x7ffc0000
[ 1226.573673][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1227.147563][T15769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2522'.
[ 1227.751126][T15769] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2522'.
[ 1229.062733][T12788] Bluetooth: hci2: command tx timeout
[ 1229.120028][T15769] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1229.435143][T15784] netlink: 'syz.5.2525': attribute type 2 has an invalid length.
[ 1229.631162][ T8261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.733269][T15794] ubi: mtd0 is already attached to ubi31
[ 1229.762259][T15794] FAULT_INJECTION: forcing a failure.
[ 1229.762259][T15794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1229.765371][T15794] 
[ 1229.765388][T15794] ======================================================
[ 1229.765397][T15794] WARNING: possible circular locking dependency detected
[ 1229.765416][T15794] 6.16.0-syzkaller #0 Not tainted
[ 1229.765428][T15794] ------------------------------------------------------
[ 1229.765437][T15794] syz.5.2528/15794 is trying to acquire lock:
[ 1229.765450][T15794] ffffffff8e133300 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40
[ 1229.765520][T15794] 
[ 1229.765520][T15794] but task is already holding lock:
[ 1229.765528][T15794] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1229.765577][T15794] 
[ 1229.765577][T15794] which lock already depends on the new lock.
[ 1229.765577][T15794] 
[ 1229.765586][T15794] 
[ 1229.765586][T15794] the existing dependency chain (in reverse order) is:
[ 1229.765594][T15794] 
[ 1229.765594][T15794] -> #4 (&rq->__lock){-.-.}-{2:2}:
[ 1229.765623][T15794]        lock_acquire+0x120/0x360
[ 1229.765649][T15794]        _raw_spin_lock_nested+0x32/0x50
[ 1229.765671][T15794]        raw_spin_rq_lock_nested+0x2a/0x140
[ 1229.765692][T15794]        task_rq_lock+0xbc/0x470
[ 1229.765711][T15794]        cgroup_move_task+0x9a/0x590
[ 1229.765735][T15794]        css_set_move_task+0x658/0x9e0
[ 1229.765760][T15794]        cgroup_post_fork+0x1ef/0x790
[ 1229.765783][T15794]        copy_process+0x37e6/0x3b80
[ 1229.765918][T15794]        kernel_clone+0x224/0x7f0
[ 1229.765942][T15794]        user_mode_thread+0xdd/0x140
[ 1229.765990][T15794]        rest_init+0x23/0x300
[ 1229.766016][T15794]        start_kernel+0x47d/0x500
[ 1229.766038][T15794]        x86_64_start_reservations+0x24/0x30
[ 1229.766067][T15794]        x86_64_start_kernel+0x143/0x1c0
[ 1229.766096][T15794]        common_startup_64+0x13e/0x147
[ 1229.766124][T15794] 
[ 1229.766124][T15794] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[ 1229.766158][T15794]        lock_acquire+0x120/0x360
[ 1229.766176][T15794]        _raw_spin_lock_irqsave+0xa7/0xf0
[ 1229.766206][T15794]        try_to_wake_up+0x6e/0x1290
[ 1229.766231][T15794]        __wake_up_common_lock+0x137/0x1f0
[ 1229.766261][T15794]        tty_port_default_wakeup+0xa2/0xf0
[ 1229.766293][T15794]        serial8250_tx_chars+0x72e/0x970
[ 1229.766320][T15794]        serial8250_handle_irq+0x633/0xbb0
[ 1229.766345][T15794]        serial8250_default_handle_irq+0xbf/0x1b0
[ 1229.766364][T15794]        serial8250_interrupt+0xa2/0x1d0
[ 1229.766388][T15794]        __handle_irq_event_percpu+0x289/0x980
[ 1229.766414][T15794]        handle_irq_event+0x8b/0x1e0
[ 1229.766441][T15794]        handle_edge_irq+0x267/0x9c0
[ 1229.766463][T15794]        __common_interrupt+0x140/0x250
[ 1229.766488][T15794]        common_interrupt+0xb6/0xe0
[ 1229.766511][T15794]        asm_common_interrupt+0x26/0x40
[ 1229.766527][T15794]        pv_native_safe_halt+0x13/0x20
[ 1229.766544][T15794]        default_idle+0x13/0x20
[ 1229.766564][T15794]        default_idle_call+0x74/0xb0
[ 1229.766586][T15794]        do_idle+0x1e8/0x510
[ 1229.766604][T15794]        cpu_startup_entry+0x44/0x60
[ 1229.766625][T15794]        rest_init+0x2de/0x300
[ 1229.766650][T15794]        start_kernel+0x47d/0x500
[ 1229.766671][T15794]        x86_64_start_reservations+0x24/0x30
[ 1229.766699][T15794]        x86_64_start_kernel+0x143/0x1c0
[ 1229.766727][T15794]        common_startup_64+0x13e/0x147
[ 1229.766753][T15794] 
[ 1229.766753][T15794] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[ 1229.766783][T15794]        lock_acquire+0x120/0x360
[ 1229.766800][T15794]        _raw_spin_lock_irqsave+0xa7/0xf0
[ 1229.766830][T15794]        __wake_up_common_lock+0x2f/0x1f0
[ 1229.766854][T15794]        tty_port_default_wakeup+0xa2/0xf0
[ 1229.766879][T15794]        serial8250_tx_chars+0x72e/0x970
[ 1229.766900][T15794]        serial8250_handle_irq+0x633/0xbb0
[ 1229.766922][T15794]        serial8250_default_handle_irq+0xbf/0x1b0
[ 1229.766937][T15794]        serial8250_interrupt+0xa2/0x1d0
[ 1229.766955][T15794]        __handle_irq_event_percpu+0x289/0x980
[ 1229.766985][T15794]        handle_irq_event+0x8b/0x1e0
[ 1229.767005][T15794]        handle_edge_irq+0x267/0x9c0
[ 1229.767023][T15794]        __common_interrupt+0x140/0x250
[ 1229.767046][T15794]        common_interrupt+0xb6/0xe0
[ 1229.767067][T15794]        asm_common_interrupt+0x26/0x40
[ 1229.767082][T15794]        pv_native_safe_halt+0x13/0x20
[ 1229.767097][T15794]        default_idle+0x13/0x20
[ 1229.767115][T15794]        default_idle_call+0x74/0xb0
[ 1229.767134][T15794]        do_idle+0x1e8/0x510
[ 1229.767149][T15794]        cpu_startup_entry+0x44/0x60
[ 1229.767166][T15794]        rest_init+0x2de/0x300
[ 1229.767186][T15794]        start_kernel+0x47d/0x500
[ 1229.767202][T15794]        x86_64_start_reservations+0x24/0x30
[ 1229.767226][T15794]        x86_64_start_kernel+0x143/0x1c0
[ 1229.767248][T15794]        common_startup_64+0x13e/0x147
[ 1229.767269][T15794] 
[ 1229.767269][T15794] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 1229.767291][T15794]        lock_acquire+0x120/0x360
[ 1229.767304][T15794]        _raw_spin_lock_irqsave+0xa7/0xf0
[ 1229.767329][T15794]        serial8250_console_write+0x17e/0x1ba0
[ 1229.767353][T15794]        console_flush_all+0x728/0xc40
[ 1229.767374][T15794]        console_unlock+0xc4/0x270
[ 1229.767391][T15794]        vprintk_emit+0x5b7/0x7a0
[ 1229.767408][T15794]        _printk+0xcf/0x120
[ 1229.767428][T15794]        register_console+0xa8b/0xf90
[ 1229.767448][T15794]        univ8250_console_init+0x52/0x90
[ 1229.767469][T15794]        console_init+0x1a1/0x670
[ 1229.767490][T15794]        start_kernel+0x2cc/0x500
[ 1229.767507][T15794]        x86_64_start_reservations+0x24/0x30
[ 1229.767529][T15794]        x86_64_start_kernel+0x143/0x1c0
[ 1229.767551][T15794]        common_startup_64+0x13e/0x147
[ 1229.767572][T15794] 
[ 1229.767572][T15794] -> #0 (console_owner){-.-.}-{0:0}:
[ 1229.767594][T15794]        validate_chain+0xb9b/0x2140
[ 1229.767612][T15794]        __lock_acquire+0xab9/0xd20
[ 1229.767626][T15794]        lock_acquire+0x120/0x360
[ 1229.767639][T15794]        console_flush_all+0x6d2/0xc40
[ 1229.767659][T15794]        console_unlock+0xc4/0x270
[ 1229.767676][T15794]        vprintk_emit+0x5b7/0x7a0
[ 1229.767693][T15794]        _printk+0xcf/0x120
[ 1229.767711][T15794]        should_fail_ex+0x3f5/0x560
[ 1229.767726][T15794]        strncpy_from_user+0x36/0x290
[ 1229.767751][T15794]        strncpy_from_user_nofault+0x72/0x150
[ 1229.767768][T15794]        bpf_bprintf_prepare+0xb9b/0x1410
[ 1229.767791][T15794]        bpf_trace_printk+0xdb/0x190
[ 1229.767806][T15794]        bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
[ 1229.767821][T15794]        bpf_trace_run2+0x284/0x4b0
[ 1229.767842][T15794]        __bpf_trace_contention_begin+0xdc/0x130
[ 1229.767861][T15794]        trace_contention_begin+0x114/0x140
[ 1229.767881][T15794]        __pv_queued_spin_lock_slowpath+0xf0/0xb60
[ 1229.767900][T15794]        queued_spin_lock_slowpath+0x43/0x50
[ 1229.767922][T15794]        do_raw_spin_lock+0x21f/0x290
[ 1229.767942][T15794]        raw_spin_rq_lock_nested+0xad/0x140
[ 1229.767959][T15794]        __schedule+0x330/0x4c90
[ 1229.767990][T15794]        preempt_schedule_irq+0xb5/0x150
[ 1229.768005][T15794]        irqentry_exit+0x6f/0x90
[ 1229.768021][T15794]        asm_sysvec_call_function_single+0x1a/0x20
[ 1229.768038][T15794]        __might_fault+0x49/0x130
[ 1229.768053][T15794]        _copy_from_iter+0xf3/0x16f0
[ 1229.768072][T15794]        file_tty_write+0x486/0x990
[ 1229.768092][T15794]        vfs_write+0x54b/0xa90
[ 1229.768106][T15794]        ksys_write+0x145/0x250
[ 1229.768119][T15794]        do_syscall_64+0xfa/0x3b0
[ 1229.768137][T15794]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.768153][T15794] 
[ 1229.768153][T15794] other info that might help us debug this:
[ 1229.768153][T15794] 
[ 1229.768160][T15794] Chain exists of:
[ 1229.768160][T15794]   console_owner --> &p->pi_lock --> &rq->__lock
[ 1229.768160][T15794] 
[ 1229.768186][T15794]  Possible unsafe locking scenario:
[ 1229.768186][T15794] 
[ 1229.768192][T15794]        CPU0                    CPU1
[ 1229.768198][T15794]        ----                    ----
[ 1229.768204][T15794]   lock(&rq->__lock);
[ 1229.768216][T15794]                                lock(&p->pi_lock);
[ 1229.768229][T15794]                                lock(&rq->__lock);
[ 1229.768242][T15794]   lock(console_owner);
[ 1229.768253][T15794] 
[ 1229.768253][T15794]  *** DEADLOCK ***
[ 1229.768253][T15794] 
[ 1229.768258][T15794] 6 locks held by syz.5.2528/15794:
[ 1229.768269][T15794]  #0: ffff8880773fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1229.768316][T15794]  #1: ffff8880773fa130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x1d8/0x990
[ 1229.768360][T15794]  #2: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1229.768399][T15794]  #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0
[ 1229.768442][T15794]  #4: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[ 1229.768483][T15794]  #5: ffffffff8e01ac30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40
[ 1229.768527][T15794] 
[ 1229.768527][T15794] stack backtrace:
[ 1229.768538][T15794] CPU: 0 UID: 0 PID: 15794 Comm: syz.5.2528 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1229.768558][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1229.768569][T15794] Call Trace:
[ 1229.768576][T15794]  <TASK>
[ 1229.768585][T15794]  dump_stack_lvl+0x189/0x250
[ 1229.768607][T15794]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1229.768626][T15794]  ? __pfx__printk+0x10/0x10
[ 1229.768648][T15794]  ? print_lock_name+0xde/0x100
[ 1229.768672][T15794]  print_circular_bug+0x2ee/0x310
[ 1229.768694][T15794]  check_noncircular+0x134/0x160
[ 1229.768717][T15794]  validate_chain+0xb9b/0x2140
[ 1229.768748][T15794]  __lock_acquire+0xab9/0xd20
[ 1229.768767][T15794]  ? console_flush_all+0x13a/0xc40
[ 1229.768788][T15794]  lock_acquire+0x120/0x360
[ 1229.768803][T15794]  ? console_flush_all+0x13a/0xc40
[ 1229.768829][T15794]  ? do_raw_spin_unlock+0x122/0x240
[ 1229.768851][T15794]  ? console_flush_all+0x13a/0xc40
[ 1229.768874][T15794]  console_flush_all+0x6d2/0xc40
[ 1229.768895][T15794]  ? console_flush_all+0x13a/0xc40
[ 1229.768918][T15794]  ? console_flush_all+0x13a/0xc40
[ 1229.768943][T15794]  ? __pfx_console_flush_all+0x10/0x10
[ 1229.768978][T15794]  ? is_printk_cpu_sync_owner+0x32/0x40
[ 1229.769005][T15794]  console_unlock+0xc4/0x270
[ 1229.769026][T15794]  ? __pfx_console_unlock+0x10/0x10
[ 1229.769047][T15794]  ? is_printk_cpu_sync_owner+0x32/0x40
[ 1229.769074][T15794]  vprintk_emit+0x5b7/0x7a0
[ 1229.769095][T15794]  ? __pfx_vprintk_emit+0x10/0x10
[ 1229.769114][T15794]  ? rcu_is_watching+0x15/0xb0
[ 1229.769136][T15794]  ? bpf_bprintf_cleanup+0x9f/0xd0
[ 1229.769161][T15794]  ? bpf_trace_printk+0x126/0x190
[ 1229.769180][T15794]  ? __lock_acquire+0xab9/0xd20
[ 1229.769212][T15794]  _printk+0xcf/0x120
[ 1229.769234][T15794]  ? __pfx____ratelimit+0x10/0x10
[ 1229.769254][T15794]  ? __pfx__printk+0x10/0x10
[ 1229.769279][T15794]  ? bpf_trace_run2+0x322/0x4b0
[ 1229.769304][T15794]  should_fail_ex+0x3f5/0x560
[ 1229.769324][T15794]  strncpy_from_user+0x36/0x290
[ 1229.769351][T15794]  ? __bpf_trace_contention_begin+0xcd/0x130
[ 1229.769374][T15794]  strncpy_from_user_nofault+0x72/0x150
[ 1229.769395][T15794]  bpf_bprintf_prepare+0xb9b/0x1410
[ 1229.769426][T15794]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[ 1229.769451][T15794]  ? kvm_sched_clock_read+0x11/0x20
[ 1229.769468][T15794]  ? sched_clock_cpu+0x74/0x430
[ 1229.769486][T15794]  ? bpf_trace_printk+0xc1/0x190
[ 1229.769506][T15794]  bpf_trace_printk+0xdb/0x190
[ 1229.769523][T15794]  ? __lock_acquire+0xab9/0xd20
[ 1229.769540][T15794]  ? __pfx_bpf_trace_printk+0x10/0x10
[ 1229.769559][T15794]  ? bpf_trace_run2+0x186/0x4b0
[ 1229.769589][T15794]  bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
[ 1229.769605][T15794]  bpf_trace_run2+0x284/0x4b0
[ 1229.769629][T15794]  ? bpf_trace_run2+0x186/0x4b0
[ 1229.769653][T15794]  ? __pfx_bpf_trace_run2+0x10/0x10
[ 1229.769675][T15794]  ? rcu_is_watching+0x15/0xb0
[ 1229.769694][T15794]  ? trace_sched_exit_tp+0x38/0x120
[ 1229.769720][T15794]  ? __bpf_trace_contention_begin+0xcd/0x130
[ 1229.769743][T15794]  __bpf_trace_contention_begin+0xdc/0x130
[ 1229.769765][T15794]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[ 1229.769785][T15794]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1229.769814][T15794]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1229.769833][T15794]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1229.769865][T15794]  trace_contention_begin+0x114/0x140
[ 1229.769889][T15794]  __pv_queued_spin_lock_slowpath+0xf0/0xb60
[ 1229.769911][T15794]  ? rcu_qs+0xc4/0x170
[ 1229.769928][T15794]  ? __pfx_rcu_qs+0x10/0x10
[ 1229.769947][T15794]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 1229.769981][T15794]  queued_spin_lock_slowpath+0x43/0x50
[ 1229.770007][T15794]  do_raw_spin_lock+0x21f/0x290
[ 1229.770032][T15794]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1229.770056][T15794]  ? __lock_acquire+0xab9/0xd20
[ 1229.770075][T15794]  raw_spin_rq_lock_nested+0xad/0x140
[ 1229.770096][T15794]  __schedule+0x330/0x4c90
[ 1229.770115][T15794]  ? is_bpf_text_address+0x26/0x2b0
[ 1229.770135][T15794]  ? is_bpf_text_address+0x292/0x2b0
[ 1229.770152][T15794]  ? is_bpf_text_address+0x26/0x2b0
[ 1229.770170][T15794]  ? preempt_schedule_irq+0xb5/0x150
[ 1229.770190][T15794]  ? __pfx___schedule+0x10/0x10
[ 1229.770206][T15794]  ? irqentry_exit+0x74/0x90
[ 1229.770225][T15794]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1229.770252][T15794]  preempt_schedule_irq+0xb5/0x150
[ 1229.770270][T15794]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1229.770291][T15794]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1229.770312][T15794]  irqentry_exit+0x6f/0x90
[ 1229.770330][T15794]  asm_sysvec_call_function_single+0x1a/0x20
[ 1229.770349][T15794] RIP: 0010:__might_fault+0x49/0x130
[ 1229.770368][T15794] Code: 80 b7 ff 65 48 8b 1c 25 08 90 9c 92 4c 8d bb a4 17 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 be 00 00 00 45 8b 3f <31> ff 44 89 fe e8 fd 84 b7 ff 45 85 ff 74 15 e8 b3 80 b7 ff 5b 41
[ 1229.770384][T15794] RSP: 0018:ffffc9000b517a88 EFLAGS: 00000246
[ 1229.770400][T15794] RAX: 0000000000000000 RBX: ffff88807a3c5a00 RCX: ffff88807a3c5a00
[ 1229.770413][T15794] RDX: 0000000000000000 RSI: 0000000000000103 RDI: ffffffff8be16360
[ 1229.770426][T15794] RBP: 0000000000000103 R08: 0000000000004cc0 R09: 00000000ffffffff
[ 1229.770438][T15794] R10: 0000000000000008 R11: ffffffff81acfd40 R12: dffffc0000000000
[ 1229.770451][T15794] R13: 1ffff920016a2f68 R14: ffffffff8be16360 R15: 0000000000000000
[ 1229.770467][T15794]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1229.770496][T15794]  ? __might_fault+0x22/0x130
[ 1229.770514][T15794]  _copy_from_iter+0xf3/0x16f0
[ 1229.770542][T15794]  ? __pfx__copy_from_iter+0x10/0x10
[ 1229.770564][T15794]  ? file_tty_write+0x2a8/0x990
[ 1229.770587][T15794]  ? file_tty_write+0x2e8/0x990
[ 1229.770610][T15794]  ? rcu_is_watching+0x15/0xb0
[ 1229.770629][T15794]  ? kfree+0x4d/0x440
[ 1229.770658][T15794]  file_tty_write+0x486/0x990
[ 1229.770685][T15794]  vfs_write+0x54b/0xa90
[ 1229.770703][T15794]  ? __pfx_tty_write+0x10/0x10
[ 1229.770726][T15794]  ? __pfx_vfs_write+0x10/0x10
[ 1229.770746][T15794]  ? __fget_files+0x2a/0x420
[ 1229.770771][T15794]  ksys_write+0x145/0x250
[ 1229.770789][T15794]  ? __pfx_ksys_write+0x10/0x10
[ 1229.770804][T15794]  ? rcu_is_watching+0x15/0xb0
[ 1229.770825][T15794]  ? do_syscall_64+0xbe/0x3b0
[ 1229.770847][T15794]  do_syscall_64+0xfa/0x3b0
[ 1229.770866][T15794]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1229.770884][T15794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.770902][T15794]  ? clear_bhb_loop+0x60/0xb0
[ 1229.770922][T15794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.770939][T15794] RIP: 0033:0x7fee77f8ebe9
[ 1229.770955][T15794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1229.770976][T15794] RSP: 002b:00007fee78dc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1229.770994][T15794] RAX: ffffffffffffffda RBX: 00007fee781b6090 RCX: 00007fee77f8ebe9
[ 1229.771008][T15794] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000006
[ 1229.771020][T15794] RBP: 00007fee78dc2090 R08: 0000000000000000 R09: 0000000000000000
[ 1229.771031][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1229.771042][T15794] R13: 00007fee781b6128 R14: 00007fee781b6090 R15: 00007fffff4cc958
[ 1229.771080][T15794]  </TASK>
[ 1231.339209][T15794] CPU: 0 UID: 0 PID: 15794 Comm: syz.5.2528 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1231.339238][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1231.339252][T15794] Call Trace:
[ 1231.339262][T15794]  <TASK>
[ 1231.339272][T15794]  dump_stack_lvl+0x189/0x250
[ 1231.339302][T15794]  ? __pfx____ratelimit+0x10/0x10
[ 1231.339325][T15794]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1231.339346][T15794]  ? __pfx__printk+0x10/0x10
[ 1231.339374][T15794]  ? bpf_trace_run2+0x322/0x4b0
[ 1231.339403][T15794]  should_fail_ex+0x414/0x560
[ 1231.339425][T15794]  strncpy_from_user+0x36/0x290
[ 1231.339455][T15794]  ? __bpf_trace_contention_begin+0xcd/0x130
[ 1231.339481][T15794]  strncpy_from_user_nofault+0x72/0x150
[ 1231.339504][T15794]  bpf_bprintf_prepare+0xb9b/0x1410
[ 1231.339538][T15794]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[ 1231.339565][T15794]  ? kvm_sched_clock_read+0x11/0x20
[ 1231.339585][T15794]  ? sched_clock_cpu+0x74/0x430
[ 1231.339605][T15794]  ? bpf_trace_printk+0xc1/0x190
[ 1231.339627][T15794]  bpf_trace_printk+0xdb/0x190
[ 1231.339646][T15794]  ? __lock_acquire+0xab9/0xd20
[ 1231.339665][T15794]  ? __pfx_bpf_trace_printk+0x10/0x10
[ 1231.339703][T15794]  ? bpf_trace_run2+0x186/0x4b0
[ 1231.339737][T15794]  bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
[ 1231.339755][T15794]  bpf_trace_run2+0x284/0x4b0
[ 1231.339781][T15794]  ? bpf_trace_run2+0x186/0x4b0
[ 1231.339807][T15794]  ? __pfx_bpf_trace_run2+0x10/0x10
[ 1231.339831][T15794]  ? rcu_is_watching+0x15/0xb0
[ 1231.339852][T15794]  ? trace_sched_exit_tp+0x38/0x120
[ 1231.339881][T15794]  ? __bpf_trace_contention_begin+0xcd/0x130
[ 1231.339907][T15794]  __bpf_trace_contention_begin+0xdc/0x130
[ 1231.339936][T15794]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[ 1231.339958][T15794]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1231.339989][T15794]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.340010][T15794]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1231.340045][T15794]  trace_contention_begin+0x114/0x140
[ 1231.340071][T15794]  __pv_queued_spin_lock_slowpath+0xf0/0xb60
[ 1231.340095][T15794]  ? rcu_qs+0xc4/0x170
[ 1231.340113][T15794]  ? __pfx_rcu_qs+0x10/0x10
[ 1231.340133][T15794]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 1231.340163][T15794]  queued_spin_lock_slowpath+0x43/0x50
[ 1231.340191][T15794]  do_raw_spin_lock+0x21f/0x290
[ 1231.340218][T15794]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1231.340244][T15794]  ? __lock_acquire+0xab9/0xd20
[ 1231.340264][T15794]  raw_spin_rq_lock_nested+0xad/0x140
[ 1231.340287][T15794]  __schedule+0x330/0x4c90
[ 1231.340307][T15794]  ? is_bpf_text_address+0x26/0x2b0
[ 1231.340330][T15794]  ? is_bpf_text_address+0x292/0x2b0
[ 1231.340349][T15794]  ? is_bpf_text_address+0x26/0x2b0
[ 1231.340368][T15794]  ? preempt_schedule_irq+0xb5/0x150
[ 1231.340390][T15794]  ? __pfx___schedule+0x10/0x10
[ 1231.340407][T15794]  ? irqentry_exit+0x74/0x90
[ 1231.340427][T15794]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.340455][T15794]  preempt_schedule_irq+0xb5/0x150
[ 1231.340474][T15794]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1231.340498][T15794]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1231.340521][T15794]  irqentry_exit+0x6f/0x90
[ 1231.340540][T15794]  asm_sysvec_call_function_single+0x1a/0x20
[ 1231.340562][T15794] RIP: 0010:__might_fault+0x49/0x130
[ 1231.340582][T15794] Code: 80 b7 ff 65 48 8b 1c 25 08 90 9c 92 4c 8d bb a4 17 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 be 00 00 00 45 8b 3f <31> ff 44 89 fe e8 fd 84 b7 ff 45 85 ff 74 15 e8 b3 80 b7 ff 5b 41
[ 1231.340600][T15794] RSP: 0018:ffffc9000b517a88 EFLAGS: 00000246
[ 1231.340619][T15794] RAX: 0000000000000000 RBX: ffff88807a3c5a00 RCX: ffff88807a3c5a00
[ 1231.340634][T15794] RDX: 0000000000000000 RSI: 0000000000000103 RDI: ffffffff8be16360
[ 1231.340648][T15794] RBP: 0000000000000103 R08: 0000000000004cc0 R09: 00000000ffffffff
[ 1231.340661][T15794] R10: 0000000000000008 R11: ffffffff81acfd40 R12: dffffc0000000000
[ 1231.340675][T15794] R13: 1ffff920016a2f68 R14: ffffffff8be16360 R15: 0000000000000000
[ 1231.340692][T15794]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1231.340724][T15794]  ? __might_fault+0x22/0x130
[ 1231.340744][T15794]  _copy_from_iter+0xf3/0x16f0
[ 1231.340774][T15794]  ? __pfx__copy_from_iter+0x10/0x10
[ 1231.340797][T15794]  ? file_tty_write+0x2a8/0x990
[ 1231.340822][T15794]  ? file_tty_write+0x2e8/0x990
[ 1231.340846][T15794]  ? rcu_is_watching+0x15/0xb0
[ 1231.340867][T15794]  ? kfree+0x4d/0x440
[ 1231.340910][T15794]  file_tty_write+0x486/0x990
[ 1231.340943][T15794]  vfs_write+0x54b/0xa90
[ 1231.340962][T15794]  ? __pfx_tty_write+0x10/0x10
[ 1231.340985][T15794]  ? __pfx_vfs_write+0x10/0x10
[ 1231.341006][T15794]  ? __fget_files+0x2a/0x420
[ 1231.341030][T15794]  ksys_write+0x145/0x250
[ 1231.341047][T15794]  ? __pfx_ksys_write+0x10/0x10
[ 1231.341063][T15794]  ? rcu_is_watching+0x15/0xb0
[ 1231.341085][T15794]  ? do_syscall_64+0xbe/0x3b0
[ 1231.341107][T15794]  do_syscall_64+0xfa/0x3b0
[ 1231.341126][T15794]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.341145][T15794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1231.341163][T15794]  ? clear_bhb_loop+0x60/0xb0
[ 1231.341184][T15794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1231.341203][T15794] RIP: 0033:0x7fee77f8ebe9
[ 1231.341219][T15794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1231.341235][T15794] RSP: 002b:00007fee78dc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1231.341253][T15794] RAX: ffffffffffffffda RBX: 00007fee781b6090 RCX: 00007fee77f8ebe9
[ 1231.341267][T15794] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000006
[ 1231.341279][T15794] RBP: 00007fee78dc2090 R08: 0000000000000000 R09: 0000000000000000
[ 1231.341291][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1231.341302][T15794] R13: 00007fee781b6128 R14: 00007fee781b6090 R15: 00007fffff4cc958
[ 1231.341323][T15794]  </TASK>
[ 1231.920035][T15762] Bluetooth: hci2: command tx timeout
[ 1232.648824][T15756] chnl_net:caif_netlink_parms(): no params data found
[ 1232.846923][ T8261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1232.895820][ T8261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1232.908107][T15756] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1232.917942][T15756] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1232.925834][T15756] bridge_slave_0: entered allmulticast mode
[ 1232.932997][T15756] bridge_slave_0: entered promiscuous mode
[ 1232.944603][ T8261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1232.956786][T15756] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1232.966270][T15756] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1232.974960][T15756] bridge_slave_1: entered allmulticast mode
[ 1232.981845][T15756] bridge_slave_1: entered promiscuous mode
[ 1233.009631][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1233.021362][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1233.061206][T15756] team0: Port device team_slave_0 added
[ 1233.081713][T15756] team0: Port device team_slave_1 added
[ 1233.127164][ T8261] bridge_slave_1: left allmulticast mode
[ 1233.133248][ T8261] bridge_slave_1: left promiscuous mode
[ 1233.139202][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1233.148583][ T8261] bridge_slave_0: left allmulticast mode
[ 1233.154604][ T8261] bridge_slave_0: left promiscuous mode
[ 1233.160428][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1233.288935][ T8261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1233.300415][ T8261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1233.310492][ T8261] bond0 (unregistering): Released all slaves
[ 1233.321058][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1233.328407][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1233.354862][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1233.370377][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1233.377881][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1233.407743][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1233.418788][ T8261] : left promiscuous mode
[ 1233.453267][T15756] hsr_slave_0: entered promiscuous mode
[ 1233.460136][T15756] hsr_slave_1: entered promiscuous mode
[ 1233.466768][T15756] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1233.475180][T15756] Cannot create hsr debugfs directory
[ 1233.480844][ T8261] k�*�]�: left promiscuous mode
[ 1233.547095][ T8261] tipc: Left network mode
[ 1233.553841][ T8261] IPVS: stopping backup sync thread 15712 ...
[ 1233.721822][ T8261] hsr_slave_0: left promiscuous mode
[ 1233.728870][ T8261] hsr_slave_1: left promiscuous mode
[ 1233.737276][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1233.746698][ T8261] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1233.756184][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1233.765230][ T8261] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1233.778632][ T8261] veth1_macvtap: left promiscuous mode
[ 1233.785648][ T8261] veth0_macvtap: left promiscuous mode
[ 1233.791989][ T8261] veth1_vlan: left promiscuous mode
[ 1233.963111][T12788] Bluetooth: hci2: command tx timeout
[ 1234.011446][ T8261] team0 (unregistering): Port device team_slave_1 removed
[ 1234.054571][ T8261] team0 (unregistering): Port device team_slave_0 removed
[ 1234.307533][T15756] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1234.343303][T15756] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1234.376293][T15756] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1234.399183][T15756] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1234.493618][T15756] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1234.504242][ T8261] IPVS: stop unused estimator thread 0...
[ 1234.514810][T15756] 8021q: adding VLAN 0 to HW filter on device team0
[ 1234.528139][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1234.535657][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1234.549303][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1234.556687][ T8263] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1234.725060][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1234.917875][T15756] veth0_vlan: entered promiscuous mode
[ 1234.928549][T15756] veth1_vlan: entered promiscuous mode
[ 1234.953659][T15756] veth0_macvtap: entered promiscuous mode
[ 1234.962649][T15756] veth1_macvtap: entered promiscuous mode
[ 1234.979219][T15756] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1234.992135][T15756] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1235.006491][T15756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.016979][T15756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.025936][T15756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.035326][T15756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.070624][T15756] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht'
[ 1235.096781][ T8263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1235.098770][T15756] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht'
[ 1235.110643][ T8263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1235.135557][ T8263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1235.145364][ T8263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1236.042880][T12788] Bluetooth: hci2: command tx timeout