last executing test programs:

10.932429654s ago: executing program 0 (id=1259):
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) (async)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) (async)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async)
syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x0, 0xf, 0x49, "527efb06f5f3366c848ab7152fa1f64c5e57da2124e524f57a8700c23ad8224d6c5a347a96cab389ba0d06472f8ebf262622122fef9541e129cdccf744b954531fd6babdc49780030c"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x6, 0x4e6, &(0x7f0000000ac0)={{0x12, 0x1, 0x300, 0x12, 0xda, 0x19, 0x20, 0x5d8, 0x8105, 0x8705, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d4, 0x3, 0xff, 0x4, 0x80, 0xf9, [{{0x9, 0x4, 0x25, 0x5c, 0x0, 0xef, 0xac, 0xf3, 0xe2}}, {{0x9, 0x4, 0xad, 0x4, 0x5, 0x2, 0x6, 0x0, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x80}}], [{{0x9, 0x5, 0x80, 0x3, 0x400, 0x9e, 0x1, 0x1, [@generic={0x2a, 0x4, "8d71726eaeb584c798539c9ebb13765edcd0d3873f5f88cb51f7531fae51d086f3d41f33f0f969d3"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x6, 0x1, 0x9}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x0, 0x1, 0x7, [@generic={0x47, 0x10, "add68579aa2c6b99efbc786d5020bc5f700bf32e511056d93056d96b8a81fb1c3fcb8f4efc59a7769dd41d0f35247d6dd2a8874ab6f4a544e912e8c0004579954717e7abf9"}, @generic={0xb5, 0x5, "7ae8d143e1205991d770649ad6a07484ced3b87e7974afde2db72313a5f12b40ee52adf21589428f3d0d7f34b5aa5ea94e91aa08a7783ded3cff8d5a97d59e1ec8cce16e412ffba448930562ca883565e888ce5b7a9fa18e040da9d6b79e6b0342688edd1e64d32b160e3008b4681c456d8f74eaee9e107af99e370aea57c87ebc2ddd4de224eb45360d395fcd7ea12bfed0592fcbb804f49a62c6a9a51da8f13863b8f62da9165c925e6a958702a25a16d8d6"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xff, 0x81, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x3, 0x1, 0x6}}]}}, {{0x9, 0x4, 0xc8, 0x0, 0x4, 0x18, 0x64, 0xa1, 0xf3, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "a0e9facb5c2c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0xcf21, 0x24}, [@acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0xf}, @mdlm_detail={0x6b, 0x24, 0x13, 0x71, "ce9ff605c5e36991b4dafd8cd4e89bc46aaacec3c8de7a223e63fc2a4e26dbccf0f256b93b274e72904d113edb8ebe6172702ef3a11345bb6f60dd29499daf4659ed1c027ac773545bac91708226443cf191895b68c67286c3f38ca898019fc0295bc5187e0f7c"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x100}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x4}, [@extension_unit={0xc, 0x24, 0x8, 0x6, 0x2, 0x8, "cff09edad3"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x6, 0x2, 0x7}]}], [{{0x9, 0x5, 0x9, 0x4, 0x400, 0x5, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xe}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xfa, 0x4, 0x4, [@generic={0xe1, 0x21, "db594b892b575af01b53ff8e403a80d65166d53ab72806fccd8acbdb7ccad8a2bcef2fa5ba6e7e0adce239caf544ae3d536df946f178ae3402faaee22bb813fa3df734451ce0fdcbaa912a464b8874b3677d90922a35e0b4636018df8138616433bbb146d795980075c71f3d47bbbfa781ed2dfad66274e4a9de3e5b12ce58f5c8e1b6eeb5dc47f6ea3f7eb960862a245c7955d360f8c3f56c706c2272571cbe98b760e416ce3b92cb0a4bd06860dcbbcc978c6d68288850007915a506fcec584d7296e07a8eb818a3671fca2de78fb56860c549282466060617b2d610e3c7"}, @generic={0x75, 0xe, "9993ac4366a97e5861a0b0aaec2b24851fde067955689351273d36888ce93388af81e4f328a24345c3602a9f770d16bf7cec91ca5a091e0b072bcc7b7b4e27e21cabc1364fde4d8d57715be5356b9ed70fbeb7dfc59edddf72a7fe3bbd0ed0f3d17265f7d8305294dfeb2f4eee80442f705cf7"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x7, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x201}, @generic={0xeb, 0x23, "6dc459fbd24e661be7dde06f552025ea88178ac9de7f3aa08f3c2911c739714d8cdee04abbdba8f0337d835f533e6b4b8737f990da088efa407ccbdcf62846b6a4e040df98bdfa460123034d9a26b566797e913a24d73182c2a46030551e0cd7c4c304632836c812485c7a50ff531dd575803382c03408a9a92688e6d214c412f3083607d580b6aeb7e95ba009365dc916ea7a0e702ce8610f15d34ef31a1e3095e76670ebd72f5883c04b06fa529fcd667170934d65a76694020388b6465eb3de80fdff9db9706c3f6cb6703836b97a45da344bc45b86e2a3a2b0983bfb1263ab393b4925ef9ebb0c"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x9, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4d, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0xa3, 0x0, 0x40, 0x80}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x46, 0x9, 0xc55, 0xff}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2801}}, {0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="050300cf7fdb839529d3496938e2160447f0548271c3a92ebb1d688448196f40c895f6f6793d876e2a58c784e4e2d6ff298e493695866e76d5badb3fc6820efab8e6918f165adca5af006a9ca87ec74b711a02b28148ddcb827e2c7078b562e68473cbd3ef8b"]}, {0xffffffffffffff82, &(0x7f0000000200)=@string={0xbe, 0x3, "262302f845d75a87b014f61b6d6e80f91d2e3dd9d7db22ebb7a43ecbf2ec904e9ac7bb10f9e62941bf3fd347e767307ee491e113af8430169ad8aec790045721dc8fb68f00afa9dc65b677618b8e56e60a5c3e7c08995833fe7d233231fa4d699caf5a8b2bb3e15451a44f6838f5e3423ced2eb0e833e6fbdb5f42e906dedbecfb2e66b68beb31b8209968e58e9b04efb1693987dbc0995f7da42c3fe8eb123b776b6ada5eacefbe18c20a9dde82f7c440dbfe58b536b191b8647b84"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000003c0)=@string={0x4, 0x3, "e906"}}, {0x74, &(0x7f0000000400)=@string={0x74, 0x3, "e003f02a3359038f01854911ac15643aadf6836c8553d648bef78eab3c8ad01b8b717275fea01f991fe28cb8976a3b4b07989539eab535f9047eb7155957a5c59ca608afa5bcebbadf72d1a82fe5418535512c223ed57ab34b256f5083a270653682cdfb568351c7501d6f05ff9a3f99fd0b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4ff}}, {0xe6, &(0x7f00000008c0)=@string={0xe6, 0x3, "c4f0c5a5d3fd9df683e70e00000041bd39b4c23d54a052859e4b8aa3a18d9bce4415ef8d2f3c979aa0582ee836f581fcad596d1d9fa31f3194da87c498a50e3b299f4781100a583c836cb3314d7905000092d1e1d064b93e480aff0700722a0cafaf59ed1ac0719d60c5e1c2e621272aef51ff73a66aea3446323dfaebf8d731400e64777b8160bca2f2a2e5b4e0db5becc60511aed2fbd0edbf968445da9afec4a12c98b4fe063021169cb285f60dab620ec6087750f85d2ae4cc9436787c9f0f6c0a376335433e0000000065f251fdb0cf69326a856cb2171cfe455836491f0138952e4600"/242}}, {0xf5, &(0x7f00000005c0)=@string={0xf5, 0x3, "5b78b11c586b265eb116fbb55927644bc2f37371f7dffa497ed5e19ccf2509cc7e8f42a38d39ea50bd369dff5aadb1ed9f547ac8eb1c70fb138b9e603f57f6c4693d7733ef28628a540fd5b770fbd66ef8409618b5d912ddc009f24eb53df7e05c6b8c1b5c062efe1111b90218e8232a9488a376afef871dcc2ddfe0d163ae70776749cbfb6d902aefe4f1295e51fd9fda630293f296da48715ad046c0bc22280b2e08cb3deba10cc4c2c2eb831621ec18cb96efe8889a82637dc915e0dd61cff18bd1c61c53c656a063bd1d901492f75c75063c9fdbd9c2f9e2cf668fbf959c9a5c9f6c9f8731016cffb612ed784a0467f97d"}}]}) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

7.76246704s ago: executing program 0 (id=1275):
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$packet(0x11, 0x3, 0x300)
socket(0x1e, 0x4, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

7.473053789s ago: executing program 3 (id=1277):
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65)
sigaltstack(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0))
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x3, 0xb49, 0x3, 0x8, 0xfffffffc, 0x3}, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2})
r4 = socket$inet6(0xa, 0x1, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001780)=[{0x0}, {0x0, 0x44}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000380), 0x51}, 0x80)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x1, 0x180, 0x4, 0x14, 0xf2, 0x0, 0x7fffffffffbfe, 0x8, 0x3, 0x800000008, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0)

7.435033602s ago: executing program 0 (id=1278):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2b9c00ab7fc9113635e70d3b"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
setresgid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000380)={0x20, 0x22, 0x2, {0x2, 0x2e}}, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x20, 0xb, 0x2, "8fa5"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="4015de"], 0x0, 0x0, 0x0, 0x0})

6.108181025s ago: executing program 3 (id=1282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x0)

5.872861139s ago: executing program 2 (id=1285):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x9, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01977d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a0f4bdf70900ffffffffff00", [0x2b]}})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, <r3=>0x0})
r4 = syz_open_procfs(r3, &(0x7f0000000300)='net/mcfilter\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}, 0x94)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00')
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
eventfd2(0x7, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=',rootmode=000000000000000004', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r7, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0/../file0/file0\x00', 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r8, @ANYBLOB="2c04800000000000003d797d30d0d10fd08c42ee5e04ddc2e31460bd3a48643c5be3c0", @ANYRESDEC=r9, @ANYBLOB], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$inet(0x2, 0x3, 0x2)
r10 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r10, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100001300010000000000000000001c01008085013ee98bf0a850b89d66cc57fa58ef4a05a90632128e77f035870bacbd517779f932ac75f1cda52be47ee9aa28ee08000000d25f00dd058c29e21040"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')

5.871397505s ago: executing program 3 (id=1286):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32)
r2 = syz_open_dev$vim2m(0x0, 0x10000, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}, 0x800}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108) (async, rerun: 64)
r5 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0xd01}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
r7 = dup(r3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0), 0x0) (async)
read$FUSE(r7, &(0x7f0000000fc0)={0x2020}, 0x2020) (async)
keyctl$session_to_parent(0x12)

5.730856637s ago: executing program 2 (id=1288):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x1900, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)
io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80})
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0))
r6 = socket(0x840000000002, 0x3, 0xfc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmmsg$inet(r6, 0x0, 0x0, 0x2404c0e4)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xffffffff}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x40, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, 0xc})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x300}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202)
r9 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x2000000000000, 0x0, 0x0, 0x1a, 0x1})

5.130577933s ago: executing program 3 (id=1290):
r0 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x7, 0x8, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50)
epoll_create1(0x0)
r4 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116})
r5 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x300, 0x0, 0x1, 0x3, 0x0, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x100, 0x0, 0x2, 0x2, 0x6, 0x7}, 0x20)
bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10)
bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r5, 0x0, 0x0)
close_range(r4, r4, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x297, 0x0, 0x5}]})

4.351568606s ago: executing program 2 (id=1294):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpgrp(0xffffffffffffffff)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x78dd, 0x4)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x714000, 0x1000, 0x0, 0x3}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESOCT=r4, @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r4], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, r2, 0x1, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)="ef6d51d243832d714c52b3b655dd1d1b5c7566a154b99f6ea957a5da255737c57d76e5b16710", &(0x7f0000000140)="782d8ee04af78bd4a0d4a3940f1da4b71976c469", 0x1003, r2, 0x4}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
syz_usb_connect(0x4, 0x38, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

4.27684034s ago: executing program 0 (id=1296):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x0, 0x80a0000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = creat(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d0000052406000108246ea9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003fc230202043e021b0424"], 0x0)
syz_emit_ethernet(0x1be, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts={0x0, 0x29, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9b, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6f"}, @ra, @generic={0x0, 0x8a, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871f"}, @generic={0x0, 0xd, "8b168e4b48529453d91cea4240"}, @padn={0x1, 0x1, [0x0]}]}]}}}}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x0)
epoll_create1(0x80000)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x828189)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

3.275012587s ago: executing program 3 (id=1301):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPTLCK(r1, 0x5420, &(0x7f0000000200))
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5000}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f00000002c0)=0xc)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000000)={&(0x7f0000000780)=@in={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x23f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x61, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x60d, 0x9, 0x1, {0x22, 0x4c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x6, 0x7, 0x20, 0x26}, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x2, &(0x7f0000001280)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000d80)={0xa, 0x5, 0x5, 0x8008, r5}, &(0x7f0000000dc0)=0x10)
socket$inet6(0xa, 0x7, 0x14)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x2059, 0x7b, 0x6, 0x81, 0x6, "6951d33cc8cf1816e1c974a98f6feb42884271"})

2.901304639s ago: executing program 1 (id=1302):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0)

2.783905624s ago: executing program 1 (id=1303):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c000300"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050125bd7000fbdbdf251c00000018000181140002006c6f0000000000000000000000000000d5a3c6ac475b195719763604be80976d6b5dad04000000391cf3c85a9344f5f0e4c1b533f7515590ba80ab37fd894a57edfba37b9c63da8026ee4d1c4f0f"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40006)

2.383698859s ago: executing program 1 (id=1304):
r0 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfffd}, {0x6, 0x6a6, 0xffff, 0x5, 0x6, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1010}, 0x4)

2.346816038s ago: executing program 4 (id=1305):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4002003, 0x0, 0x0, 0x0, 0x19}, 0x94)
r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0x8, 0xfe}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2.200169196s ago: executing program 4 (id=1306):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[])
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x20040003)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="05002dd603e3132c2d328100000008000300", @ANYRES32=r6, @ANYBLOB="1c005a800c000380060001000918000004000380"], 0x44}}, 0x0)

2.08168737s ago: executing program 1 (id=1307):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) (async)
lseek(r3, 0xfffffffffffffff5, 0x1) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0}) (async)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8) (async)
ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000021c0)={0x34, r6, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0x0, 0x99, {0x0, 0x41}}}}, [@NL80211_ATTR_4ADDR={0x0, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x0, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010) (async)
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x83e, 0x0, 0x80000000}]})

1.995790709s ago: executing program 4 (id=1308):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xffffffffffffff09, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1a, 0x1}, {0x3, 0x4, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1.946000421s ago: executing program 4 (id=1309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540006001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x20000000)

1.893237291s ago: executing program 1 (id=1310):
r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
sendfile(r0, r0, &(0x7f0000000040)=0x5, 0xf8)
mq_open(0x0, 0x42, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000004c0)="09000000e70014000000d97bfbf788a83baa88a80000c800000081005ab188a8", 0x20, 0x200000c4, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
r8 = syz_clone(0x9cfdaa7c58b8bd70, &(0x7f0000000400)="1bcdffeda9e9c0e64ab53003301941bbeb88eb563314aafa43300466c4903a572cdc7339b50ff0960981448126008227f4da625c7bde48c2be65e090f4127c87a3284c7652e1af88ef78dac0d949668e09b31a5571c08f1d27b8b1b1eef3bd78485bdde818b5a764070f44ebbfa229db11871f45788aefef8c5b7ebdc8e6ebaeedf5d91f2c0aad7f3d396a4e238d", 0x8e, 0x0, 0x0, &(0x7f00000004c0)="9f99a1775f6c74226cc7a6463c75887260ba0c761c96f0746bc373fa14ea48b03769ba99d27a43cd794806b914f8eb9dd996e43c88024e5fb55ecf9d39f420cef43e591258266e6bc5f442389d0cd76ac9f980017ad20717f90615fd65bfb302ee4a34147881912fb823241012c4b6ebefa029ee54543d8e76a8482957424eb1cf8859ccb778ed4ea7fbd7694b5c6be16af9b285f1f20fec22b73d3414166e2221f6c8300cfff9bc4512518a161a14722393a261d8b5838fbff41fa1b4549b79f70548078999")
ptrace$peek(0x1, r8, &(0x7f00000005c0))
syz_open_procfs(r8, &(0x7f0000000100)='net/nfsfs\x00')
fcntl$lock(r6, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xfffffffffffffff6, r8})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0)
r9 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r9, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x21c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x40, 0xfa}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x41, 0x0, 0x68, 0x10, 0x6}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}})
close_range(r0, 0xffffffffffffffff, 0x0)

1.811601204s ago: executing program 4 (id=1311):
r0 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x7, 0x8, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50)
epoll_create1(0x0)
r4 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116})
r5 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x300, 0x0, 0x1, 0x3, 0x0, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x100, 0x0, 0x2, 0x2, 0x6, 0x7}, 0x20)
bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10)
bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r5, 0x0, 0x0)
close_range(r4, r4, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x297, 0x0, 0x5}]})

1.105953152s ago: executing program 2 (id=1312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0xffe0}, {0xffff, 0x2}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x5, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xd1981, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="d80000006800080026bd7000fddbdf2500000400926b7ac20c000880080003006401010004000b001c00020002000000010000000000000006000000020000000200000008000500", @ANYRES32, @ANYBLOB="34000c80080002000600000008000200010000000800020002000100000008000300faffffff44000200b164d7ae96d3f566dc0200000006000000000000f30000000107000000000000000000000500000002000000050000000400000000000000010000000000000004a0000006000700080000000000000000000000000000000000000000000000000000001adb0000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0xf0, 0x24, 0x300, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x9}, {0xffff, 0xc}, {0xa, 0xfff2}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0x0, 0x3, 0x7c, 0x2, 0x200, 0x2b7c, 0x2}}, {0x8, 0x2, [0xb6, 0x1]}}, {{0x1c, 0x1, {0x42, 0x6, 0x0, 0x5f55, 0x1, 0xa, 0xfffffff9, 0x8}}, {0x14, 0x2, [0x8, 0x40, 0x0, 0x3, 0x100, 0x2, 0x0, 0x200]}}, {{0x1c, 0x1, {0x4, 0x0, 0x10, 0x2, 0x1, 0xc, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0x80]}}, {{0x1c, 0x1, {0x3, 0x2, 0x3ff, 0x6cab, 0x0, 0x7, 0xe, 0x1}}, {0x6, 0x2, [0x5]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff9}]})
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="030000000000", 0x0, 0xfffffffd, 0x0, 0x2, 0x0})
sched_getaffinity(0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00090027bd7000000000000400000004001981"], 0x18}, 0x1, 0x0, 0x0, 0x20042845}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x846, 0x9016, 0x30, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004)

907.753498ms ago: executing program 0 (id=1313):
socket(0x10, 0x803, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x1e, 0x4, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

447.051331ms ago: executing program 2 (id=1314):
r0 = syz_io_uring_setup(0x4a19, &(0x7f0000000000)={0x0, 0x5864, 0x200, 0x2, 0x222}, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', <r1=>0x0})
io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0)
r2 = openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000005c0)={&(0x7f0000000180)={{@hyper}, {@any, 0x8}, 0x400, "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"}, 0x418, 0x8})
r3 = socket$inet6(0xa, 0x2, 0x6)
sendmsg(r3, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)="cb4fc63b7d7d06cd56ab9c4d5f9d2de21aaf827259abe5b12e7d9e638df61a064ddaf2167e822cd6e2a4eda0596b2c9e760e01bef9ef2fe1a5194a956a6df6b07e073abfecf6328dc4f50e4f6e42df2ae00b393f7efe3ae976674e858a2640a3ec44462103167344e8845ed680bc10e830937c218fd31c", 0x77}, {&(0x7f0000000680)="ba7f10b0e43f1008f3df54d7967f16b33f6bc0c098bb860ea1921cdaf46dbba392238ec8a868c4300e23c6e3bffa92911d8cb6eb5aa2a65775ea528871aa2f9b91d5beaf1f6a7a55a2967d6f6dbb28b8d2ffb6ed8256d69408ebec0249bb4f809dd0ce8e4249cc6ce67b0629d7faca8b62619ed641448159611fa5860a3e40d6decd5af596b6b3d1763651f882b0fdf89a015d197baffe9a8b57402c2086448722801398cb966b6c840bd1e581", 0xad}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="132a5c51dbf4605331fbb6135b2d2e7731d6e361eaba498207a2a73662345c24c4484f5953e860a0349ca57d03732fabefed72b51af879ac78ffb6419b6df0f6a6bca62ff995e291a83ea6fa9531c59e77c42933f4138e9f42207e365bae0000f191ea08ff382bd7000fef367d9f15fb21ca04e551042fe5c2a890dac677f3039b7f204cbe22ffa6a6d0f2cac23da09e7c88490e1c0a920b85d9a87d6c7b2eb945e4cd67885c60d6330b6a2835", 0xad}, {&(0x7f0000001800)="c66cd222b12a86cd10dc0f2fd5c6364602967f16e0945308c2b8669db5c473df5f542e727a2aa866cb1ab188dc178396e08cc564d59e", 0x36}, {&(0x7f0000001840)="689c380de29e1622c8184dacf87511ec10d3", 0x12}, {&(0x7f0000001880)="6c3b401e295fb1b31bfc52f0d416a2fc7b804dc47f3ab6e4932aa382e4ec65107560af3c4314b70328db6ee4c77be3161ba578a2c3da9b0d15f9743445ecfd607fa8468168f66472fd2ff6377776f51eb90cd81d894d10d4850b6ddf6050f4a2f0685b69676a648bdd858e38d1cbcce38d62da037acb75ae1545be1b", 0x7c}], 0x7, &(0x7f0000001940)=[{0xdc, 0x112, 0x3, "21b1851bf020ecb249c876ff57997ff1ad5732c1702df2768010afb57c771fc9d2cc916721ceef199dbf0c9655cd5bb48b539c5002bacd6139c51b6e32ea6aa8f5e991787d7569b5666bceb8fd0e9912b248388e41ddcaf131fdd1db957b1adc87e1e651cfb958e702df74659c765b61d16665f0f29d6584896d48ea02ccb478c9dd59b68d88924a5c3f02e8cbb5ee28da260f65d7218a0dedd2e80f601e922c3cc1553861273b7f9935beb4ace98da8ef267fc59be7327e0a483745954d57cbfece2578fc27b47ed308e2db64"}, {0x14, 0x112, 0x1, "cccd37356e654171"}, {0x4c, 0x118, 0x7ff, "cb5224ae0de527356e3300280852aa295dcdb3d54f4ae16398d419ef638382301e4cbc9fa6462068c7b65d10e358066fa6f8ec7b119aebfe2c57a2f390ed45"}, {0xdc, 0x88, 0x0, "cff00a2fa915968ef933b59a43d3cda2cfc88204ca00c03619506b9d796c3ff5696d51e68c1b77200d3fb9823b02507e7e686db947e0f8a00e2561608963be4ae8122ce6acdcedf9d73194dcd08e26e50e9b4af5406b9b2d538288a6ed898c54bfd94cf2bf19c95f09f7ea928dad1b9c946a6d41005a898ac6f9f85672dd1478aad25f26fa228a4ba79bbb58c2b8d27d8649a1d36085f28ec269b70ea26f687893f0bff232428c17bc9bea9a7cc34bc050891992b66f254ad49cca3aeb0f59ccf384c85f825482564d8a7cc9eeb051"}, {0x100c, 0x10b, 0x8001, "7e275096359897aa04ea2782beb9cf9c7d98debcd4171dbb7690bcb7cc72877e7a4b4e20fa935cec57ada447356d8b4d43c31794a75d32ca0ea9758b44a43ff1d06be89385366486eb368e26ba033a01f0b86a8c2ba7b336c7e5e4b4f712ba97eb44ab2f43f4ff781c6ec3581869e0f2f3c7aa32ae6486d1397c02a949ae6285312dd248f34648616564725506d5486b1a1e6afff60925441aabbd286272bb3f2320ce8be58dc5673f1d95d5a3674edadfa842976d60acb2d38b9698e5ac78012049b555370110b6e9bd6351a7068c4711c530f8fbc2f02fc2dafdf77b4097c1fa0054e5d6ce3d5b01a1178eb876105d20724d36954c8db986142f3d0ffe3db1fc8f899884c82616b83a035150a6c79deaf724774ab46ba08de04fc82156637749275cb3c4a1e554f1e5f5fe28f4298ea26d07cc4414b59b2c22ffc8f64352b283b2f718bdafafddf46c77296094ee205469400182e9bae6b70a824ac560495b69b86fc89d0e00b9a56eded03008ada595179c4e23d4e244b2ff18525ed775d23ebc8a79029e6fb57b4f1291a37c63fcc804fa7517bcc94c2b6625a86f5640e5e5865e5f68635a0bd13622de35a12c3d7a25714d0a4efb7fae201535e4c9c8ae6442668c7f7f8d935faf799070174155d1ae6f9a64d34c06f6555990a4298e32349a5184b7d40fe2efdca45d00722b294ea81bf079403b7f5b5b2ba154b16f67d0fd87c6e167abb4b3a99e7ae4abba9574b461071fcd6af9773e2c9114ba5dd53f595f9d0b3a745ed3cf6d6685bc41fef30d721d044dba770a610b3fd3c5bf637ab2c6d4c0c8dc151d80a5551681bf1ca1340441338b30a44af86552f22f596c48a50076991a93bfd1de8d400494fdc7f3487444e0baca77496125ab43b88727f1e43896e17fc039f156474ebfe925b996555031d634697e5ff0da5735e26d3468b19780ac7c43b483ba8cdfacaa58319e50138a071c9922f1b5ea19f0f03817822655b44209c618ee71782d9ec4bbbb760f7514f10551c60f6159c23ed29c7282a4f663e0ac34b16b69aa5f66ed95a8519f99478edd192a8eac0406d0bcb24e4a1d33017d3ea77b9cf131ce09a28c4e0f1295f4268d1a7f3f4a4284275caddadf290999092f8354b6da8fd497a0026e9b6f515b60fb6a3639d1c7e8a61c7e3bfe47f249ec42a9bb1821efc3b6e323dfd6c8e95c204e8163294dbeb5545332bbab2bcc880a59a1e9de4e4ab6f9b9cd43636c1c4b2a05bb21a020a7ae97670c47ee50fc39e5c60ebc5c3f604e9f6d472994f8b17caa971aed5cf11f3e91129ca96b8d6d0ee186115dead61a3bec2303c29ea9b3196a6663fbbf05045240f606c2e90e19b09807d63e91cf861b229d96ce2f1e747889244e791807c4d6051397f978018977b360bbcc1522f3fd3ea1cf65767d1a0e20a9f9601790111ab6a6d37b2faffe02abe9e8ea60b08b3aa7fcf92d73bc6a3e4f79bd569bb2261598d151f191769f1474b420792eb8dab29b68b27f894fc36e6c55357aa90f6b34fd26d23709ecf409306fde5a12dd2ec85bd245cce319386c8928c1041744c34475254bf4dd5d8ecac3cb02350dc8c7a2600ee9a6700d32eb55745218270bdf5e70568f0c9dc30927869e638ef00d872c6bd8650054616e00879f3d191e687e33135fd1c2dc5bcc724587ac386e014735bf512f3ddd6fcea199112a5c564f290c6a46904c679e1f4c33fe2634d94c4608e73dbdfa0a5e53fa6b637f20a0b67ac9d3a9c587b368b556f74a5e3fd05f5583bf2bcc2d4fc83360ac1ddf1abdf07a28dfacd637170dfdc68b635e7c1aa46fbec40fd872cb4339051e440bd99f4bca7c2be0147b54c871ad471691abc713dfc5da538dc700068b911ac57b30db887b188438da342480b2a41aa107a0e4546fd12193cf24d6a23482e649996c0717e3ff840e2090ea171ab5aa31a35ef54912cce701745b077252b558de4b417f4f4deeff0ee9c8cf7aa63c1bd9c809f3b7df76ff73c52a7cef1f6922f0d59c5fb8f62e48e914644847aa5a42305b563b0e2c3417373ea78ac5b7edc0c6ebd6852cb79b88f20dda69aaf7d8fb3bfb08aaa00522c63889f3b884ea4952ef1fc65581fade70f384ac4a079739c07920dc5f000519371ad35a8064e560ee1237bb30ef9ee7965cd438bbbdd614e6bd7bc9f1d72b674be36f74e1ca27682cee5e1d821ff6b0b4cad1c280e5f4d20df4839da92666ed19c1af439ac941fad1958faab38be9e5d9714c05c88a7e3ff2d6929053ce85baba549e50b13e8ed34d14021f30f66e2678f50efed3d5a5df6bce34fa1c92518bfb7e3c934c55556a2f68873e101c5faa9e38f205d1a687c769795879fa5a02e956b18e721793e81291505471195febdc9dd2aace1771f84fd9014be7798e8052008eb6f87d80b334820434739aff52a15a622b1c0519907bb9c2fcf89f4dce17aa71987de79c964d4d4e5422138aff7679564426b7c2ab70e8b67d0fd3dcae66b6d5f3d90eb8071ed9fe933f44dd33197908dcafb54dd72ae89b4ba6bd77255d38c59ab1a7895e7026111ad1191ae496addb2fd71300165b665223386ac927deed72c4dc20d4df5f368c15235323ef3a97df4962ac4f1f384430d5600a080fa910a69f9ccefbea2a5cd1f04f81cef76566918bb55eaf041936ac901dc3a0b433355067da410cdac32477a8d445e70e7c6c0ffa905cbe029d80c1144f51f0e239fe2c00f30b5d38a28de4aa34027673872131e5b2f2ca3702b399f038c589300d706cf680714cf4de98736d52ff5d8d0460201fa11098365e6526622abcadcc3aa2cebd328e58cfe85a04047b48ec3cce26933a68f78ed8b126155747d9f300fee93e80c115d62cce61bd52ddc7ca0bf650cb393c20b9134a4f3454ce4d70124a50b7b067756d3a97f1d371d1d27413ae4f45a0035c9f6259ab211ac5721e3dabce37cfe85bfe4a694a851878ba64a798d1721f0fe3b80da0d956687423593d26556a39cac791af0e4b7ceb0650a8f0a606e5df5a59a510d1e8d79be127ac354348d6066d7f8517310895ca133cba5069fd0612e7bf35dee8b8a71451faacd4283e1b5394599db8d433106bc7da3bd6bcab4b31c87d899c2a781f75fd0387302ddbc08297f1819d8516b6b8212e34afa9027e6ac955162c5fadcc6d8ae450e889839cb46cf6650265c6ec6473471b586a7295d38fd9161f3862b27dffd54bd5927fb40652fbdfa06a017a8771a7c5d09dd1940d98330d2506d0aca5cc6c481c0b8506c3b7bcd4ed954e83a7efcda0116cad7cd3b58005e9f35aedcc101ea18cbe20e8c287a0f2ecb0a8ff432e4f7195b601135d87aa076e321fc895ec5568cb5e6dc54b2ec8ead7e69e6c95ad525772b62f321aef179fbc97a99622a87e7506286ba09786e4b81536e302a9b4fc0c42e31f77ad196d96e07d842bcd34dd64983edcc2e233bb9f951475ceca6875eae76c07887e00e379d6fd04087075d0eae5e7634be700c468b4f9fc686ff6ccfaec97be6775e046f59bd431a7d37cc1e367e4f96959acd530da50d756a0b371f3cc54997d2c112af8038327db3bb6632a5557977288dfed11b8ad1d0ce67f7548d2f7c46566f81c32e25403f2b34cfad7d3400ac7157fe427ecbe793dfea42afa4d7c2ca4a7d350f23253bbb1ae649d99dab43b6aae620e4fee43f75e6915fc5a6fb2525a50ba1678a413c5ff471d21506f7ff581d4735dd7d6cff072a65db6605f1b29a7016ce7db35261bf23be31d64a2c36ddf998f5d5236ad6b1a68f41d9223566e0ba4f3264711c057fdc81bd33ab7101aee600818b7ff2b029ca3879984fc6ab0fbd2c6ebc93f6e6add42eec1b2113cd64152469193872279f00fc01ec090ebcc42a541a5d4399cd1974a97a3013d356dc4d4f4655e27a369fcbb0f36124c65eb0c5119e2b31993f8eca79b60461b0b70ed1186afe2cc369392a216f239e601a2c83b05698a3c30cc930ae907a576adb746fd577abab7f90abb13e280aa80d6bf74906b961087998be7c7e3f41283d019e0119e395358f9402024f67ff5044c4a0efa87782d8850f6755e3f60d2edef6658ac4b99b6e2a58d4c71eee2f1ee4013031a088183dda67b953e12a5d26ce422ed5fbe40d57183aac3e208832fd14f3f41941a944645919b382b8696a950433e319344e612f7b9bf9b2b178c68f1b82478760b1086ea1ef39889f9f064e26a30fc299ab1c2b0ddda008a94453468406ef1306ae54d2b31b99c998d3524e9fb8b63c98af9ba0b1c9f7a4b46a3e5e45cad1bde418b46dbabce37319874cf502827ce3f0db877c78e61c2541d8547b22393eeedf50085e0d13f03087301d720494c8ac9ff6d1d8338983c8ad6e4f43d35142c26434d158ee9a0de37d5c5e88e7a401821669c71615ef02c9a38d6c1671c4d46f23b963dd67fd47cd78720d54c9bbfd2eee79930dba65cdcf5d38832c9b154cd51c97e7b0be69841996bc6b631f8082983fe2f6d4157e37a39680cf24f9889cac0b0b172282d3458277fa25de40cbaeda4a36a828a3def044d28e1055ba29d8feba9bd8a25bdb906b94d67fce7e63af8ebd3e2e656da9199f5405a4f800c1232681175e6e8cbd015e4a8f9e8f7d61f08808ebc1cfb964b2191b620597b57072f57efd20a7a631a68951e815af6ff4b0d24f6f88a71de4772bfca1d703a0124fa942ad7f8e5326ca4b116cf96838965e5357e8888a85ac14ec3273391c2ec8cf2cb6ed4a7ba55cfe3d32ed72129aafae8218ca174b8f8e65ced6ee7124d7a869231031ab504594b98c7fa7ff2ccd70a5ecca11e637369127692c9c106d6ef64fad85772d560a83a67c6fc79fedf81f85125cb83367416a2ac241a16478cf16c9994190eb607cd3eab5e2e7b90c268799a68fa03096b694d584fa775a7aa2e1bb5751cd0f3d280b24e44adfbcff4c2fa4adb85609f30b30a2bf49b3e553dfbea54006c57c08dd16fcfac9b13c634a2f971f0a8e6e669928eb21e67d8cb373618b42315d402ad97cf77a8275f709cb9899a743d02c9c43afe467f218672131a77c118347de3a96576d16baf2fffdb6afd4d9445ec87d5c033f739f74a38d6f27a954f1accb4b961f65adcf94b1c8d4d50557cc428dfc45acf1a2a7613bc7ed6c6d92aacd37d1f862f17f4613e383b7448c69fea7ae243661ca0b54c42321660c6f753cd27fe34b36d1ae994a1e15022792dfa4575f50df9e4c53daaf1b734f4ad1e9573e0122015f4da81ea02a4c1cd098dff308a7015f8f9d9e335f0e2ad10ae6bd6fe37da8940e525e06f7cc2436a00099c0e4dac9a2f5da822cce0c48149904c1359006c86c8f5a496ba52704d45246d5230da9818714ca938b98d625fbd6dba22a21b0f139eebb532c1c5bcd8f224bc578e975f3f9d9c1ca0892cbb123a48744431c727877e41b793e61e6e594d136295fb1bd3bd3afe6c11c5feaf0ced9d655e0a2bd552a6d6179f32df420ef6fbfb240c37c84b05828711fc52c674957da8454ecfa342dec26438abd10abbcae4ead02337445b67f8eee111d2783a606edcf076e36015af0acdb684e3c5bc7b45fb75dc55cf58f50231411d2663cedd14449ccfed304adcdcb8f315cc1a622edccfab37e7990a0671e24869fc501f485f3b9119e58fc96090c1d46327bdb9b76e7b0df462ab439bb778efa17653b1a765d8610ee3ae54d59623a59ccbbf45799bb51796907582287519bead01df61badeb98661e6e266561caad8b44950cad958d5b425ac877861f73a5ca76870ebf4a799d928"}, {0x30, 0x3a, 0x1, "7e0d8423faa4d1f8db91a93553d13c5b6a43a214cfecbca8a52c0aaa07248c3352"}, {0x68, 0x119, 0x8, "f57f77fe167827aa1f10f80ee45f1a7c2aae716def80fd2ff2e5471894de41254186bf1de525338bfd1e4d06e1aad239649e1111aee237ad0322ddfdb92148a644c401bcb9b83711951642900e304f50df2a8d3ab4b11f3391"}], 0x12bc}, 0x8040)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8, 0x4)
mkdir(&(0x7f0000002c40)='./file0\x00', 0x40)
r4 = openat$autofs(0xffffff9c, &(0x7f0000002c80), 0x191800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000002cc0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {<r6=>r0}}, './file0\x00'})
r7 = openat(r5, &(0x7f0000002d00)='./file0\x00', 0x400, 0x8)
write$UHID_CREATE2(r7, &(0x7f0000002d40)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x98, 0x9, 0x7f, 0x18bbeff5, 0x6, 0x2, "7dfb1057c0d03540f0a64289a08eb1f544aa85d419f1d643649487ecf0bfc081302a54043453968bb64434d6089ce301ada8584e82fb361db4db2c8029c9727323ad6e9f121ff9b828a42e7632399520f83a20c31ca83e4a2a9dc11e9b809d0c0d4eb2505ff8604677a343cbb0b43235a24d0adb13b3d661db7d54ae492fc778e0d868f1904d7f30b100128e15d612d72ab3c3106f1928ff"}}, 0x1b0)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000002f00)={0x0, 0x0, 0x0, r1, 0x3}, 0xc)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000002f40)={{0x1, 0x7, 0x7, 0xe}, 'syz0\x00', 0x5})
ioctl$KDSKBLED(r6, 0x4b65, 0x4)
bind$inet(r5, &(0x7f0000002fc0)={0x2, 0x4e21, @multicast2}, 0x10)
recvmmsg$unix(r5, &(0x7f00000042c0)=[{{&(0x7f0000003000)=@abs, 0x6e, &(0x7f0000004200)=[{&(0x7f0000003080)=""/156, 0x9c}, {&(0x7f0000003140)=""/173, 0xad}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x3, &(0x7f0000004240)=[@cred={{0x18, 0x1, 0x2, {<r8=>0x0, <r9=>0x0, <r10=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {<r15=>0x0, <r16=>0x0, <r17=>0x0}}}], 0x4c}}], 0x1, 0x40, &(0x7f0000004300)={0x0, 0x989680})
r18 = openat$vmci(0xffffff9c, &(0x7f0000004340), 0x2, 0x0)
readv(r18, &(0x7f0000007880)=[{&(0x7f0000004380)=""/237, 0xed}, {&(0x7f0000004480)=""/244, 0xf4}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/76, 0x4c}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/213, 0xd5}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/197, 0xc5}, {&(0x7f0000007800)=""/83, 0x53}], 0x9)
getsockopt$inet_sctp_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000007900), &(0x7f0000007940)=0x8)
r19 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000009040), 0x2, 0x0)
lstat(&(0x7f0000009080)='./file1\x00', &(0x7f00000090c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
r21 = openat$mice(0xffffff9c, &(0x7f0000009140), 0x10000)
r22 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
getresgid(&(0x7f0000009980), &(0x7f00000099c0), &(0x7f0000009a00)=<r23=>0x0)
r24 = syz_clone(0x10000000, &(0x7f0000009a40)="e583a7f2cce5bb9331161107d2c1d6c90e27fed002069b56c7fbf51778d487f4d65b1b9f377d4acd143064da9fad47de6160d8fb2d45ce05bb74114a367b1968861382e66d28f57f46404c4d701dd4d3eb261e71476b6366cdac1d736a55e051b3cc08f3ea7a2f76f0e5e4b43cd54a5ea6a0637d2b85554a7b36f544d40878e14243e64a4196ff23e972de4e8976832bff89d33dc95548cc32bf8f02668368811e049dc92ee095305dc39f45ff905fba967c98cdba33442964458bd39bca87e62ed29b172810b2ed1e5a1e742abb76a1ea5f110c2e7594683a", 0xd9, &(0x7f0000009b40), &(0x7f0000009b80), &(0x7f0000009bc0)="e994acddb7228653ac14776cf21334c5fad281600fd3470bafd2335eab88338684893228e0add7a5a909a48f6a9e25842b0a44b2982d68c8d05a8b276c0a58ad59318364fdba06f2ab6271e400e756d6ef4b0f467d399213725fd58ec4bda5d7db5e55b49b954748bbd51b8caa43cf776d32e76077baf7d144d3b1369fcf6b78845f51cec4c45d18d41fa97b3d0777e5912645ff7f2ec7f07b7e96e44c8844296da7a5c1befc3511f1e7513903bffcc6c303f4d2d2825044ac651e9a90672ab176ad318313a19b7d518c5f3f7b8368e867996d33298effa6e6203c11a3862690b5fdd1171d784f0e21d4")
getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000009cc0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000009dc0)=0xe4)
sendmmsg$unix(r5, &(0x7f000000a540)=[{{&(0x7f0000007980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008fc0)=[{&(0x7f0000007a00)="f0cfe537c1", 0x5}, {&(0x7f0000007a40)="2530956de3a87dc6118ac5e114463767db73c28e5a7f4577b886ab9589cbf891662fab359bdc400d86f8e6a570d71c7836", 0x31}, {&(0x7f0000007a80)="69c58a1f95bbe7a2dd36973fc11c18b1ecd4639ed10338d7d81a0acde5f4f996805eb02e1cf945a3d05d923d8717ccf7f58820e206fde7a247299fe336577d7c618b052fd6fd771e99ed36ed69d7befb0b822cedb63fb6310e8c5d32492928684a5b357b768ea546cb0a796961a712792bed0438cc9dcb8f0bc9f4dde3fe4bad74dc7c88ab18e967bae7466a67284c661a66", 0x92}, {&(0x7f0000007b40)="cceea0276bca92109189fcb7c66ab8dbf6a3c1d3e47d3ed6a702186ec745a424f24cc358d65c80eb86ffb4652cad9261ffc9959e1fec445a2e977f652c6eb8aa1e46187157c1cb6b45f3b11622f3a763d2a86162b15344b58ec42286bac6bc1bfb525b4abc009ade700bbfe8723e1c8adaa72fd43850fc519fcf4edfe9f63c20a749fd78f00dc1f2842d87ca15d4dcb6d0dfd10a1c1980d75205d29733157a1ff94bff064b8231db8b645959d781de14f94e8c2db69aceef3da74b005119eecb87b2a5af5c309efefa8a75f965cd8dedc8b0c13db5665602eac485d36b619983fcdf5416c05d9d9ffaeae4f800637e59f8b9", 0xf2}, {&(0x7f0000007c40)="284769b8273cded51c260015be3e6d7e587478d8bccb9c045aea38786f33206fa322be9d7db43253746265c048690a6859241b88746944fdbb78c4d91217738e9386affdbe4122412e65a05eaa57438b8c0539ff78c83bba79f81dabb600eebfbcce804d0be3d86a68635e33e6cc5c705da54299a8f5db74998431d6b744b51dff2f4b11da014fc6f81166f6af54a8f5e50ff4bde602046fefe60c05df0a9e4c2132f288f1103048dce5667bb2f3174283f5f399e15f52dcabcd00ca8ed5cafedde86187c000359ae407d7fa9fbf6349", 0xd0}, {&(0x7f0000007d40)="add011118b71afa9b32a90db469bf2bb17ab774a5c049e90259f88dc47834c4afb8145e383997d92c99fb0b2a8fee4b56cf1df6c19e2697b409a00486eb35f9ee63588c8e305f3237734572ba36cc14c37d4c74ec8f1102aeea97ebf7ea1ec4be605c71067cfebf10b07147383d1bbcc2d029f564935871690681ee0676b7785fbab331d9fc9d97d89c6643e89f6f32e8565932e38006bc40c4bde6bb951cc60094ac2a94322435902f4b9b0", 0xac}, {&(0x7f0000007e00)="4d45b217bd2018be777e990f1b129eeab54bc53f2efc585a102f8b4e73953a3f3e8c3c4c2f72279905521e506160178c78e539073224ef3fb70fdc14a56a863983b8bc671a1899c7c95226d891cb99bc596d46a97274b66ee27f2a73f8b34581707bfbaffa07c89156f3b0a380e9088e76e89f768d1e39ba6f70f7aaa5f5c85a9f50ce1879f8fdb976dec8a5fb34d9d96f19c54ab7eef8f763caccc7b7e33ca29d463235dae2d2d17bd61de3b45b426bbcd7accd2c1b56ded9daafe73326d4a3d7106cd833710153e8d05f1dd5d12171b5b712fba0bac78f7fd0af37ee09aed430ac3789093ac5c9ef3cc733e397fe6fccea510197882338e4333f6c4d0fdb106addbd7c161da68804a26bff220affcabcc1aef7147899dd9789950d9dae984ee8748ce8805c61f8b8bb86cfd9ff9b743fb6557806a86a4444bb520c0f1e2e98da84c912719a874e739ddb39850210c9d32cad97dbb49cca9d8197dbf690fae5cd346e956f6b851c6492d3d369ddc33a3e567e001fe9eed49736fe4eefa11cfa1668f8cfbe69049f3622630eec29eabcf480b020f524c6fe8405b493a4d91d3b603019fbe49bf6cff2028a3011e7b4e84f6d5743c14b917c84a667f92a504efd82684ff72a31bae70478638c2fb6721e9f58554f5ccdee931c878011c5d3b5d6dea6977f14832442cf1ad1f8a6a1684dbb6535006d0e2ee9412394f2d750584ba6a0b19fca88994e268db2feeaeefc27f66fa5cde4e60997930bb7df83f4c5cbf8be6105404affaf6dffa7767509261e4993a7a9874a36df827f20c459cff3c9f9a54983b107142f50909abec561eb8fa12446725694dee15068578c1333365d0e85436bb7f47213483790b2ee947ab03093749d91c8c5954cf0e14669a41c01c77ba2ad724683f326b58760ae072d94e050702af4aea9bbaf1237087972636d74b0e7ca398eec9051aade455f3e9577a8a7d98b709b0ad94f1d7682e4566825644b1d524b89dde86f344ae7e232dfc4e522dedc1563eb2957fb220981f711116e6e71ce485a866572e52d7c469fad25efa4f14e6d0c7b880d9ce289dbe2440694ed9b0fe23fe0a9bf5f06484e1abc1523536edeba21677228d675e525be92d3376248d93fe539f168f2298db0a4667b820ab902bf08d97f801d37967f23de56cb801cb0e44d14251b49b2035b573fbfb34ba7e10cd53ff86390fde7cda071556d5ea05d90fc1ce283bc68799712fef31fbd7d58e350d1099dde452e6187e26224bc7cf5faf3c17d51d2c0ba4604185cb81cf4a955dd8bc8af78c2967edd9f0819a962e2c57bfc1c598b4cbc0b8a3b369a2247c37ed6598a11e986d4d65a2362ab173c49f6f5b86f6b22f0e05fa891a77be24b3c3b3a5e741f6d823a89fe2df62ddef29c451a03214cba090f336cb305921e8e67f30f590b6b2779d25563db0e5608a0d6ea63dc6d8b97cdf47190cb9473ec315c5b74bb6450265831999c173f7d724a981074086beb8c62a49c97dd312b8db2a5a62e795679e904ee61667b44221989cd86e44ba99a5215dd38e87199bc008189bf12365649b03b8a54b4a3e56065ea726aa6236685158ee7d6c9c768c4132c85449994afee3b9bec6e5ddef6b281c2bea2e3003e094555ba3888a52bf5cc66043f31d343fc7197198a39cd1201029fa5b1690ddc59493787f8696c412c5f1cb976a45c4d85b11860f042e84abcde8dffb7f0eaa2c1a29c7469510a53f620b5ce12bc8b04604c6959847ca958231e90be83bf2d842aa6cd3141b7930e469d09e64aeed5b23483c3838296da27b67ae9c8f5e0a0abb6496cd810ebdb83b530941071f53c2b8a0119b14adab52fdf903e7de6385c2a999a0e3a647961fc615b4f60fcfb9e5f670d95e49baea94b9f9c5cfbff2d93ec3ba7664b8e0e8c6ae91367f7da016c58457ddcf1c07cef0587570f63c8a0bcf6b550f98aa410cac639cf44a493d1184c3cfbfbb4a5689dffcb0dec6b6a7e8bfda217c84b90d4d860006b8382c67c63815b41dbd4de16df70ac127d4a515457ef8caf75f371c9f9815da8e3ac7bf161706c563004286abedaa0cdbdadb59286e009ed2baf72ee3508073a36715089f9878107d1fefb4cb32f0f7215afc2d339dcd72007af5d9cd8627417c8e59b0e87ddfded3d4c0ee1bfacb8a97fce61470b2f3d813fcf0ebdcd7449fd3d679e4f6ab2943c1e4332344e879af27a8b052a64a84e7be17859dc8131112acd7ab844ad7c981cd49839926f8edb53f8947aff1dea1a701dc8504eb33c6a2e034f0a5938fe13b479bcae691de27389e9525ab66ef7ef13714d818b1062f1b9b46bd883050c1d0d819226bc4f4739846854199b3d04d89f9f974b829ac88c7eb29299e3d404e6a70629b20c18fb79893909661125fed3711f14bd4fb09b712e9c3c5c87aaa09fc83ac9a814af5ae7471a4e529e57e785fb3d06cef0d383edcc5202474a42741ba5d9990c50e4e789c9f8d95550c803cdd6c10986a178a9fb757655e09616364d6e3a92e92aafda6414bd794fa8ebe027347435b67b22ec0cd562f672bd9591e056e12f11f6088952d7fdf55788f12b5430b187943d8744a74fc18c47902fc5f5b7d466f50334a450a1e85039e6c9d822664d1650cda0b62ce43a428350b2526ddef49f5f2a7669b653f7f92faa04ee477f8d8aa78aecd21208995b4797e1f9f908c5bc2737bbf0f330379aa435ae9ea62c48e50b88b9b1a288e46450b7fba4116e833a45f5ce3a65e879b2c02dd010ab4cf294383e76010ee181140ad3696b7baf62df90ac5538f3819164dc187e5ff19852dfda72dae82a2becae206bea94e280afe36f6bef9f90da38bd80d247e48ce4f16a6de5b1e4530d4cbe55b9d22344a9ab9f20661224bc79c0c8a93885a3e6c261ab5be3ac0c8248c1386ab119573658399da07455c2b9ca821888f99e9e7e0c05541d47fe0fc389494d7f51107332262fadd3476d97b6bcff845f816d06e6fd673203ce65a9bc1987845fc0c3c6c55fb25cf70f7a5960abb29b8a8f80f0d4adad025d2c9ec067f4bb9549995c982b65c3bfbef51187c58d939f85ac403074db811e98a968cc1bc1aaefdf51b146ba7bc482777b1794059b1d5f646ea216152f36d488f93139696938830bf92be3c52509a1fe5520ea8bf833dbca79cb597eedfde46ba10f47f1a8ec6ae8e2249b6d722b799b2ab9146c928006495d6fc2348218fb6609347c1d436dd2a155d62e8c920ea37686e02a6e8d16b3cf7ab7a59563bd68efd001835358b51d5053d8256b208c0abf0b3e93549d9613d6c2999f53745f078d73f8428f0cccc962ca6eba4458a512a5022f87d9bb629e9e4755dd49f430b54e4bf1690d2d12e01a76b8ba75208f505db2a8c9be7992d72d4aa1eafa3a9568d71afb872ec3a125591f206046b5dcbff965b5f19765ea131e3bc5b1c9dded57fd4639b8d68619db2fb57136e749417722cd4eb96e0311e3d5a82ad3ad08911450183143783fdda1b016c10ff40ace95feff63e88d6063682e0fe7736352b0b02beb2833f224547b73ac73c56243a9251b269203772943909f9780cbc7b658370254db5c9c51f6d1be45028130b8bc5ef134449a6597f52dff7166817b7e2747e1ed88ef0cefa1218639e53355f7434e154408f504e4bd9235ceb3c9bebeff677c9af468be414bb67fc0567c200357ce737d13891cc7c94d9baaaffa9e35c313f856e78395267ab758706b9986f493501b6070ade2cdf6bb189f199e7dd6cbeb3409be2a127fb1fd8846a2d84334d735dd2cdcb552b1db2a1ff7be9f6d4c0afa07f775797ae0b269652eaef8d8f88ac19f6bddf075d60b795c9dbb57334e7b454588770ad2f68870a4996eef325f648924cb7291ef2bda6830300795bda20c2bc19dbfcbdd48f6ac028ba813d926126fa63c72edc185c3da27b4dce8a0e46242ce84f3adc5211822e250dd3b468b39d0b219e8e1f7b9b15a40605b17b0678c4558236ead039d1a01262b542ba78420259d02d713e840cb6b9b5292632152dbaef0258bfa9df04fa5745a69213ce9389b9135ae61fa3f479514ef838afe38febed8a8fa30cc8a9a6aa372d83c8dadd8399ad8815610acd949310f1500fd435d82201de4c30698ea460ff1c584be0ae08af6729c13c7a89387c022e6f54da23c65a9d56f6bc11f7b3ef58db102f7125eaffd367f4f35dc7f50b1ba0cf7ec08aed90d90d4ea1e87b625ef14573077c39fd8f7ed51358465cdb6bb46846929c8c83ca32053a1549150348751914d4b99610590778f5630c75b14e7c83c71f0c77d10b5dff54974da61f38f99eac431e25b84101d3d62b1d604eeca0c248a43d7a08ae9e35c6020d55a617101704f227efd8a44bb0bfb0e660649100e9fb77e57344b11c536c9383cbb3f180f17f5a7cb77f7d582290323e081ee3cf52630d895213aef6d924ab2f01005da1670b442bb97f0f21c425fc8c2b799db09f453bbb4f5ba2722c88d46b1cd608317436bf7409273c72813e8a8c32b2014c2ba8343be715d25ebda5a54135f1248179f06f8a470b0e3bc5f8c338a6d17e8a5885037ba265605e4b91475af94d7c01c5392eb8058c93a7d3eb6b81442cec508b3d50743aed3e1b61863b5356356fc5d1ec79e01fda6697fd5a55230bc6f2c45f0fe9a559469fd05f00937e231c14395c0146a7b881c7b92d06a1f7f53be914bf01e12ad27a00c872810583a47a98739fb57eaa861c4555b754c8bfb3d8b9178972df22ea9be280386e844041308d4b92279dd91c6da8884b3f74ffc17e2f3f5f7b7d9090e467bc830ee243c03633f1a306cbc1165d353d84e8a04634b5066362e211bcf00ef1361c946fde2c3ddc52f359bd7dbda92bdfe36b0cd121d69b2167b65bdd3ee82995323b1d8f7689f7a7de4f76d7b590393d44cd49a9ba87301cca29d3ff7634858dded2b16cdf41089c0e115fe10f4c02f873acac04ef9c6e7d61c50d6490378e71e41444ea25a52bf8a8d72dfe8cda5457dc9e00c48bd2379e3526b69da66a77cd8eb97c5ce6eb1fdde48e810f805919f7c5525e6b733e27b4f8cad1c185595ad4f7deff1d6a542d3e87b68e1b1861f8e5ebdac7526f002ef0ca3251fb3e504e4a9fccadddc2fc4dc22c6e3c754343a36b75ab7b0a019fad0112a12405ba17cba7dce28d2b0f0a67bdeb9299a348e1e63b92ae1c5292ace6f63a574445c9c4eb7b0396f5f5ec5bc52d786509f195a45aa1f5cd8ad032cd4ec65e7b4f30b27eb58f3c86fed88513678c90b223034cac405c256469159e6a595a1aebc8c8eb54971251efec5aba183897280e558d6e756659b3db5edce67d01a7d139dc9f3ca1be2f715807b8eae7cdd2b41149168bccaa1fa06ea077ac26f147a0ed0305145f3901fd81df36b5b063a18e94b10d98a4a63db651e2232e55657862f80a2364e0b765991cad57b8ef4ffcfe2782d75e28f13eb06350334a46a4b86be83ab908567d5a6c272e2d87ded5f0dd341261c5a4e83ba4f4ffa994c5c0acc2060385bbd324027c1929ae1615d8f9125958ec9771d0e8be8eea8256f81f16cfccbd6c2d59ba68cc9831b0dd3b2086bba901da521f2aa2dfcc46a9cea5635ea04787f49d782483108a1dcc00b018d0edec546bae6b0700beb176b046b452b7081e42c3e7b468c35b17b8395bd25c0c50d6acef2610921c0af236210fc08b9b8939cb459c6fbb72fe13a98b1ab2c005019ea78a486871a19a7e29299f860925890fee880eb551ec4abdfe270193decf8727b4b8a55d9c7ddf373", 0x1000}, {&(0x7f0000008e00)="5dd2ddb628437322e32751077cec16436f17399b2d9097f67e92b0235118ce4176ca1c1fb8c131eecaad553055d75e8663f5d8f89e6b7936cae59e86cfbaa0fcf6d0b2793c1c8dc4d6266f52141d684b4a3a52b431593eed5caf954da849cdc4dcac1c3e42ade35f246d8c7adac44d68426a6dd4de7d5ce164f963383ea90b0fc2bfab90d94402a9059ba6f7daa19a61c679fbcdccccb4840e3aa3e8b841f6badc12b8211f20e736a12e3e34bdc85cabe723e4991b19ba5ddeffb71677a4ad632c89653a52c66a4119b95a2f0f8228cc4edf3f0833b50e9e711a14078f3d", 0xde}, {&(0x7f0000008f00)="91e7050df6a08fde7be288956be4cf702a9e7bc033b344f018740b3d39c915afde9bb5fe0901d4c6fee6dcb91e5a1e68cf53c20fff2ac9877e6507f54a53e75ded2ad665215bb3d975a7319fe0c74a1ea10b30b1217efb90c5b43f37cf9ace9bde03a929efb16cc7e9bebc7a3a16a6370fb9fe8a16a6d727b28c8d744703bfa2d069d35768a84963b6405f2223d8c1c3ab8e956cb8907272", 0x98}], 0x9, &(0x7f0000009180)=[@rights={{0x28, 0x1, 0x1, [r7, r4, r18, r0, r4, r19, r5]}}, @cred={{0x18, 0x1, 0x2, {r8, r9, r20}}}, @rights={{0x10, 0x1, 0x1, [r21]}}], 0x50, 0x20000800}}, {{0x0, 0x0, &(0x7f0000009440)=[{&(0x7f0000009200)="faf399d729fae1ab82a7ffaff9d025caf08ed2f6eed575ec0583f16b0af586ae093fc91a62d82162f07668c52581b7609f9fa6f680e7ae06154f09a7e3cef21d8ac438d828dd77320a19310cd31955709322a8e9d8bb94507ef5b3448a34a4dd327516197379", 0x66}, {&(0x7f0000009280)="41fd3989ff79b908798a8a72d6db6c9764ef5f26db14da9278f0644e8cdfcb47569da65a20c840c999dd95ccad8cc1c65cf9a4ccaa55918b90bb131dc92149cf0945ba75779c12ff135abf3831be47cbb54415e6955a82a47f505e7fff67ac7bfa9347bc72d1a6f0f0294c79470a28fe2dccbf534f66a307e43e943a2017271d3a5aa2edf7913d91c1350d32f8fe06af843b019bcb8a8bdbf6da0a24d8cbc78fcc33fd7e7e3e1e24c34f45be4ddf7ac79c625c8ef8873c41953c3622773baf3fcced3284c450b6bd8b67966942172996a58507364095beefdc642c8e12ceb3140cef", 0xe2}, {&(0x7f0000009380)="b17bb2f6a90849527bf3f23ecc75fdec8e60aecdebbe98b756494f88f6870a891a809750d0358242cdd6d4e16cc7c1086480ae53cd72e85f01b1d1b8bfa2389b83457972403b83f097107c69d499371fd408789933ab31abb136eab60d666b", 0x5f}, {&(0x7f0000009400)="0cc6a6614a2c8220d4e6b01de228042a86", 0x11}], 0x4, &(0x7f0000009480)=[@rights={{0x14, 0x1, 0x1, [r6, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r22]}}, @rights={{0x14, 0x1, 0x1, [r4, r6]}}], 0x3c, 0x11}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000009940)=[{&(0x7f0000009540)="aa956bfa08fa2de2116e8feaa58bb75ff9c1c26ec60d9da2babb310737b4491dcb7b705069f8e698a226cfb1133317eed9624aa23f252a3f34827afedbe940996fc6", 0x42}, {&(0x7f00000095c0)="cdd2032afdfd9af2edc64522b67eef81c4da940da35ccc40f3017d913724bf606b330da3a5bd4d3da792487868042055494d5997661700da60a3702bb90e0ab24a6818fb22a22aad76a8b38c", 0x4c}, {&(0x7f0000009640)="21820c66c5fb2f2b9efa989a10949b8622e019db5ef16461d11f3a1c5ce10ca411d288f03d7531f68e93", 0x2a}, {&(0x7f0000009680)="776833952ca69e02f7d652b6dae526820eaf2b0395268f8d033757a212fd3acbf098cd7a3228002554820e24ce4e226cc1e29b89c4e85d380d5e1050edf4b820546c3f5fd4192dbc3e8b130abf21aa1451855c24547475ec3a6cbcb664df07c69cc9a6ad5a47bdb9e1d86b62daa241af080c3185762bde97a8d653ed14cfe379653d417c494a030afb124731", 0x8c}, {&(0x7f0000009740)="d88eeb6ebe918c20e2a4c49afc4e7bbfcd5ff8132cb8e652cfbde328ba7378c5ce47f5af26f6d47524cd3b63d244ded2dd3657e08581d85f274a7a24f074e60321a76b04b3bb94bb93ee15e1f623739442ed3e3616df1bc3bc0f4ab721260521b5902beb5757625ca835c646ce99e04281dc90607183bbe8f2ef46eab630cc1fecd2f1db73d0af963612733f27501104fb8a87485faec6d140c3eeed65097db4a4ddfd5e73dc7d5483452868be41b17627974729b1a326f0f7caad926ede65", 0xbf}, {&(0x7f0000009800)="f9339672f644bbb857bf9e1079ef91a67784b50654b7e5e7e3daed46db3e13035be8b1e45d5270bec1ec440eaa5024373812e1b1eff171f2b5ad610fdaa1aa3974b3dba99edc1323738aac691c12544389f369ec739d8e718e6a25b4ad748090cebf20c95aa00d01c51add049143413e985ea80c8f769bf47e4f96e933b73528d89706b0c10ce1a249560e300d55c9cd16b8d286bebeb8918807cfbc69964bc0dcc0faf073296719dc8bab23a39659d9508c568a640602658203ed60e258aa85fde6a9bedc524f0af0214a5aa1f8d9fadda426dbe9aab8d93c21", 0xda}, {&(0x7f0000009900)="9e9464", 0x3}], 0x7, &(0x7f0000009e00)=[@cred={{0x18, 0x1, 0x2, {r15, r9, r23}}}, @rights={{0x1c, 0x1, 0x1, [r11, r5, r4, r14]}}, @cred={{0x18, 0x1, 0x2, {r24, r25, r17}}}, @cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}], 0x64, 0x10}}, {{&(0x7f0000009e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a240)=[{&(0x7f0000009f00)="f8622030b2e788642cf3f14de47fab4c577575251f80f959c5c0bae6a95578324a7d51638741c1050d51727b47434dc045fb61e99e2a8e4567b5e1724a46361bddebc32d1bdabaff4338fc8f5e66ad39d6da496727f8c864f97cec1ec91bef84221ed4303f37b656f578d046fd3e1d5c59e60536b1d45a9de0d1b478219481046f39c00cc5bdf0c60c27a1db52bd7abee7f696f3916150b201896bdbcc8a472fbdbddccd39a62ad46ce4b4f3da710c77fd3df6e02c0da2f71dc962c7bce5", 0xbe}, {&(0x7f0000009fc0)="657b2a8ee958e808364fe7cd6a37bf89bea73bbf2463902ed089312e33feb3f3c65359db7b16b167a7d5f03306b43ccc10089270a5e9dfc08e175c8fa4c2ecbcc986807fe5", 0x45}, {&(0x7f000000a040)="66644c209590e4e17eb6cc452a537a7760b9eb2065dfbb1f9e8124f752dfa5e1f8463f70db7e59df2223fa6d2bd12ca333d59e868cf5e6eeaec331442952fa4fbf633ba3ceaa34d5e4dd6f908dbebbe7990eecda6eac2b7268eebcc6fd878c219e53c87d1fcf8a19696790065ac3609ac5ef3e79e59f941750b84909630bf96d4b4938d8736346c9cd52942c6f392ecd840d330197bcf9ecaee6127227469c3b45b3d883724b062bf3cfceb48be02e9368ab78f7cf43dff94e82a3454ba833", 0xbf}, {&(0x7f000000a100)="d974ee69974ee1e2cdb6ee29d36c701eb7813a9e614e89658e5cfc35071655613f2f004a1b2c43d4752e646bc47117ae3d84c9c1af4c62fb7f3644d9406338c1855d11ea9d94a88e1a8f9bbbd50ba4cd4b1b5e004aee530ffa9aa4fb6065648f5c8a1ac22976abbec9f67f5541eefe91816bc579bcc55a69b731", 0x7a}, {&(0x7f000000a180)="248b98bee9d1", 0x6}, {&(0x7f000000a1c0)="62ff33fc26aed874b24c4ceed18da297f514905619f2eaafd8e7f36b85ba03a0e78e0d3dc0564c4cdc85fd1df6511a086bcdeed1c85fd0b10c413781c7a5e5907939567498a872af4fbe947e0e8e40328cfa6e6ee76f7c66ca136b", 0x5b}], 0x6, &(0x7f000000a440)=[@rights={{0x34, 0x1, 0x1, [r12, r2, 0xffffffffffffffff, r6, 0xffffffffffffffff, r0, r4, r18, r0, r7]}}, @cred={{0x18, 0x1, 0x2, {r8, 0x0, r10}}}, @rights={{0x20, 0x1, 0x1, [r11, r13, r4, r2, r4]}}, @cred={{0x18, 0x1, 0x2, {r15, r9, r10}}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r5, r0, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r8, r16, r10}}}], 0xc4, 0x4000000}}], 0x4, 0x24008085)

261.832085ms ago: executing program 4 (id=1315):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x78, 0x6, 0x0, 0x0, 0x10003, 0x3ff, 0x400200cc4, 0x2, 0x4, 0x2, 0x0, 0x0, 0xfffffffffffffff9, 0x4000, 0x6a, 0x8b], 0xeeee8000, 0x201145})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb8)
unshare(0x2a020400)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x40}}, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bind$can_raw(r5, &(0x7f0000000180), 0x10)
epoll_create(0x3)
unshare(0x22020600)
pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000c0}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="44050008", @ANYRES16=r8, @ANYBLOB="200026bd7000ffdbdf253900000008000300", @ANYRES32=r10, @ANYBLOB="98005a802800008014000500693632f20500540e308eff0708000800050007000100000005000700000000001800038005000600000000000900010006033660040000005400018005000400000000001d0001000b05481848300d1209042448361b06046048040c6001166c000000001300020019514a020249062a12180821134e1800140005000400ffff0800018000000200030001007c015a80f00000800500070000000000480002002108360a273a5043483255232a380a2a422d3132495112183f574f3141010955283014190331321b134c1d013c131e4f29131e5111501d35442c214e2b025006542d42200500060002000000140005001000090003000200d400068a0800040014000500b3a605000000060002000000010102004600020032414a111950351d0c28390901173c0b020f4836402e49262c0f151d4a0a140a552652212f49000e161642191d1e4d2556f50c08514d49014e072b0d373b4c27343700002300020046564c2e363b1949cc055018051a3c3a34184f110d4d18210d1b4153163a50003c00018014000500010001000600ff0001010000c7217f00050004000100000014000300090002000080079300014b000100080005000600020000004c000080140003000900050000000a000180ff008000410005000700000000000500040002000000140005000e000200050031fa0900f20004000700050004000100000005000600020000002c005a80280002800500060000000000140003000400fbffbd0a0800bd1b0300080007000500040002000000a4005a80240001801e000100a24801361b0c01030524606c0b0c12180c052409060b180b1b0500003c0001800e000100241b04160b1b6001020300001e000100160b02600909360009600212010248031b240304306012301b48000005000400020000004000028008000100020505011e000100056c181b016c360105360401011605366c240903126c481b483600000c0001000b120509480b0604050004000100000044025a809c0003800500070002000000140005004000ff0fc900ff640200fcff450106003d0002001621310d572d543c054c241c26315025575728355503252912531f353023460c2e1c142701321bc02f521a342917171d2507410e0e20542f3e00000014000500090009002b000700040000003d0301001400050009003e4108000100f8ff0000090004001400030009000104e600ff7f13000200070002000c010180140003000000050002000300000000000700010014000300070001010101fcffff0f0500ffff27cd3f000200003f2827141b2516384708561b03083f141828090645061b232b4a56550f4740271c431f372d31461d0042131a482553353e233f57490554502c4f00050004000200000005000600020000001d0001001b066001241b061b096c36361b180b3024040524360404126c000000490002000120342822261c1329210154201d1625082e250b25021a210331153435002b0f090d431c013227531638334b542d162f520e374e193f434257333c12291018273c4e130b19000000220001000b480f0148056c0c300b0960600030362401016c040b48180b06010b1b600000980001800500060000000000230001006c360904020106481204166c480c060001050e1216031802600c361630603000140003000500000007000600ff000000030000001400030001000500ff7f01000300c60a0700800005000400010000000500070002000000140003000500080073000800940b504c0008010405000700000000001400030002000500800004000000ffff01000200"], 0x544}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000)

251.997662ms ago: executing program 0 (id=1316):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x206)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80})
io_uring_enter(r2, 0x3516, 0x0, 0x7000000, 0x0, 0xfffffdcf)

167.534783ms ago: executing program 2 (id=1317):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x1, 0x87, 0xffffffff, 0x40})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SIOCGSKNS(r2, 0x894c, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r8, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010102}}, 0xa, 0x0, 0xdd5, 0x4, 0x38fa8b00d923ddd5}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x0, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7b}]}, 0xd96})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

81.68125ms ago: executing program 3 (id=1318):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41970d033089", 0x8}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000150001c34826e2ea5260", @ANYRES32=r1], 0x10}}], 0x1, 0xc004) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
memfd_create(&(0x7f0000000040)='%\x00', 0x3) (async)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x9, 0x6, 0xfffffffffffffffd, 0x0, 0x10003, 0x41, 0x0, 0x81, 0x4003, 0x93e9, 0x7, 0xf23f2ca, 0x2, 0x4, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x6, 0x0, 0x1, 0x80a4000, 0xdddd1000, '\x00', 0xd5ad}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x2)
poll(&(0x7f0000000100)=[{r6, 0x580}], 0x1, 0x7) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c70040000000000140003006e657464657673696d30000000000000050021000c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r8 = socket$inet(0xa, 0x801, 0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000000ac0)=[{&(0x7f0000000280)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003580)=[{&(0x7f0000000480)="95", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000008480000008000000fc0000000000000000000000000000001c000000840000000800000000000000000000000000000001"], 0x38, 0x40800}], 0x1, 0x40000) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000f80)={'#! ', './file1', [{0x20, 'seuq)R-iB\xe2p~\x826\xe0\xac\xb7curity.aprarmor\xfa1\xaaU\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x96\x04\x13J\xa3\x00X\xb2\\q\r]y\xa1\xedU\xdf\x82\xf2\xf62\x1e\xb5\x1eY\x19\x88E\xce\x88v\xb6o\x9d\x95\xc6\xf8\x90e\x93#\xf6H]\xf9\xb3\xb7\x10\xdb\xdch\xd5\x92 \xd9\xe3\xdf\x8f\xdeVQ\x99^s\xfdq-\x9dv\xba\xb1:\xd1\xf6IV\xb9(\xf4n\xce9C\b\x04\xa0\xdeL}_\xe0\xc9\xc2w4\x17\xe3\x12\xc9\xa2\x1f8\x1a\x7f\xb8\xab\xc7\xbf\xbc\x98\x85\fj@FQV\x90\xd5\xf6E\xee+&\x03\xf1\x99\xfa*cx\xd6\xd0\xc7\x85^\xff=\x10'}]}, 0xc5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) (async)
r10 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r10, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x5}}, 0x10)

0s ago: executing program 1 (id=1319):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00fe0f11006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020005000100040003a1eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

   T30] kauditd_printk_skb: 38 callbacks suppressed
[  246.602627][   T30] audit: type=1326 audit(1762598491.514:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.631060][   T30] audit: type=1326 audit(1762598491.514:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.652945][   T30] audit: type=1326 audit(1762598491.524:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.674816][   T30] audit: type=1326 audit(1762598491.524:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.696689][   T30] audit: type=1326 audit(1762598491.524:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.718566][   T30] audit: type=1326 audit(1762598491.524:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.740474][   T30] audit: type=1326 audit(1762598491.524:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.762367][   T30] audit: type=1326 audit(1762598491.524:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.784737][   T30] audit: type=1326 audit(1762598491.524:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.809900][   T30] audit: type=1326 audit(1762598491.524:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf706d539 code=0x7ffc0000
[  246.822099][ T8747] lo: entered promiscuous mode
[  246.847300][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.894286][ T8747] lo: entered allmulticast mode
[  246.915616][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.947097][ T8747] tunl0: entered promiscuous mode
[  246.976815][ T8747] tunl0: entered allmulticast mode
[  246.986668][ T8747] gre0: entered promiscuous mode
[  246.991620][ T8747] gre0: entered allmulticast mode
[  247.118458][ T8747] gretap0: entered promiscuous mode
[  247.154185][ T8747] gretap0: entered allmulticast mode
[  247.170914][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'.
[  247.229468][ T8747] bridge0: port 3(erspan0) entered disabled state
[  247.238716][ T8747] bridge0: port 3(erspan0) entered disabled state
[  247.250309][ T8747] ip_vti0: entered promiscuous mode
[  247.256101][ T8747] ip_vti0: entered allmulticast mode
[  247.262766][ T8747] ip6_vti0: entered promiscuous mode
[  247.268783][ T8747] ip6_vti0: entered allmulticast mode
[  247.285512][ T8747] sit0: entered promiscuous mode
[  247.290835][ T8747] sit0: entered allmulticast mode
[  247.330012][ T8747] ip6tnl0: entered promiscuous mode
[  247.354153][ T8747] ip6tnl0: entered allmulticast mode
[  247.364122][ T8747] ip6gre0: entered promiscuous mode
[  247.369946][ T8747] ip6gre0: entered allmulticast mode
[  247.383305][ T8747] syz_tun: entered promiscuous mode
[  247.393527][ T8747] syz_tun: entered allmulticast mode
[  247.435952][ T8747] bond0: (slave syz_tun): Releasing backup interface
[  247.449888][ T8747] ip6gretap0: entered promiscuous mode
[  247.455512][ T8747] ip6gretap0: entered allmulticast mode
[  247.464176][ T8747] bridge0: entered promiscuous mode
[  247.469530][ T8747] bridge0: entered allmulticast mode
[  247.477122][ T8747] vcan0: entered promiscuous mode
[  247.482262][ T8747] vcan0: entered allmulticast mode
[  247.488723][ T8747] bond0: entered promiscuous mode
[  247.493770][ T8747] bond_slave_0: entered promiscuous mode
[  247.499711][ T8747] bond_slave_1: entered promiscuous mode
[  247.505622][ T8747] bond0: entered allmulticast mode
[  247.510799][ T8747] bond_slave_0: entered allmulticast mode
[  247.516686][ T8747] bond_slave_1: entered allmulticast mode
[  247.525506][ T8747] team0: entered promiscuous mode
[  247.530675][ T8747] C: entered promiscuous mode
[  247.535881][ T8747] team_slave_1: entered promiscuous mode
[  247.541740][ T8747] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  247.549726][ T8747] team0: entered allmulticast mode
[  247.555836][ T8747] C: entered allmulticast mode
[  247.560634][ T8747] team_slave_1: entered allmulticast mode
[  247.566539][ T8747] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  247.576999][ T8747] dummy0: entered promiscuous mode
[  247.582488][ T8747] dummy0: entered allmulticast mode
[  247.591038][ T8747] nlmon0: entered promiscuous mode
[  247.597031][ T8747] nlmon0: entered allmulticast mode
[  247.603295][ T8747] caif0: entered promiscuous mode
[  247.608659][ T8747] caif0: entered allmulticast mode
[  247.614722][ T8747] batadv0: entered promiscuous mode
[  247.620206][ T8747] batadv0: entered allmulticast mode
[  247.626045][ T8747] vxcan0: entered promiscuous mode
[  247.631267][ T8747] vxcan0: entered allmulticast mode
[  247.636852][ T8747] vxcan1: entered promiscuous mode
[  247.641991][ T8747] vxcan1: entered allmulticast mode
[  247.647464][ T8747] veth0: entered promiscuous mode
[  247.652512][ T8747] veth0: entered allmulticast mode
[  247.658112][ T8747] veth1: entered promiscuous mode
[  247.663163][ T8747] veth1: entered allmulticast mode
[  247.669399][ T8747] wg0: entered promiscuous mode
[  247.674283][ T8747] wg0: entered allmulticast mode
[  247.679472][ T8747] wg1: entered promiscuous mode
[  247.685496][ T8747] wg1: entered allmulticast mode
[  247.690710][ T8747] wg2: entered promiscuous mode
[  247.695631][ T8747] wg2: entered allmulticast mode
[  247.701070][ T8747] veth0_to_bridge: entered promiscuous mode
[  247.707067][ T8747] veth0_to_bridge: entered allmulticast mode
[  247.713669][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.722998][ T8747] veth1_to_bridge: entered promiscuous mode
[  247.728994][ T8747] veth1_to_bridge: entered allmulticast mode
[  247.736389][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.747968][ T8747] veth0_to_bond: entered promiscuous mode
[  247.756191][ T8747] bond0: (slave bond_slave_0): Releasing backup interface
[  247.765023][ T8747] veth1_to_bond: entered promiscuous mode
[  247.770764][ T8747] veth1_to_bond: entered allmulticast mode
[  247.780714][ T8747] bond0: (slave bond_slave_1): Releasing backup interface
[  247.790133][ T8747] veth0_to_team: entered promiscuous mode
[  247.796432][ T8747] veth0_to_team: entered allmulticast mode
[  247.804464][ T8747] team0: Port device C removed
[  247.810006][ T8747] veth1_to_team: entered promiscuous mode
[  247.817340][ T8747] veth1_to_team: entered allmulticast mode
[  247.825343][ T8747] team0: Port device team_slave_1 removed
[  247.831412][ T8747] veth0_to_batadv: entered promiscuous mode
[  247.837737][ T8747] veth0_to_batadv: entered allmulticast mode
[  247.843912][ T8747] batadv_slave_0: entered promiscuous mode
[  247.849815][ T8747] batadv_slave_0: entered allmulticast mode
[  247.856333][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.864888][ T8747] veth1_to_batadv: entered promiscuous mode
[  247.871047][ T8747] veth1_to_batadv: entered allmulticast mode
[  247.877413][ T8747] batadv_slave_1: entered promiscuous mode
[  247.883247][ T8747] batadv_slave_1: entered allmulticast mode
[  247.891453][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.899522][ T8747] xfrm0: entered promiscuous mode
[  247.904626][ T8747] xfrm0: entered allmulticast mode
[  247.909983][ T8747] veth0_to_hsr: entered promiscuous mode
[  247.915751][ T8747] veth0_to_hsr: entered allmulticast mode
[  247.921948][ T8747] hsr_slave_0: entered allmulticast mode
[  247.927961][ T8747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  247.954912][ T8784] netlink: 830 bytes leftover after parsing attributes in process `syz.2.849'.
[  247.975893][   T24] visor 4-1:239.255: Sony Clie 3.5 converter detected
[  247.988614][   T24] usb 4-1: clie_3_5_startup: get config number failed: -71
[  248.014267][   T24] visor 4-1:239.255: probe with driver visor failed with error -71
[  248.046292][   T24] usb 4-1: USB disconnect, device number 34
[  248.368093][ T8800] vlan0: entered promiscuous mode
[  248.383652][ T8800] bond0: entered promiscuous mode
[  248.410386][ T8800] bond_slave_0: entered promiscuous mode
[  248.445546][ T8800] bond_slave_1: entered promiscuous mode
[  248.488011][ T8800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.510633][ T8800] geneve1: entered promiscuous mode
[  248.525434][ T8800] geneve1: entered allmulticast mode
[  248.552354][ T8800] 
: renamed from bond0 (while UP)
[  248.581933][ T8800] tipc: Resetting bearer <eth:syzkaller0>
[  248.596873][ T8799] tipc: Disabling bearer <eth:syzkaller0>
[  248.927358][ T8814] lo: Caught tx_queue_len zero misconfig
[  248.939766][ T8814] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  249.014004][ T8817] netlink: 72 bytes leftover after parsing attributes in process `syz.1.862'.
[  249.314863][ T6203] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  249.504456][ T6203] usb 4-1: Using ep0 maxpacket: 16
[  249.541926][ T6203] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  249.641175][ T6203] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  249.684822][ T6203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.692859][ T6203] usb 4-1: Product: syz
[  249.734806][ T6203] usb 4-1: Manufacturer: syz
[  249.739454][ T6203] usb 4-1: SerialNumber: syz
[  249.803467][ T6203] usb 4-1: config 0 descriptor??
[  249.943954][ T8842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.964206][ T8842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.974510][ T6205] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  250.034852][ T6203] usb 4-1: USB disconnect, device number 35
[  250.236694][ T6205] usb 2-1: unable to get BOS descriptor or descriptor too short
[  250.264468][ T6205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  250.276801][ T6205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  250.356140][ T6205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  250.374733][ T6205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  250.404579][ T6205] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  250.409138][ T8845] FAULT_INJECTION: forcing a failure.
[  250.409138][ T8845] name failslab, interval 1, probability 0, space 0, times 0
[  250.426915][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.2.872 Not tainted syzkaller #0 PREEMPT(full) 
[  250.426938][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  250.426948][ T8845] Call Trace:
[  250.426955][ T8845]  <TASK>
[  250.426962][ T8845]  dump_stack_lvl+0x189/0x250
[  250.426988][ T8845]  ? __pfx____ratelimit+0x10/0x10
[  250.427009][ T8845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.427028][ T8845]  ? __pfx__printk+0x10/0x10
[  250.427050][ T8845]  ? __lock_acquire+0xab9/0xd20
[  250.427060][ T6205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.427073][ T8845]  should_fail_ex+0x414/0x560
[  250.427101][ T8845]  should_failslab+0xa8/0x100
[  250.427117][ T8845]  kmem_cache_alloc_noprof+0x74/0x6e0
[  250.427140][ T8845]  ? skb_clone+0x212/0x3a0
[  250.427162][ T8845]  skb_clone+0x212/0x3a0
[  250.427183][ T8845]  __netlink_deliver_tap+0x404/0x850
[  250.427211][ T8845]  ? netlink_deliver_tap+0x2e/0x1b0
[  250.427227][ T8845]  netlink_deliver_tap+0x19c/0x1b0
[  250.427245][ T8845]  netlink_unicast+0x7fa/0x9e0
[  250.427275][ T8845]  ? __pfx_netlink_unicast+0x10/0x10
[  250.427300][ T8845]  ? netlink_sendmsg+0x642/0xb30
[  250.427314][ T8845]  ? skb_put+0x11b/0x210
[  250.427333][ T8845]  netlink_sendmsg+0x805/0xb30
[  250.427358][ T8845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.427377][ T8845]  ? __import_iovec+0x5d4/0x7f0
[  250.427395][ T8845]  ? aa_sock_msg_perm+0xf1/0x1d0
[  250.427420][ T8845]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  250.427436][ T8845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.427453][ T8845]  __sock_sendmsg+0x21c/0x270
[  250.427476][ T8845]  ____sys_sendmsg+0x505/0x830
[  250.427500][ T8845]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.427533][ T8845]  ___sys_sendmsg+0x21f/0x2a0
[  250.427553][ T8845]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.427605][ T8845]  ? __fget_files+0x2a/0x420
[  250.427620][ T8845]  ? __fget_files+0x3a0/0x420
[  250.427646][ T8845]  __sys_sendmsg+0x164/0x220
[  250.427665][ T8845]  ? __pfx___sys_sendmsg+0x10/0x10
[  250.427691][ T8845]  ? __pfx_ksys_write+0x10/0x10
[  250.427716][ T8845]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  250.427739][ T8845]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.427763][ T8845]  __do_fast_syscall_32+0xb6/0x2b0
[  250.427837][ T8845]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.427861][ T8845]  do_fast_syscall_32+0x34/0x80
[  250.427884][ T8845]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  250.427903][ T8845] RIP: 0023:0xf7fc1539
[  250.427918][ T8845] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  250.427932][ T8845] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  250.427950][ T8845] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380
[  250.427962][ T8845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  250.427971][ T8845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  250.427981][ T8845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  250.427991][ T8845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  250.428017][ T8845]  </TASK>
[  251.016460][ T6205] usb 2-1: Product: syz
[  251.021495][ T6205] usb 2-1: Manufacturer: syz
[  251.026172][ T6205] usb 2-1: SerialNumber: syz
[  251.033694][ T6205] usb 2-1: config 0 descriptor??
[  251.042406][ T6205] usb 2-1: NFC: Unable to get FW version
[  251.125128][ T6205] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90
[  251.261069][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.270731][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.270865][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.362115][ T6205] usb 2-1: USB disconnect, device number 29
[  251.367556][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.379161][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.389375][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.433169][ T8861] netlink: 'syz.4.876': attribute type 23 has an invalid length.
[  251.484653][ T2152] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  251.642105][ T8867] loop6: detected capacity change from 0 to 7
[  251.653156][ T5838] Dev loop6: unable to read RDB block 7
[  251.659115][ T5838]  loop6: unable to read partition table
[  251.667121][ T5838] loop6: partition table beyond EOD, truncated
[  251.679862][ T8867] Dev loop6: unable to read RDB block 7
[  251.739482][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'.
[  251.769542][ T8872] pimreg: entered allmulticast mode
[  251.779421][ T8872] pimreg: left allmulticast mode
[  251.849731][ T8867]  loop6: unable to read partition table
[  251.859998][ T8867] loop6: partition table beyond EOD, truncated
[  251.940235][ T8867] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  252.314462][ T6205] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  252.450080][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'.
[  252.477758][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'.
[  252.488422][ T6205] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.505725][ T6205] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  252.527271][ T6205] usb 2-1: config 0 interface 0 has no altsetting 0
[  252.546427][ T6205] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  252.664885][ T6205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.680124][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.751707][ T8896] netlink: 'syz.0.884': attribute type 23 has an invalid length.
[  252.765061][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.836090][ T6205] usb 2-1: config 0 descriptor??
[  253.250305][ T6205] gembird 0003:11FF:3331.0009: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0
[  253.494764][ T6205] usb 2-1: USB disconnect, device number 30
[  253.584154][ T8887] nvme_fabrics: missing parameter 'transport=%s'
[  253.696935][   T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  253.714540][ T8887] nvme_fabrics: missing parameter 'nqn=%s'
[  253.965441][   T24] usb 3-1: Using ep0 maxpacket: 8
[  253.991892][   T24] usb 3-1: config 162 has an invalid interface number: 84 but max is 2
[  254.000534][   T24] usb 3-1: config 162 has an invalid interface number: 3 but max is 2
[  254.019087][   T24] usb 3-1: config 162 has no interface number 0
[  254.055039][   T24] usb 3-1: config 162 has no interface number 1
[  254.072097][   T24] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  254.104889][   T24] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  254.121984][   T24] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  254.136006][   T24] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  254.147836][   T24] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  254.191000][   T24] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  254.205647][   T24] usb 3-1: config 162 interface 84 has no altsetting 0
[  254.212706][   T24] usb 3-1: config 162 interface 2 has no altsetting 0
[  254.220112][   T24] usb 3-1: config 162 interface 3 has no altsetting 0
[  254.229879][   T24] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  254.239619][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.247714][   T24] usb 3-1: Product: syz
[  254.252107][   T24] usb 3-1: Manufacturer: syz
[  254.256817][   T24] usb 3-1: SerialNumber: syz
[  254.476303][ T8900] syz_tun: left promiscuous mode
[  254.497413][ T8906] loop4: detected capacity change from 0 to 7
[  254.512130][ T8900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.761486][ T5839] Dev loop4: unable to read RDB block 7
[  254.768676][ T5839]  loop4: unable to read partition table
[  254.775584][ T5839] loop4: partition table beyond EOD, truncated
[  254.783368][ T8906] Dev loop4: unable to read RDB block 7
[  254.789459][ T8906]  loop4: unable to read partition table
[  254.795442][ T8906] loop4: partition table beyond EOD, truncated
[  254.829612][ T8906] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  254.935742][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  254.962728][ T8913] FAULT_INJECTION: forcing a failure.
[  254.962728][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.978117][   T24] usb 3-1: USB disconnect, device number 22
[  255.219485][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT(full) 
[  255.219512][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.219522][ T8913] Call Trace:
[  255.219529][ T8913]  <TASK>
[  255.219537][ T8913]  dump_stack_lvl+0x189/0x250
[  255.219562][ T8913]  ? __pfx____ratelimit+0x10/0x10
[  255.219585][ T8913]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.219606][ T8913]  ? __pfx__printk+0x10/0x10
[  255.219624][ T8913]  ? __might_fault+0xb0/0x130
[  255.219658][ T8913]  should_fail_ex+0x414/0x560
[  255.219688][ T8913]  _copy_from_user+0x2d/0xb0
[  255.219710][ T8913]  get_compat_msghdr+0xad/0x4a0
[  255.219734][ T8913]  ? __pfx_get_compat_msghdr+0x10/0x10
[  255.219773][ T8913]  ___sys_sendmsg+0x193/0x2a0
[  255.219795][ T8913]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.219848][ T8913]  ? __fget_files+0x2a/0x420
[  255.219864][ T8913]  ? __fget_files+0x3a0/0x420
[  255.219890][ T8913]  __sys_sendmsg+0x164/0x220
[  255.219910][ T8913]  ? __pfx___sys_sendmsg+0x10/0x10
[  255.219937][ T8913]  ? __pfx_ksys_write+0x10/0x10
[  255.219962][ T8913]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  255.219987][ T8913]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.220012][ T8913]  __do_fast_syscall_32+0xb6/0x2b0
[  255.220037][ T8913]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.220063][ T8913]  do_fast_syscall_32+0x34/0x80
[  255.220086][ T8913]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  255.220107][ T8913] RIP: 0023:0xf70cd539
[  255.220122][ T8913] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  255.220136][ T8913] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  255.220156][ T8913] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800007c0
[  255.220168][ T8913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  255.220178][ T8913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  255.220188][ T8913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  255.220199][ T8913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  255.220226][ T8913]  </TASK>
[  255.659209][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  255.666503][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  255.697951][ T8924] syz.1.895: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  255.820497][ T8924] CPU: 0 UID: 0 PID: 8924 Comm: syz.1.895 Not tainted syzkaller #0 PREEMPT(full) 
[  255.820524][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.820535][ T8924] Call Trace:
[  255.820542][ T8924]  <TASK>
[  255.820550][ T8924]  dump_stack_lvl+0x189/0x250
[  255.820581][ T8924]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.820603][ T8924]  ? __pfx__printk+0x10/0x10
[  255.820621][ T8924]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  255.820644][ T8924]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  255.820675][ T8924]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  255.820700][ T8924]  warn_alloc+0x214/0x310
[  255.820724][ T8924]  ? stack_depot_save_flags+0x40/0x860
[  255.820753][ T8924]  ? __pfx_warn_alloc+0x10/0x10
[  255.820778][ T8924]  ? kasan_save_track+0x3e/0x80
[  255.820799][ T8924]  ? __kasan_kmalloc+0x93/0xb0
[  255.820822][ T8924]  ? xsk_setsockopt+0x4dc/0x8d0
[  255.820840][ T8924]  ? do_sock_setsockopt+0x17c/0x1b0
[  255.820856][ T8924]  ? __ia32_sys_setsockopt+0x13f/0x1b0
[  255.820872][ T8924]  ? __do_fast_syscall_32+0xb6/0x2b0
[  255.820894][ T8924]  ? do_fast_syscall_32+0x34/0x80
[  255.820916][ T8924]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  255.820944][ T8924]  __vmalloc_node_range_noprof+0x125/0x12d0
[  255.820997][ T8924]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  255.821023][ T8924]  ? __kasan_kmalloc+0x93/0xb0
[  255.821053][ T8924]  vmalloc_user_noprof+0xad/0xf0
[  255.821076][ T8924]  ? xskq_create+0xbf/0x170
[  255.821098][ T8924]  xskq_create+0xbf/0x170
[  255.821121][ T8924]  xsk_init_queue+0xb0/0x110
[  255.821145][ T8924]  xsk_setsockopt+0x4dc/0x8d0
[  255.821168][ T8924]  ? __pfx_xsk_setsockopt+0x10/0x10
[  255.821188][ T8924]  ? __pfx_aa_sk_perm+0x10/0x10
[  255.821215][ T8924]  ? aa_sock_opt_perm+0xff/0x1b0
[  255.821242][ T8924]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  255.821258][ T8924]  ? __pfx_xsk_setsockopt+0x10/0x10
[  255.821279][ T8924]  do_sock_setsockopt+0x17c/0x1b0
[  255.821302][ T8924]  __ia32_sys_setsockopt+0x13f/0x1b0
[  255.821325][ T8924]  __do_fast_syscall_32+0xb6/0x2b0
[  255.821356][ T8924]  do_fast_syscall_32+0x34/0x80
[  255.821380][ T8924]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  255.821400][ T8924] RIP: 0023:0xf70dd539
[  255.821415][ T8924] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  255.821430][ T8924] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  255.821448][ T8924] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000011b
[  255.821460][ T8924] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052
[  255.821471][ T8924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  255.821480][ T8924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  255.821490][ T8924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  255.821518][ T8924]  </TASK>
[  255.821536][ T8924] Mem-Info:
[  256.144802][ T8924] active_anon:6399 inactive_anon:0 isolated_anon:0
[  256.144802][ T8924]  active_file:16530 inactive_file:39933 isolated_file:0
[  256.144802][ T8924]  unevictable:768 dirty:385 writeback:0
[  256.144802][ T8924]  slab_reclaimable:10932 slab_unreclaimable:101864
[  256.144802][ T8924]  mapped:32265 shmem:1357 pagetables:1241
[  256.144802][ T8924]  sec_pagetables:0 bounce:0
[  256.144802][ T8924]  kernel_misc_reclaimable:0
[  256.144802][ T8924]  free:1302464 free_pcp:19766 free_cma:0
[  256.324493][ T8924] Node 0 active_anon:26028kB inactive_anon:0kB active_file:66108kB inactive_file:159528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131448kB dirty:1536kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12920kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  256.360614][ T8924] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  256.368996][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  256.433612][ T8924] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  256.524468][ T8924] lowmem_reserve[]: 0 2505 2505 2505 2505
[  256.530746][ T8924] Node 0 DMA32 free:1301636kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24128kB inactive_anon:0kB active_file:66108kB inactive_file:159528kB unevictable:1536kB writepending:1536kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:65572kB local_pcp:20392kB free_cma:0kB
[  256.565958][ T8924] lowmem_reserve[]: 0 0 0 0 0
[  256.570742][ T8924] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  256.638714][ T8936] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[  256.669182][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  256.688503][ T8924] lowmem_reserve[]: 0 0 0 0 0
[  256.693263][ T8924] Node 1 Normal free:3894568kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15456kB local_pcp:7296kB free_cma:0kB
[  256.789942][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  256.806968][ T8944] netlink: 'syz.4.898': attribute type 10 has an invalid length.
[  256.817115][ T8924] lowmem_reserve[]: 0 0 0 0 0
[  256.821865][ T8924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  256.852755][ T8944] syz_tun: entered promiscuous mode
[  256.877270][ T8924] Node 0 DMA32: 665*4kB (UME) 721*8kB (UME) 417*16kB (UME) 530*32kB (UME) 192*64kB (UME) 112*128kB (UME) 64*256kB (UME) 18*512kB (UM) 13*1024kB (UM) 8*2048kB (UME) 291*4096kB (UM) = 1305916kB
[  256.914330][ T8924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  256.934682][   T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  256.942686][ T8924] Node 1 Normal: 198*4kB (UE) 50*8kB (UE) 40*16kB (UME) 116*32kB (UME) 44*64kB (UME) 7*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (UM) = 3894568kB
[  257.043790][ T8924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  257.053829][ T8924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  257.064593][ T8924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  257.074218][ T8924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  257.126003][   T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.140490][   T24] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  257.144560][ T8924] 57817 total pagecache pages
[  257.300364][ T8924] 0 pages in swap cache
[  257.308891][ T8924] Free swap  = 124996kB
[  257.323534][ T8924] Total swap = 124996kB
[  257.328777][ T8924] 2097051 pages RAM
[  257.332599][ T8924] 0 pages HighMem/MovableOnly
[  257.333712][   T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  257.337518][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  257.337558][   T24] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  257.337580][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.340194][   T24] usb 4-1: config 0 descriptor??
[  257.356260][ T8924] 424118 pages reserved
[  257.407493][ T8924] 0 pages cma reserved
[  257.432418][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.452207][   T10] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  257.479769][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.768283][ T8952] fido_id[8952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  257.954559][   T24] gembird 0003:11FF:3331.000B: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0
[  258.177267][ T2152] usb 4-1: USB disconnect, device number 36
[  258.325858][   T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  258.508075][   T24] usb 2-1: config 0 has an invalid interface number: 171 but max is 0
[  258.517069][   T24] usb 2-1: config 0 has no interface number 0
[  258.523550][   T24] usb 2-1: config 0 interface 171 has no altsetting 0
[  258.550436][   T24] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  258.560278][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.610623][ T8974] netlink: 'syz.4.907': attribute type 23 has an invalid length.
[  258.645871][   T24] usb 2-1: Product: syz
[  258.650066][   T24] usb 2-1: Manufacturer: syz
[  258.660582][   T24] usb 2-1: SerialNumber: syz
[  258.675297][   T24] usb 2-1: config 0 descriptor??
[  258.684776][   T24] usb-storage 2-1:0.171: USB Mass Storage device detected
[  258.728587][ T8979] FAULT_INJECTION: forcing a failure.
[  258.728587][ T8979] name failslab, interval 1, probability 0, space 0, times 0
[  258.742297][ T8979] CPU: 1 UID: 0 PID: 8979 Comm: syz.3.910 Not tainted syzkaller #0 PREEMPT(full) 
[  258.742320][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  258.742330][ T8979] Call Trace:
[  258.742336][ T8979]  <TASK>
[  258.742343][ T8979]  dump_stack_lvl+0x189/0x250
[  258.742369][ T8979]  ? __pfx____ratelimit+0x10/0x10
[  258.742390][ T8979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.742409][ T8979]  ? __pfx__printk+0x10/0x10
[  258.742440][ T8979]  should_fail_ex+0x414/0x560
[  258.742469][ T8979]  should_failslab+0xa8/0x100
[  258.742486][ T8979]  kmem_cache_alloc_node_noprof+0x77/0x710
[  258.742509][ T8979]  ? __alloc_skb+0x112/0x2d0
[  258.742531][ T8979]  __alloc_skb+0x112/0x2d0
[  258.742550][ T8979]  xfrm_send_policy_notify+0x29d/0x1bb0
[  258.742571][ T8979]  ? __lock_acquire+0xab9/0xd20
[  258.742593][ T8979]  ? __pfx_xfrm_send_policy_notify+0x10/0x10
[  258.742614][ T8979]  ? km_policy_notify+0x28/0x200
[  258.742640][ T8979]  ? km_policy_notify+0x28/0x200
[  258.742657][ T8979]  ? __pfx_xfrm_send_policy_notify+0x10/0x10
[  258.742674][ T8979]  km_policy_notify+0x121/0x200
[  258.742691][ T8979]  ? km_policy_notify+0x28/0x200
[  258.742712][ T8979]  xfrm_add_policy+0x4c7/0x800
[  258.742737][ T8979]  ? __pfx_xfrm_add_policy+0x10/0x10
[  258.742759][ T8979]  ? __nla_parse+0x40/0x60
[  258.742778][ T8979]  xfrm_user_rcv_msg+0x7a3/0xab0
[  258.742804][ T8979]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  258.742858][ T8979]  ? __pfx___mutex_trylock_common+0x10/0x10
[  258.742882][ T8979]  ? rcu_is_watching+0x15/0xb0
[  258.742901][ T8979]  ? trace_contention_end+0x39/0x120
[  258.742921][ T8979]  ? __mutex_lock+0x335/0x1350
[  258.742950][ T8979]  netlink_rcv_skb+0x208/0x470
[  258.742975][ T8979]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  258.742995][ T8979]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  258.743031][ T8979]  ? netlink_deliver_tap+0x2e/0x1b0
[  258.743046][ T8979]  ? netlink_deliver_tap+0x2e/0x1b0
[  258.743063][ T8979]  xfrm_netlink_rcv+0x79/0x90
[  258.743079][ T8979]  netlink_unicast+0x82f/0x9e0
[  258.743106][ T8979]  ? __pfx_netlink_unicast+0x10/0x10
[  258.743136][ T8979]  ? netlink_sendmsg+0x642/0xb30
[  258.743150][ T8979]  ? skb_put+0x11b/0x210
[  258.743171][ T8979]  netlink_sendmsg+0x805/0xb30
[  258.743195][ T8979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.743215][ T8979]  ? __import_iovec+0x5d4/0x7f0
[  258.743233][ T8979]  ? aa_sock_msg_perm+0xf1/0x1d0
[  258.743258][ T8979]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  258.743273][ T8979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.743291][ T8979]  __sock_sendmsg+0x21c/0x270
[  258.743314][ T8979]  ____sys_sendmsg+0x505/0x830
[  258.743336][ T8979]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.743369][ T8979]  ___sys_sendmsg+0x21f/0x2a0
[  258.743390][ T8979]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.743440][ T8979]  ? __fget_files+0x2a/0x420
[  258.743455][ T8979]  ? __fget_files+0x3a0/0x420
[  258.743481][ T8979]  __sys_sendmsg+0x164/0x220
[  258.743498][ T8979]  ? __pfx___sys_sendmsg+0x10/0x10
[  258.743523][ T8979]  ? __pfx_ksys_write+0x10/0x10
[  258.743548][ T8979]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  258.743572][ T8979]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.743591][ T8979]  __do_fast_syscall_32+0xb6/0x2b0
[  258.743606][ T8979]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.743620][ T8979]  do_fast_syscall_32+0x34/0x80
[  258.743633][ T8979]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  258.743645][ T8979] RIP: 0023:0xf706d539
[  258.743654][ T8979] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  258.743662][ T8979] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  258.743674][ T8979] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180
[  258.743680][ T8979] RDX: 000000002c000010 RSI: 0000000000000000 RDI: 0000000000000000
[  258.743686][ T8979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  258.743691][ T8979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  258.743696][ T8979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  258.743711][ T8979]  </TASK>
[  259.137260][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.321555][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  259.321571][   T30] audit: type=1326 audit(1762598504.204:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.394758][   T24] usb 2-1: USB disconnect, device number 31
[  259.431456][   T30] audit: type=1326 audit(1762598504.204:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.453689][   T30] audit: type=1326 audit(1762598504.204:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.481065][   T30] audit: type=1326 audit(1762598504.204:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.503191][   T30] audit: type=1326 audit(1762598504.204:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.525571][   T30] audit: type=1326 audit(1762598504.204:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.547381][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.571874][   T30] audit: type=1326 audit(1762598504.204:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.594311][   T30] audit: type=1326 audit(1762598504.204:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.607253][ T8984] syzkaller0: entered promiscuous mode
[  259.616185][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.639517][   T30] audit: type=1326 audit(1762598504.204:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.677227][   T30] audit: type=1326 audit(1762598504.334:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  259.699088][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.699273][ T8984] syzkaller0: entered allmulticast mode
[  259.915340][ T6205] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  259.925756][ T6205] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  260.230507][   T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  260.386524][   T10] usb 2-1: config 0 has no interfaces?
[  260.393475][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  260.420816][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  260.436242][   T10] usb 2-1: SerialNumber: syz
[  260.461949][   T10] usb 2-1: config 0 descriptor??
[  260.718830][   T10] usb 2-1: USB disconnect, device number 32
[  261.384293][ T9019] IPv6: NLM_F_CREATE should be specified when creating new route
[  262.265071][ T2152] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  262.424701][ T2152] usb 4-1: device descriptor read/64, error -71
[  262.429955][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'.
[  262.440203][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'.
[  262.625188][ T9045] netlink: 'syz.2.923': attribute type 23 has an invalid length.
[  262.674514][ T2152] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  262.709962][ T9046] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1'
[  262.804761][ T2152] usb 4-1: device descriptor read/64, error -71
[  262.914854][ T2152] usb usb4-port1: attempt power cycle
[  263.254797][ T2152] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  263.307378][ T2152] usb 4-1: device descriptor read/8, error -71
[  263.367117][ T9055] random: crng reseeded on system resumption
[  263.472853][ T9061] netlink: 'syz.4.933': attribute type 10 has an invalid length.
[  263.481929][ T9061] openvswitch: netlink: EtherType 0 is less than min 600
[  263.544456][ T2152] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  263.564508][   T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  263.578317][ T2152] usb 4-1: device descriptor read/8, error -71
[  263.654650][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  263.694844][ T2152] usb usb4-port1: unable to enumerate USB device
[  263.744556][   T24] usb 2-1: Using ep0 maxpacket: 8
[  263.753077][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  263.762161][   T24] usb 2-1: config 4 interface 0 has no altsetting 0
[  263.771969][   T24] usb 2-1: string descriptor 0 read error: -22
[  263.778553][   T24] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  263.787970][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.817943][   T24] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  263.840696][   T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  263.860197][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  263.995659][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.003768][   T10] usb 3-1: Product: syz
[  264.008898][   T10] usb 3-1: Manufacturer: syz
[  264.014158][   T10] usb 3-1: SerialNumber: syz
[  264.030788][   T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  264.062712][   T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  264.084133][   T24] usb 2-1: media controller created
[  264.387218][ T5897] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  264.459002][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  264.459020][   T30] audit: type=1326 audit(1762598509.394:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.1.929" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x0
[  264.500064][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  264.830973][   T10] usb 3-1: USB disconnect, device number 23
[  264.904031][   T24] zl10353_read_register: readreg error (reg=127, ret==0)
[  265.061720][   T24] usb 2-1: USB disconnect, device number 33
[  265.297315][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'.
[  265.313223][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'.
[  265.495068][ T5897] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  265.538790][ T5897] ath9k_htc: Failed to initialize the device
[  265.555561][   T10] usb 3-1: ath9k_htc: USB layer deinitialized
[  265.673008][ T9100] netlink: 'syz.0.942': attribute type 23 has an invalid length.
[  266.563726][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.949'.
[  266.688797][ T9112] syz.4.947 (9112): drop_caches: 2
[  267.364479][ T2152] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  267.554428][ T2152] usb 3-1: Using ep0 maxpacket: 32
[  267.571394][ T2152] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af
[  267.604413][ T2152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.682613][ T2152] usb 3-1: Product: syz
[  267.698974][ T2152] usb 3-1: Manufacturer: syz
[  267.711940][ T2152] usb 3-1: SerialNumber: syz
[  267.816045][ T2152] usb 3-1: config 0 descriptor??
[  267.868792][ T2152] gspca_main: sunplus-2.14.0 probing 046d:0960
[  268.073454][ T2152] gspca_sunplus: reg_w_riv err -71
[  268.081766][ T2152] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  268.206895][ T2152] usb 3-1: USB disconnect, device number 24
[  268.661951][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.690265][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.827408][ T9147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.958'.
[  268.913089][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.922009][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.163864][ T9164] IPVS: set_ctl: invalid protocol: 1463 0.0.0.0:30992
[  269.256381][ T9167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.966'.
[  269.288625][ T9168] netlink: 'syz.3.961': attribute type 23 has an invalid length.
[  270.256980][ T9193] netlink: 'syz.2.969': attribute type 10 has an invalid length.
[  270.275677][ T9193] dummy0: entered promiscuous mode
[  270.282716][ T9193] team0: Port device dummy0 added
[  271.605462][ T6203] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  271.764768][ T6203] usb 4-1: Using ep0 maxpacket: 32
[  271.779776][ T6203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.836067][ T9211] FAULT_INJECTION: forcing a failure.
[  271.836067][ T9211] name failslab, interval 1, probability 0, space 0, times 0
[  271.842642][ T6203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.882091][ T6203] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  271.893761][ T6203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.914738][ T6203] usb 4-1: config 0 descriptor??
[  271.931556][ T9211] CPU: 1 UID: 0 PID: 9211 Comm: syz.1.976 Not tainted syzkaller #0 PREEMPT(full) 
[  271.931579][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  271.931588][ T9211] Call Trace:
[  271.931595][ T9211]  <TASK>
[  271.931602][ T9211]  dump_stack_lvl+0x189/0x250
[  271.931632][ T9211]  ? __pfx____ratelimit+0x10/0x10
[  271.931651][ T9211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.931670][ T9211]  ? __pfx__printk+0x10/0x10
[  271.931691][ T9211]  ? __pfx___might_resched+0x10/0x10
[  271.931714][ T9211]  should_fail_ex+0x414/0x560
[  271.931742][ T9211]  should_failslab+0xa8/0x100
[  271.931760][ T9211]  __kmalloc_noprof+0xcb/0x7f0
[  271.931781][ T9211]  ? do_vfs_ioctl+0xbe8/0x1430
[  271.931799][ T9211]  ? video_usercopy+0x18d/0x1450
[  271.931824][ T9211]  video_usercopy+0x18d/0x1450
[  271.931854][ T9211]  ? __pfx___video_do_ioctl+0x10/0x10
[  271.931873][ T9211]  ? __pfx_video_usercopy+0x10/0x10
[  271.931908][ T9211]  ? __fget_files+0x2a/0x420
[  271.931927][ T9211]  v4l2_ioctl+0x18d/0x1e0
[  271.931950][ T9211]  v4l2_compat_ioctl32+0x1d7/0x260
[  271.931978][ T9211]  __ia32_compat_sys_ioctl+0x543/0x840
[  271.932003][ T9211]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  271.932026][ T9211]  ? __fget_files+0x3a0/0x420
[  271.932048][ T9211]  ? fput+0xa0/0xd0
[  271.932067][ T9211]  ? ksys_write+0x22a/0x250
[  271.932086][ T9211]  ? exc_page_fault+0x82/0x100
[  271.932108][ T9211]  ? __pfx_ksys_write+0x10/0x10
[  271.932133][ T9211]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  271.932157][ T9211]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.932183][ T9211]  __do_fast_syscall_32+0xb6/0x2b0
[  271.932207][ T9211]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.932233][ T9211]  do_fast_syscall_32+0x34/0x80
[  271.932256][ T9211]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  271.932276][ T9211] RIP: 0023:0xf70dd539
[  271.932291][ T9211] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  271.932305][ T9211] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  271.932334][ T9211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5604
[  271.932346][ T9211] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[  271.932356][ T9211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  271.932365][ T9211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  271.932375][ T9211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  271.932402][ T9211]  </TASK>
[  272.350982][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.391609][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.527062][ T6203] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  272.648475][ T9215] netlink: 'syz.2.975': attribute type 23 has an invalid length.
[  272.742042][ T6203] usb 4-1: USB disconnect, device number 41
[  272.821757][ T9226] fido_id[9226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  272.915863][ T9234] netlink: 'syz.1.980': attribute type 23 has an invalid length.
[  273.181733][   T30] audit: type=1326 audit(1762598517.984:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.205938][ T9241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.215075][ T9241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.317385][   T30] audit: type=1326 audit(1762598517.984:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.408301][   T30] audit: type=1326 audit(1762598517.984:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.430550][   T30] audit: type=1326 audit(1762598517.994:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.453124][   T30] audit: type=1326 audit(1762598517.994:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.554684][   T30] audit: type=1326 audit(1762598517.994:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.634791][   T30] audit: type=1326 audit(1762598517.994:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.941887][   T30] audit: type=1326 audit(1762598517.994:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.941929][   T30] audit: type=1326 audit(1762598517.994:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf706d539 code=0x7ffc0000
[  273.941970][   T30] audit: type=1326 audit(1762598518.434:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  274.078996][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.167951][ T9262] netlink: 204 bytes leftover after parsing attributes in process `syz.2.986'.
[  275.273672][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[  275.744320][ T9272] xt_CT: You must specify a L4 protocol and not use inversions on it
[  275.808497][ T6202] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  275.845612][ T6202] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  275.866989][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'.
[  275.925709][ T6205] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  275.944052][ T9278] fido_id[9278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  276.087291][ T6205] usb 2-1: Using ep0 maxpacket: 32
[  276.128073][ T6205] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  276.164979][ T9285] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[  276.191395][ T6205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.248137][ T6205] usb 2-1: config 0 descriptor??
[  276.308424][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'.
[  276.326248][ T9290] netlink: 830 bytes leftover after parsing attributes in process `syz.2.998'.
[  276.458276][ T6205] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  276.478034][ T6205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  276.565476][ T6205] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  276.610330][ T6205] usb 2-1: media controller created
[  276.676185][ T9268] FAULT_INJECTION: forcing a failure.
[  276.676185][ T9268] name failslab, interval 1, probability 0, space 0, times 0
[  276.733011][ T9268] CPU: 1 UID: 0 PID: 9268 Comm: syz.1.989 Not tainted syzkaller #0 PREEMPT(full) 
[  276.733056][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  276.733077][ T9268] Call Trace:
[  276.733090][ T9268]  <TASK>
[  276.733099][ T9268]  dump_stack_lvl+0x189/0x250
[  276.733126][ T9268]  ? __pfx____ratelimit+0x10/0x10
[  276.733148][ T9268]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.733170][ T9268]  ? __pfx__printk+0x10/0x10
[  276.733194][ T9268]  ? __pfx___might_resched+0x10/0x10
[  276.733219][ T9268]  should_fail_ex+0x414/0x560
[  276.733248][ T9268]  should_failslab+0xa8/0x100
[  276.733267][ T9268]  __kmalloc_noprof+0xcb/0x7f0
[  276.733288][ T9268]  ? kfree+0x4d/0x6d0
[  276.733305][ T9268]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  276.733335][ T9268]  tomoyo_realpath_from_path+0xe3/0x5d0
[  276.733360][ T9268]  ? tomoyo_domain+0xd9/0x130
[  276.733382][ T9268]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  276.733403][ T9268]  tomoyo_path_number_perm+0x1e8/0x5a0
[  276.733427][ T9268]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  276.733465][ T9268]  ? __lock_acquire+0xab9/0xd20
[  276.733502][ T9268]  ? __fget_files+0x2a/0x420
[  276.733522][ T9268]  ? __fget_files+0x3a0/0x420
[  276.733537][ T9268]  ? __fget_files+0x2a/0x420
[  276.733557][ T9268]  security_file_ioctl_compat+0xcb/0x2d0
[  276.733581][ T9268]  __ia32_compat_sys_ioctl+0x128/0x840
[  276.733606][ T9268]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  276.733627][ T9268]  ? __fget_files+0x3a0/0x420
[  276.733650][ T9268]  ? fput+0xa0/0xd0
[  276.733669][ T9268]  ? ksys_write+0x22a/0x250
[  276.733692][ T9268]  ? __pfx_ksys_write+0x10/0x10
[  276.733725][ T9268]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  276.733750][ T9268]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.733776][ T9268]  __do_fast_syscall_32+0xb6/0x2b0
[  276.733800][ T9268]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.733825][ T9268]  do_fast_syscall_32+0x34/0x80
[  276.733848][ T9268]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  276.733868][ T9268] RIP: 0023:0xf70dd539
[  276.733883][ T9268] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  276.733897][ T9268] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  276.733915][ T9268] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720
[  276.733927][ T9268] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  276.733938][ T9268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  276.733948][ T9268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  276.733958][ T9268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  276.733985][ T9268]  </TASK>
[  276.733993][ T9268] ERROR: Out of memory at tomoyo_realpath_from_path.
[  276.783232][ T6205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  277.332035][ T6205] az6027: usb out operation failed. (-71)
[  277.360514][ T6205] az6027: usb out operation failed. (-71)
[  277.380162][ T6205] stb0899_attach: Driver disabled by Kconfig
[  277.411851][ T6205] az6027: no front-end attached
[  277.411851][ T6205] 
[  277.444593][ T6205] az6027: usb out operation failed. (-71)
[  277.450352][ T6205] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  277.473799][ T6205] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17
[  277.522350][ T6205] dvb-usb: schedule remote query interval to 400 msecs.
[  277.533012][ T6205] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  277.633108][ T6205] usb 2-1: USB disconnect, device number 34
[  277.858414][ T6205] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  277.954972][ T6203] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  278.035867][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.049716][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.056065][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  278.103379][ T9318] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1009'.
[  278.124731][ T6203] usb 4-1: Using ep0 maxpacket: 8
[  278.133712][ T6203] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  278.144164][ T6203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.183343][ T6203] usb 4-1: Product: syz
[  278.193426][ T6203] usb 4-1: Manufacturer: syz
[  278.203548][ T6203] usb 4-1: SerialNumber: syz
[  278.226181][ T6203] usb 4-1: config 0 descriptor??
[  278.294938][ T6203] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  278.362171][ T9326] gtp0: entered promiscuous mode
[  278.367402][ T9326] gtp0: entered allmulticast mode
[  278.381967][ T9328] netlink: 'syz.0.1012': attribute type 21 has an invalid length.
[  278.428251][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1010'.
[  278.471252][ T9333] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  278.636139][ T9335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.644126][ T9335] syzkaller0: entered promiscuous mode
[  278.650315][ T9335] syzkaller0: entered allmulticast mode
[  278.665005][ T9335] tipc: Resetting bearer <eth:syzkaller0>
[  278.767252][ T9334] tipc: Resetting bearer <eth:syzkaller0>
[  278.825988][ T9334] tipc: Disabling bearer <eth:syzkaller0>
[  278.866286][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.875616][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.929918][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.986850][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.289714][ T6203] gspca_sonixj: reg_r err -32
[  279.316706][ T6203] sonixj 4-1:0.0: probe with driver sonixj failed with error -32
[  280.031276][ T6205] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  280.204460][ T6205] usb 3-1: Using ep0 maxpacket: 16
[  280.216293][ T6205] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  280.227667][ T6205] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  280.236259][ T6205] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  280.247786][ T6205] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  280.259880][ T6205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  280.279318][ T6205] usb 3-1: config 0 has no interface number 0
[  280.290563][ T6205] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  280.317125][ T6205] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  280.339004][ T6205] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  280.363005][ T6205] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  280.376761][ T6205] usb 3-1: config 0 interface 125 has no altsetting 0
[  280.398671][ T6205] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  280.408100][ T6205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.416589][ T6205] usb 3-1: Product: syz
[  280.421279][ T6205] usb 3-1: Manufacturer: syz
[  280.426366][ T6205] usb 3-1: SerialNumber: syz
[  280.442103][ T6205] usb 3-1: config 0 descriptor??
[  280.680222][    C0] usb 3-1: async_complete: urb error -71
[  280.686232][    C0] usb 3-1: async_complete: urb error -71
[  280.831652][    C0] usb 3-1: async_complete: urb error -71
[  280.837436][    C0] usb 3-1: async_complete: urb error -71
[  280.849018][ T5897] usb 4-1: USB disconnect, device number 42
[  280.900341][ T6205] get_1284_register: usb error -71
[  280.907278][ T6205] uss720 3-1:0.125: probe with driver uss720 failed with error -71
[  280.945472][ T6205] usb 3-1: USB disconnect, device number 25
[  282.612581][ T9377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.645432][ T9377] syzkaller0: entered promiscuous mode
[  282.691125][ T9377] syzkaller0: entered allmulticast mode
[  282.854612][ T9376] tipc: Resetting bearer <eth:syzkaller0>
[  282.985445][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  282.985460][   T30] audit: type=1326 audit(1762598527.914:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.027419][   T30] audit: type=1326 audit(1762598527.914:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.202282][   T30] audit: type=1326 audit(1762598527.914:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.226362][ T9376] tipc: Disabling bearer <eth:syzkaller0>
[  283.290806][   T30] audit: type=1326 audit(1762598527.914:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.333766][ T9397] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1029'.
[  283.428980][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'.
[  283.440327][   T30] audit: type=1326 audit(1762598527.914:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.444502][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'.
[  283.510182][   T30] audit: type=1326 audit(1762598527.914:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.561871][ T9402] netlink: 'syz.3.1030': attribute type 10 has an invalid length.
[  283.577503][   T30] audit: type=1326 audit(1762598527.914:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.710341][   T30] audit: type=1326 audit(1762598527.914:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.771420][   T30] audit: type=1326 audit(1762598527.914:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  283.921677][   T30] audit: type=1326 audit(1762598527.914:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  284.023096][ T9411] fuse: Bad value for 'fd'
[  284.770382][ T9397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.822849][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.841562][ T9397] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  285.196033][ T9397] bond0 (unregistering): Released all slaves
[  285.282559][ T9402] syz_tun: left allmulticast mode
[  285.294417][ T9402] syz_tun: entered allmulticast mode
[  285.313132][ T9402] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  286.271746][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'.
[  286.868033][ T9416] netlink: 'syz.1.1035': attribute type 12 has an invalid length.
[  286.879584][ T9416] netlink: 'syz.1.1035': attribute type 29 has an invalid length.
[  286.929285][ T9416] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1035'.
[  286.949732][ T9442] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1040'.
[  288.100428][ T9473] netlink: 'syz.1.1052': attribute type 1 has an invalid length.
[  288.109304][ T9480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.117162][ T9478] loop2: detected capacity change from 0 to 7
[  288.331496][ T9478] Dev loop2: unable to read RDB block 7
[  288.355523][ T9478]  loop2: AHDI p1 p2 p3
[  288.412230][ T9478] loop2: partition table partially beyond EOD, truncated
[  288.445522][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.468800][ T9478] loop2: p3 start 335544320 is beyond EOD, truncated
[  288.482709][ T9489] netlink: 'syz.2.1053': attribute type 23 has an invalid length.
[  288.501721][ T9481] bond0: (slave gretap1): making interface the new active one
[  288.541526][ T9481] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  288.595312][ T9484] syzkaller0: entered promiscuous mode
[  288.631795][ T9484] syzkaller0: entered allmulticast mode
[  288.761775][ T9479] tipc: Resetting bearer <eth:syzkaller0>
[  288.856007][ T9479] tipc: Disabling bearer <eth:syzkaller0>
[  289.702736][ T9516] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  289.776046][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  289.776063][   T30] audit: type=1326 audit(1762598534.714:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  289.964722][   T30] audit: type=1326 audit(1762598534.714:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.070904][   T30] audit: type=1326 audit(1762598534.714:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.109503][ T9528] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  290.229104][   T30] audit: type=1326 audit(1762598534.714:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.305218][   T30] audit: type=1326 audit(1762598534.714:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.352394][   T30] audit: type=1326 audit(1762598534.714:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.375240][   T30] audit: type=1326 audit(1762598534.714:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.424718][   T30] audit: type=1326 audit(1762598534.714:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.482382][   T30] audit: type=1326 audit(1762598534.714:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.648963][   T30] audit: type=1326 audit(1762598534.714:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  290.671011][ T5897] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  291.044608][ T5897] usb 2-1: Using ep0 maxpacket: 8
[  291.051410][ T5897] usb 2-1: config 162 has an invalid interface number: 84 but max is 2
[  291.060857][ T5897] usb 2-1: config 162 has an invalid interface number: 3 but max is 2
[  291.069335][ T5897] usb 2-1: config 162 has no interface number 0
[  291.075835][ T5897] usb 2-1: config 162 has no interface number 1
[  291.090104][ T5897] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  291.116056][ T5897] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  291.139282][ T5897] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  291.162067][ T5897] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  291.364539][ T5897] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  291.378716][ T5897] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  291.407228][ T5897] usb 2-1: config 162 interface 84 has no altsetting 0
[  291.414199][ T5897] usb 2-1: config 162 interface 2 has no altsetting 0
[  291.421268][ T5897] usb 2-1: config 162 interface 3 has no altsetting 0
[  291.431434][ T5897] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  291.441344][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.449704][ T5897] usb 2-1: Product: syz
[  291.453945][ T5897] usb 2-1: Manufacturer: syz
[  291.459009][ T5897] usb 2-1: SerialNumber: syz
[  291.694173][ T9539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.734605][ T9551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1072'.
[  291.787782][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  291.831567][ T5897] usb 2-1: USB disconnect, device number 35
[  292.047555][ T9559] syzkaller0: entered promiscuous mode
[  292.053165][ T9559] syzkaller0: entered allmulticast mode
[  292.094488][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  292.245574][   T10] usb 3-1: Using ep0 maxpacket: 16
[  292.257358][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 216, using maximum allowed: 30
[  292.269478][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[  292.286823][   T10] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6
[  292.296452][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.304980][   T10] usb 3-1: Product: syz
[  292.309339][   T10] usb 3-1: Manufacturer: syz
[  292.314035][   T10] usb 3-1: SerialNumber: syz
[  292.324004][   T10] usb 3-1: config 0 descriptor??
[  292.467311][ T9567] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[  292.613805][   T10] usb 3-1: USB disconnect, device number 26
[  292.875844][ T6203] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  292.901817][ T6203] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  293.010539][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'.
[  293.025062][ T9578] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1081'.
[  293.034722][ T9578] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1081'.
[  293.045342][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'.
[  293.055568][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'.
[  293.070899][ T9578] futex_wake_op: syz.1.1081 tries to shift op by -1; fix this program
[  293.084744][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'.
[  293.664555][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'.
[  293.702558][ T9585] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1084'.
[  293.740234][ T9588] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  293.751544][ T9588] bond0 (unregistering): Released all slaves
[  294.205457][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.215697][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.239865][ T9602] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1089'.
[  294.294970][ T6203] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  294.464566][ T6203] usb 4-1: Using ep0 maxpacket: 8
[  294.472294][ T6203] usb 4-1: config 162 has an invalid interface number: 84 but max is 2
[  294.486140][ T6203] usb 4-1: config 162 has an invalid interface number: 3 but max is 2
[  294.494576][ T6203] usb 4-1: config 162 has no interface number 0
[  294.514674][ T6203] usb 4-1: config 162 has no interface number 1
[  294.524611][ T6203] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  294.544789][ T6203] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  294.556110][ T6203] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  294.572775][ T6203] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  294.590872][ T9606] bridge2: entered promiscuous mode
[  294.601567][ T6203] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  294.618891][ T6203] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  294.644212][ T6203] usb 4-1: config 162 interface 84 has no altsetting 0
[  294.653590][ T6203] usb 4-1: config 162 interface 2 has no altsetting 0
[  294.660577][ T6203] usb 4-1: config 162 interface 3 has no altsetting 0
[  294.675283][ T6203] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  294.684350][ T6203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.704322][ T6203] usb 4-1: Product: syz
[  294.709182][ T6203] usb 4-1: Manufacturer: syz
[  294.713751][ T6203] usb 4-1: SerialNumber: syz
[  294.889905][ T9612] ip6gretap0: entered promiscuous mode
[  294.896832][ T9612] syz_tun: entered promiscuous mode
[  294.902232][ T9612] syz_tun: left promiscuous mode
[  294.908155][ T9612] ip6gretap0: left promiscuous mode
[  294.962853][ T9598] lo: left promiscuous mode
[  294.967854][ T9598] lo: left allmulticast mode
[  294.979098][ T9598] tunl0: left promiscuous mode
[  294.983946][ T9598] tunl0: left allmulticast mode
[  294.991164][ T9598] gre0: left promiscuous mode
[  294.996937][ T9598] gre0: left allmulticast mode
[  295.014332][ T9598] gretap0: left promiscuous mode
[  295.046712][ T9598] gretap0: left allmulticast mode
[  295.062097][ T9598] erspan0: left promiscuous mode
[  295.071656][ T9598] erspan0: left allmulticast mode
[  295.080759][ T9598] ip_vti0: left promiscuous mode
[  295.088745][ T9598] ip_vti0: left allmulticast mode
[  295.103532][ T9598] ip6_vti0: left promiscuous mode
[  295.111429][ T9598] ip6_vti0: left allmulticast mode
[  295.120498][ T9598] sit0: left promiscuous mode
[  295.125508][ T9598] sit0: left allmulticast mode
[  295.140302][ T9598] ip6tnl0: left promiscuous mode
[  295.146132][ T9598] ip6tnl0: left allmulticast mode
[  295.154178][ T9598] ip6gre0: left promiscuous mode
[  295.160084][ T9598] ip6gre0: left allmulticast mode
[  295.168630][ T9598] ip6gretap0: left promiscuous mode
[  295.174145][ T9598] ip6gretap0: left allmulticast mode
[  295.185819][ T9598] bridge0: left promiscuous mode
[  295.190916][ T9598] bridge0: left allmulticast mode
[  295.199407][ T9598] vcan0: left promiscuous mode
[  295.204321][ T9598] vcan0: left allmulticast mode
[  295.211870][ T9598] bond0: left promiscuous mode
[  295.217014][ T9598] syz_tun: left promiscuous mode
[  295.222492][ T9598] bond0: left allmulticast mode
[  295.228209][ T9598] syz_tun: left allmulticast mode
[  295.236696][ T9598] team0: left promiscuous mode
[  295.241597][ T9598] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  295.249419][ T9598] team0: left allmulticast mode
[  295.254548][ T9598] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  295.262778][ T9598] 8021q: adding VLAN 0 to HW filter on device team0
[  295.270792][ T9598] dummy0: left promiscuous mode
[  295.276159][ T9598] dummy0: left allmulticast mode
[  295.282900][ T9598] nlmon0: left promiscuous mode
[  295.288372][ T9598] nlmon0: left allmulticast mode
[  295.295028][ T9598] caif0: left promiscuous mode
[  295.300262][ T9598] caif0: left allmulticast mode
[  295.305421][ T9598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  295.324049][ T9616] bridge0: port 3(bond0) entered blocking state
[  295.332984][ T9616] bridge0: port 3(bond0) entered disabled state
[  295.341650][ T9616] bond0: entered allmulticast mode
[  295.347135][ T9616] bond_slave_0: entered allmulticast mode
[  295.353006][ T9616] bond_slave_1: entered allmulticast mode
[  295.363234][ T9616] syz_tun: entered allmulticast mode
[  295.369188][ T9616] team0: entered allmulticast mode
[  295.378953][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  295.388505][ T9616] team_slave_0: entered allmulticast mode
[  295.395028][ T9616] team_slave_1: entered allmulticast mode
[  295.402511][ T6203] usb 4-1: USB disconnect, device number 43
[  295.406074][ T9616] dummy0: entered allmulticast mode
[  295.442270][ T9616] bond0: entered promiscuous mode
[  295.460262][ T9616] bond_slave_0: entered promiscuous mode
[  295.468542][ T9616] bond_slave_1: entered promiscuous mode
[  295.474880][ T9616] syz_tun: entered promiscuous mode
[  295.486675][ T9616] team0: entered promiscuous mode
[  295.494323][ T9616] bridge0: port 3(bond0) entered blocking state
[  295.500693][ T9616] bridge0: port 3(bond0) entered forwarding state
[  296.220018][ T9631] netlink: 'syz.4.1098': attribute type 10 has an invalid length.
[  296.632264][ T9642] FAULT_INJECTION: forcing a failure.
[  296.632264][ T9642] name failslab, interval 1, probability 0, space 0, times 0
[  296.645392][ T9642] CPU: 1 UID: 0 PID: 9642 Comm: syz.4.1101 Not tainted syzkaller #0 PREEMPT(full) 
[  296.645408][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  296.645415][ T9642] Call Trace:
[  296.645420][ T9642]  <TASK>
[  296.645424][ T9642]  dump_stack_lvl+0x189/0x250
[  296.645441][ T9642]  ? __pfx____ratelimit+0x10/0x10
[  296.645455][ T9642]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.645467][ T9642]  ? __pfx__printk+0x10/0x10
[  296.645480][ T9642]  ? __pfx___might_resched+0x10/0x10
[  296.645491][ T9642]  ? fs_reclaim_acquire+0x7d/0x100
[  296.645509][ T9642]  should_fail_ex+0x414/0x560
[  296.645526][ T9642]  should_failslab+0xa8/0x100
[  296.645538][ T9642]  __kmalloc_noprof+0xcb/0x7f0
[  296.645550][ T9642]  ? nla_strdup+0x9d/0x140
[  296.645560][ T9642]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  296.645574][ T9642]  nla_strdup+0x9d/0x140
[  296.645585][ T9642]  nf_tables_newtable+0x491/0x1890
[  296.645607][ T9642]  nfnetlink_rcv+0x11d9/0x2590
[  296.645638][ T9642]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  296.645659][ T9642]  ? ref_tracker_free+0x63a/0x7d0
[  296.645683][ T9642]  ? __netlink_deliver_tap+0x807/0x850
[  296.645693][ T9642]  ? netlink_deliver_tap+0x2e/0x1b0
[  296.645711][ T9642]  netlink_unicast+0x82f/0x9e0
[  296.645728][ T9642]  ? __pfx_netlink_unicast+0x10/0x10
[  296.645742][ T9642]  ? netlink_sendmsg+0x642/0xb30
[  296.645750][ T9642]  ? skb_put+0x11b/0x210
[  296.645761][ T9642]  netlink_sendmsg+0x805/0xb30
[  296.645775][ T9642]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.645786][ T9642]  ? __import_iovec+0x5d4/0x7f0
[  296.645796][ T9642]  ? aa_sock_msg_perm+0xf1/0x1d0
[  296.645811][ T9642]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  296.645820][ T9642]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.645829][ T9642]  __sock_sendmsg+0x21c/0x270
[  296.645844][ T9642]  ____sys_sendmsg+0x505/0x830
[  296.645858][ T9642]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.645877][ T9642]  ___sys_sendmsg+0x21f/0x2a0
[  296.645888][ T9642]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.645918][ T9642]  ? __fget_files+0x2a/0x420
[  296.645926][ T9642]  ? __fget_files+0x3a0/0x420
[  296.645941][ T9642]  __sys_sendmsg+0x164/0x220
[  296.645952][ T9642]  ? __pfx___sys_sendmsg+0x10/0x10
[  296.645967][ T9642]  ? __pfx_ksys_write+0x10/0x10
[  296.645982][ T9642]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  296.645996][ T9642]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.646010][ T9642]  __do_fast_syscall_32+0xb6/0x2b0
[  296.646024][ T9642]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.646038][ T9642]  do_fast_syscall_32+0x34/0x80
[  296.646051][ T9642]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  296.646063][ T9642] RIP: 0023:0xf706d539
[  296.646073][ T9642] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  296.646081][ T9642] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  296.646097][ T9642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  296.646106][ T9642] RDX: 0000000000008010 RSI: 0000000000000000 RDI: 0000000000000000
[  296.646114][ T9642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  296.646123][ T9642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  296.646128][ T9642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  296.646144][ T9642]  </TASK>
[  297.893139][ T9666] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  298.216173][   T24] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  298.264971][ T9676] FAULT_INJECTION: forcing a failure.
[  298.264971][ T9676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.424726][ T9676] CPU: 1 UID: 0 PID: 9676 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT(full) 
[  298.424750][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  298.424761][ T9676] Call Trace:
[  298.424769][ T9676]  <TASK>
[  298.424776][ T9676]  dump_stack_lvl+0x189/0x250
[  298.424794][ T9676]  ? __pfx____ratelimit+0x10/0x10
[  298.424808][ T9676]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.424820][ T9676]  ? __pfx__printk+0x10/0x10
[  298.424830][ T9676]  ? __might_fault+0xb0/0x130
[  298.424849][ T9676]  should_fail_ex+0x414/0x560
[  298.424866][ T9676]  _copy_from_user+0x2d/0xb0
[  298.424880][ T9676]  rds_setsockopt+0x574/0xc40
[  298.424893][ T9676]  ? __pfx_rds_setsockopt+0x10/0x10
[  298.424901][ T9676]  ? aa_sk_perm+0x81e/0x950
[  298.424915][ T9676]  ? count_memcg_event_mm+0x21/0x260
[  298.424926][ T9676]  ? __pfx_aa_sk_perm+0x10/0x10
[  298.424940][ T9676]  ? aa_sock_opt_perm+0xff/0x1b0
[  298.424955][ T9676]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  298.424965][ T9676]  ? __pfx_rds_setsockopt+0x10/0x10
[  298.424975][ T9676]  do_sock_setsockopt+0x17c/0x1b0
[  298.424995][ T9676]  __ia32_sys_setsockopt+0x13f/0x1b0
[  298.425008][ T9676]  __do_fast_syscall_32+0xb6/0x2b0
[  298.425022][ T9676]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.425037][ T9676]  do_fast_syscall_32+0x34/0x80
[  298.425049][ T9676]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.425062][ T9676] RIP: 0023:0xf70dd539
[  298.425071][ T9676] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  298.425080][ T9676] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  298.425092][ T9676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114
[  298.425098][ T9676] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000004
[  298.425104][ T9676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  298.425110][ T9676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  298.425115][ T9676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  298.425130][ T9676]  </TASK>
[  299.546560][ T9682] __nla_validate_parse: 7 callbacks suppressed
[  299.546574][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'.
[  299.571245][ T9682] syz.0.1112(9682): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  299.716060][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'.
[  299.792866][ T9691] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2
[  299.802926][ T9691] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits
[  300.148075][ T9690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  300.154980][ T9690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  300.166994][ T9690] vhci_hcd vhci_hcd.0: Device attached
[  300.801356][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  300.831343][   T24] usb 4-1: unable to read config index 0 descriptor/start: -71
[  300.839122][   T24] usb 4-1: can't read configurations, error -71
[  300.864468][   T10] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  301.775869][ T6205] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  301.992078][ T6205] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.025575][ T6205] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  302.068221][ T6205] usb 3-1: config 0 interface 0 has no altsetting 0
[  302.088634][ T6205] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  302.095369][ T9726] binder: 9724:9726 ioctl c0306201 80000640 returned -22
[  302.156912][ T6205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.161604][ T9727] program syz.4.1125 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  302.196767][ T9726] xt_hashlimit: size too large, truncated to 1048576
[  302.220456][ T9726] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1125'.
[  302.427463][ T6205] usb 3-1: config 0 descriptor??
[  302.875262][ T6205] gembird 0003:11FF:3331.0010: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.2-1/input0
[  303.319580][ T6203] usb 3-1: USB disconnect, device number 27
[  303.665969][ T9741] fido_id[9741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  304.045448][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'.
[  304.150623][ T9761] FAULT_INJECTION: forcing a failure.
[  304.150623][ T9761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.164294][ T9761] CPU: 1 UID: 0 PID: 9761 Comm: syz.3.1133 Not tainted syzkaller #0 PREEMPT(full) 
[  304.164310][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  304.164319][ T9761] Call Trace:
[  304.164324][ T9761]  <TASK>
[  304.164329][ T9761]  dump_stack_lvl+0x189/0x250
[  304.164347][ T9761]  ? __pfx____ratelimit+0x10/0x10
[  304.164370][ T9761]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.164389][ T9761]  ? __pfx__printk+0x10/0x10
[  304.164407][ T9761]  ? __might_fault+0xb0/0x130
[  304.164438][ T9761]  should_fail_ex+0x414/0x560
[  304.164466][ T9761]  _copy_from_user+0x2d/0xb0
[  304.164494][ T9761]  get_compat_msghdr+0xad/0x4a0
[  304.164517][ T9761]  ? __pfx_get_compat_msghdr+0x10/0x10
[  304.164545][ T9761]  ___sys_sendmsg+0x193/0x2a0
[  304.164566][ T9761]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.164622][ T9761]  ? __fget_files+0x2a/0x420
[  304.164638][ T9761]  ? __fget_files+0x3a0/0x420
[  304.164663][ T9761]  __sys_sendmsg+0x164/0x220
[  304.164683][ T9761]  ? __pfx___sys_sendmsg+0x10/0x10
[  304.164710][ T9761]  ? __pfx_ksys_write+0x10/0x10
[  304.164734][ T9761]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  304.164764][ T9761]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.164790][ T9761]  __do_fast_syscall_32+0xb6/0x2b0
[  304.164814][ T9761]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.164840][ T9761]  do_fast_syscall_32+0x34/0x80
[  304.164863][ T9761]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  304.164887][ T9761] RIP: 0023:0xf706d539
[  304.164902][ T9761] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  304.164917][ T9761] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  304.164936][ T9761] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001200
[  304.164948][ T9761] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000
[  304.164959][ T9761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  304.164969][ T9761] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  304.164979][ T9761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  304.165006][ T9761]  </TASK>
[  304.815799][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1136'.
[  304.861538][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1136'.
[  305.062313][ T9769] syz_tun: entered promiscuous mode
[  305.074773][ T9769] syz_tun: left promiscuous mode
[  305.477479][ T9782] FAULT_INJECTION: forcing a failure.
[  305.477479][ T9782] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.556000][ T9782] CPU: 1 UID: 0 PID: 9782 Comm: syz.4.1141 Not tainted syzkaller #0 PREEMPT(full) 
[  305.556024][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  305.556034][ T9782] Call Trace:
[  305.556042][ T9782]  <TASK>
[  305.556050][ T9782]  dump_stack_lvl+0x189/0x250
[  305.556076][ T9782]  ? __pfx____ratelimit+0x10/0x10
[  305.556099][ T9782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.556120][ T9782]  ? __pfx__printk+0x10/0x10
[  305.556139][ T9782]  ? __might_fault+0xb0/0x130
[  305.556172][ T9782]  should_fail_ex+0x414/0x560
[  305.556209][ T9782]  _copy_from_user+0x2d/0xb0
[  305.556231][ T9782]  get_compat_msghdr+0xad/0x4a0
[  305.556256][ T9782]  ? __pfx_get_compat_msghdr+0x10/0x10
[  305.556286][ T9782]  ___sys_sendmsg+0x193/0x2a0
[  305.556308][ T9782]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.556399][ T9782]  ? __fget_files+0x2a/0x420
[  305.556415][ T9782]  ? __fget_files+0x3a0/0x420
[  305.556446][ T9782]  __sys_sendmsg+0x164/0x220
[  305.556467][ T9782]  ? __pfx___sys_sendmsg+0x10/0x10
[  305.556494][ T9782]  ? __pfx_ksys_write+0x10/0x10
[  305.556519][ T9782]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  305.556543][ T9782]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.556567][ T9782]  __do_fast_syscall_32+0xb6/0x2b0
[  305.556592][ T9782]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.556617][ T9782]  do_fast_syscall_32+0x34/0x80
[  305.556641][ T9782]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  305.556661][ T9782] RIP: 0023:0xf706d539
[  305.556676][ T9782] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  305.556690][ T9782] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  305.556709][ T9782] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  305.556720][ T9782] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000
[  305.556730][ T9782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  305.556740][ T9782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  305.556750][ T9782] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  305.556777][ T9782]  </TASK>
[  305.902287][ T9789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.952459][ T9789] netem: change failed
[  305.980099][ T9789] tipc: Resetting bearer <eth:syzkaller0>
[  306.567142][ T9804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  306.630994][ T9805] fuse: Bad value for 'rootmode'
[  306.779228][ T9805] bond1: invalid ARP target 0.0.0.0 specified for addition
[  306.987787][ T9805] bond1: option arp_ip_target: invalid value (0)
[  306.999027][ T9814] fuse: Unknown parameter 'foyý‚;—Ó€dÀ3aËî¦S)¸îìå|0x0000000000000004'
[  307.025815][ T9816] fuse: Unknown parameter 'Zd'
[  307.102194][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.119396][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.557765][ T9805] bond1 (unregistering): Released all slaves
[  308.931785][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'.
[  309.010469][ T9853] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1159'.
[  309.059882][ T9858] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  309.070986][ T9858] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€
[  309.106725][   T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  309.176234][ T9856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.187888][ T9856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.253712][ T9862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  309.294590][   T24] usb 2-1: Using ep0 maxpacket: 16
[  309.306222][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.317660][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  309.327717][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  309.342925][ T9856] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1160'.
[  309.354893][ T9856] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  309.363479][   T24] usb 2-1: SerialNumber: syz
[  309.406433][   T24] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  309.416417][   T24] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  309.423072][   T24] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[  309.630935][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1157'.
[  312.163438][   T24] usb 2-1: USB disconnect, device number 36
[  313.385878][ T9929] netlink: 'syz.1.1172': attribute type 23 has an invalid length.
[  313.413098][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.413708][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.129425][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.144233][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.489195][ T9951] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1179'.
[  314.720806][ T9958] netdevsim netdevsim0: Direct firmware load for .
[  314.720806][ T9958]  failed with error -2
[  314.732191][ T9958] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  314.732191][ T9958] 
[  315.350395][ T9966] netlink: 'syz.2.1180': attribute type 23 has an invalid length.
[  315.401367][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'.
[  315.639621][ T9965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1182'.
[  315.696154][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'.
[  315.765555][ T9969] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1183'.
[  315.883995][ T9976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1182'.
[  316.178907][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.199673][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.553436][ T9996] netlink: 'syz.0.1186': attribute type 23 has an invalid length.
[  317.264988][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.271306][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  317.788765][T10015] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  317.795289][T10015] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  317.801463][T10015] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  317.807669][T10015] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  317.814057][T10015] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  317.896256][T10027] FAULT_INJECTION: forcing a failure.
[  317.896256][T10027] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.909667][T10027] CPU: 1 UID: 0 PID: 10027 Comm: syz.4.1199 Not tainted syzkaller #0 PREEMPT(full) 
[  317.909682][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  317.909688][T10027] Call Trace:
[  317.909694][T10027]  <TASK>
[  317.909699][T10027]  dump_stack_lvl+0x189/0x250
[  317.909728][T10027]  ? __pfx____ratelimit+0x10/0x10
[  317.909742][T10027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.909754][T10027]  ? __pfx__printk+0x10/0x10
[  317.909764][T10027]  ? __might_fault+0xb0/0x130
[  317.909783][T10027]  should_fail_ex+0x414/0x560
[  317.909800][T10027]  _copy_from_iter+0x1de/0x1790
[  317.909815][T10027]  ? rcu_is_watching+0x15/0xb0
[  317.909828][T10027]  ? kmalloc_reserve+0xbd/0x290
[  317.909838][T10027]  ? __pfx__copy_from_iter+0x10/0x10
[  317.909849][T10027]  ? __build_skb_around+0x262/0x3f0
[  317.909865][T10027]  ? netlink_sendmsg+0x642/0xb30
[  317.909874][T10027]  ? skb_put+0x11b/0x210
[  317.909884][T10027]  netlink_sendmsg+0x6b2/0xb30
[  317.909898][T10027]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.909909][T10027]  ? __import_iovec+0x5d4/0x7f0
[  317.909919][T10027]  ? aa_sock_msg_perm+0xf1/0x1d0
[  317.909934][T10027]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.909943][T10027]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.909953][T10027]  __sock_sendmsg+0x21c/0x270
[  317.909967][T10027]  ____sys_sendmsg+0x505/0x830
[  317.909981][T10027]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.909999][T10027]  ___sys_sendmsg+0x21f/0x2a0
[  317.910010][T10027]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.910037][T10027]  ? __fget_files+0x2a/0x420
[  317.910047][T10027]  ? __fget_files+0x3a0/0x420
[  317.910061][T10027]  __sys_sendmsg+0x164/0x220
[  317.910071][T10027]  ? __pfx___sys_sendmsg+0x10/0x10
[  317.910086][T10027]  ? __pfx_ksys_write+0x10/0x10
[  317.910101][T10027]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  317.910115][T10027]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.910129][T10027]  __do_fast_syscall_32+0xb6/0x2b0
[  317.910143][T10027]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.910157][T10027]  do_fast_syscall_32+0x34/0x80
[  317.910170][T10027]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  317.910181][T10027] RIP: 0023:0xf706d539
[  317.910191][T10027] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  317.910199][T10027] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  317.910210][T10027] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[  317.910217][T10027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.910222][T10027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.910228][T10027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  317.910234][T10027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.910248][T10027]  </TASK>
[  318.510115][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.538670][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.564633][ T6203] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  318.717093][ T6203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.729287][ T6203] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  318.739137][ T6203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.753179][ T6203] usb 3-1: config 0 descriptor??
[  318.785395][   T24] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  318.902830][T10041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1203'.
[  318.945344][   T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  318.958576][   T24] usb 2-1: config 179 has no interface number 0
[  318.976953][ T6203] cherry 0003:046A:0023.0011: bogus close delimiter
[  318.983981][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  318.996834][ T6203] cherry 0003:046A:0023.0011: item 0 1 2 10 parsing failed
[  319.005120][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  319.017363][ T6203] cherry 0003:046A:0023.0011: probe with driver cherry failed with error -22
[  319.028928][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  319.040309][   T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  319.056347][   T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  319.066191][   T24] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  319.074290][   T24] usb 2-1: Product: syz
[  319.085965][T10033] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  319.225786][ T5897] usb 3-1: USB disconnect, device number 28
[  319.536236][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  319.544553][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  319.571855][   T24] usb 2-1: USB disconnect, device number 37
[  319.655000][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout
[  319.894579][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout
[  319.900666][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout
[  319.907024][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout
[  319.913081][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  319.993855][T10056] FAULT_INJECTION: forcing a failure.
[  319.993855][T10056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  320.020191][T10056] CPU: 1 UID: 0 PID: 10056 Comm: syz.4.1208 Not tainted syzkaller #0 PREEMPT(full) 
[  320.020220][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  320.020229][T10056] Call Trace:
[  320.020236][T10056]  <TASK>
[  320.020243][T10056]  dump_stack_lvl+0x189/0x250
[  320.020278][T10056]  ? __pfx____ratelimit+0x10/0x10
[  320.020302][T10056]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.020323][T10056]  ? __pfx__printk+0x10/0x10
[  320.020341][T10056]  ? __might_fault+0xb0/0x130
[  320.020370][T10056]  should_fail_ex+0x414/0x560
[  320.020396][T10056]  _copy_from_iter+0x1de/0x1790
[  320.020416][T10056]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  320.020442][T10056]  ? policy_nodemask+0x27c/0x720
[  320.020459][T10056]  ? __pfx__copy_from_iter+0x10/0x10
[  320.020484][T10056]  ? set_page_refcounted+0xa0/0x1e0
[  320.020501][T10056]  ? page_copy_sane+0x4e/0x280
[  320.020521][T10056]  copy_page_from_iter+0xdd/0x170
[  320.020545][T10056]  tun_get_user+0x1d7b/0x3e90
[  320.020573][T10056]  ? tun_get_user+0x6f6/0x3e90
[  320.020601][T10056]  ? aa_file_perm+0x44d/0x1550
[  320.020618][T10056]  ? __pfx_tun_get_user+0x10/0x10
[  320.020637][T10056]  ? _parse_integer_limit+0x1ae/0x1f0
[  320.020663][T10056]  ? __lock_acquire+0xab9/0xd20
[  320.020686][T10056]  ? ref_tracker_alloc+0x318/0x460
[  320.020701][T10056]  ? __lock_acquire+0xab9/0xd20
[  320.020720][T10056]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  320.020742][T10056]  ? tun_get+0x1c/0x2f0
[  320.020767][T10056]  ? tun_get+0x1c/0x2f0
[  320.020785][T10056]  ? tun_get+0x1c/0x2f0
[  320.020808][T10056]  tun_chr_write_iter+0x113/0x200
[  320.020831][T10056]  vfs_write+0x5c9/0xb30
[  320.020859][T10056]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  320.020880][T10056]  ? __pfx_vfs_write+0x10/0x10
[  320.020911][T10056]  ? __fget_files+0x2a/0x420
[  320.020934][T10056]  ksys_write+0x145/0x250
[  320.020961][T10056]  ? __pfx_ksys_write+0x10/0x10
[  320.020986][T10056]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  320.021012][T10056]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.021038][T10056]  __do_fast_syscall_32+0xb6/0x2b0
[  320.021062][T10056]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.021089][T10056]  do_fast_syscall_32+0x34/0x80
[  320.021112][T10056]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  320.021133][T10056] RIP: 0023:0xf706d539
[  320.021148][T10056] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  320.021163][T10056] RSP: 002b:00000000f545d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  320.021183][T10056] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000
[  320.021195][T10056] RDX: 00000000000000be RSI: 00000000f7406ff4 RDI: 0000000000000000
[  320.021206][T10056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.021216][T10056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  320.021227][T10056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.021255][T10056]  </TASK>
[  320.313071][    C1] vkms_vblank_simulate: vblank timer overrun
[  320.425882][T10059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.433614][T10059] syzkaller0: entered promiscuous mode
[  320.440044][T10059] syzkaller0: entered allmulticast mode
[  320.451339][T10059] tipc: Resetting bearer <eth:syzkaller0>
[  320.463618][T10059] syzkaller0: tun_net_xmit 90
[  320.484673][T10057] tipc: Resetting bearer <eth:syzkaller0>
[  320.520398][T10057] tipc: Disabling bearer <eth:syzkaller0>
[  321.480702][T10079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1215'.
[  321.489849][T10079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1215'.
[  321.730766][T10079] ip6gretap0: entered promiscuous mode
[  321.739917][T10079] syz_tun: entered promiscuous mode
[  321.902796][T10079] syz_tun: left promiscuous mode
[  322.137101][T10079] ip6gretap0: left promiscuous mode
[  322.387859][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'.
[  322.506176][T10090] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[  322.735802][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  322.783741][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  323.076437][T10093] netlink: 'syz.2.1219': attribute type 10 has an invalid length.
[  323.752168][   T24] IPVS: starting estimator thread 0...
[  323.772988][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1223'.
[  323.806536][ T6203] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  323.835283][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.857982][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.868430][T10107] IPVS: using max 33 ests per chain, 79200 per kthread
[  323.986619][ T6203] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  323.996208][   T44] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  324.032272][ T6203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.052341][ T6203] usb 2-1: config 0 descriptor??
[  324.062151][ T6203] cp210x 2-1:0.0: cp210x converter detected
[  324.164543][   T44] usb 3-1: device descriptor read/64, error -71
[  324.268125][T10100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.284326][T10100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.404561][   T44] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  324.567604][ T6203] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  324.698932][   T44] usb 3-1: device descriptor read/64, error -71
[  324.707178][T10117] dummy0: entered promiscuous mode
[  324.780816][ T6203] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71
[  324.788754][ T6203] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  324.810904][ T6203] usb 2-1: cp210x converter now attached to ttyUSB0
[  324.894638][   T44] usb usb3-port1: attempt power cycle
[  324.925614][ T6203] usb 2-1: USB disconnect, device number 38
[  324.997746][ T6203] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  325.048385][ T6203] cp210x 2-1:0.0: device disconnected
[  325.244483][   T44] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  325.295248][   T44] usb 3-1: device descriptor read/8, error -71
[  325.644694][   T44] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  325.675838][   T44] usb 3-1: device descriptor read/8, error -71
[  325.758000][T10129] netlink: 'syz.3.1228': attribute type 4 has an invalid length.
[  325.766088][T10129] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1228'.
[  325.857511][ T5897] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  325.893968][   T44] usb usb3-port1: unable to enumerate USB device
[  325.960091][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  326.027961][ T5897] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  326.053710][T10132] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[  326.103795][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.780116][ T5897] usb 2-1: Product: syz
[  326.784500][ T5897] usb 2-1: Manufacturer: syz
[  326.789181][ T5897] usb 2-1: SerialNumber: syz
[  326.874156][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'.
[  326.883248][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'.
[  326.893937][T10137] netlink: 'syz.4.1232': attribute type 10 has an invalid length.
[  326.993488][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.010253][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.222758][   T44] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  327.553209][   T44] usb 3-1: config 1 interface 0 has no altsetting 0
[  327.562694][   T44] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  327.579507][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.607986][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  327.611398][   T44] usb 3-1: Product: syz
[  327.633251][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  327.643979][   T44] usb 3-1: Manufacturer: syz
[  327.651857][   T44] usb 3-1: SerialNumber: syz
[  327.658039][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  327.711297][ T5897] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  327.730826][ T5897] usb 2-1: USB disconnect, device number 39
[  327.981033][   T44] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input18
[  328.029174][   T44] usb 3-1: USB disconnect, device number 33
[  328.647571][T10124] delete_channel: no stack
[  329.104490][ T5897] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  329.360239][ T5897] usb 3-1: Using ep0 maxpacket: 32
[  329.383675][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.411949][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.437837][ T5897] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  329.590965][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.880726][ T5897] usb 3-1: config 0 descriptor??
[  330.282753][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'.
[  330.378684][T10180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  330.509442][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'.
[  331.760005][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'.
[  331.837605][T10198] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1251'.
[  331.876671][ T5897] usbhid 3-1:0.0: can't add hid device: -71
[  331.882897][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  332.007907][ T5897] usb 3-1: USB disconnect, device number 34
[  332.450970][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'.
[  333.264487][ T6205] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  333.274537][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1256'.
[  333.688530][T10249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.247467][T10259] debugfs: '!ù' already exists in 'ieee80211'
[  334.296501][T10260] loop6: detected capacity change from 0 to 7
[  334.328525][T10260] Dev loop6: unable to read RDB block 7
[  334.341458][T10260]  loop6: unable to read partition table
[  334.356858][T10260] loop6: partition table beyond EOD, truncated
[  334.369236][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1262'.
[  334.379281][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1262'.
[  334.390071][T10260] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  334.466434][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'.
[  334.726757][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  334.726775][   T30] audit: type=1326 audit(1762598579.664:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10268 comm="syz.4.1265" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0
[  334.832695][T10271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.843620][T10271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.945150][ T6205] usb 4-1: unable to get BOS descriptor or descriptor too short
[  335.963285][ T6205] usb 4-1: unable to read config index 0 descriptor/start: -71
[  335.980603][ T6205] usb 4-1: can't read configurations, error -71
[  336.915527][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'.
[  336.939091][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'.
[  336.972117][T10298] IPVS: set_ctl: invalid protocol: 169 224.0.0.1:20069
[  336.997702][T10295] netlink: 'syz.3.1274': attribute type 10 has an invalid length.
[  337.015652][T10295] syz_tun: entered promiscuous mode
[  337.168759][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1275'.
[  337.183100][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1275'.
[  337.203332][T10301] ip6gretap0: entered promiscuous mode
[  337.212698][T10301] ip6gretap0: left promiscuous mode
[  338.690036][T10319] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:0
[  338.736140][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[  338.769810][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[  338.787260][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[  338.803566][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.827515][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.951727][T10332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1285'.
[  339.612099][T10343] Invalid logical block size (21760)
[  341.028382][T10367] IPv6: NLM_F_REPLACE set, but no existing node found!
[  341.601104][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'.
[  341.618397][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'.
[  341.675123][T10377] ip6gretap0: entered promiscuous mode
[  341.730934][T10377] ip6gretap0: left promiscuous mode
[  341.805898][ T6208] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  341.974529][ T6208] usb 4-1: Using ep0 maxpacket: 32
[  341.992208][ T6208] usb 4-1: unable to get BOS descriptor or descriptor too short
[  342.001883][ T6208] usb 4-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  342.024513][ T6208] usb 4-1: config 1 interface 0 has no altsetting 0
[  342.077423][ T6208] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  342.086939][ T6208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.148282][T10382] netlink: 'syz.1.1303': attribute type 3 has an invalid length.
[  343.194897][   T24] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  343.357170][   T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  343.369024][   T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  343.381318][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  343.393017][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  343.427392][   T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  343.454510][   T24] usb 2-1: Product: syz
[  343.458960][   T24] usb 2-1: Manufacturer: syz
[  343.463756][   T24] usb 2-1: SerialNumber: syz
[  343.492779][   T24] usb 2-1: config 0 descriptor??
[  343.511283][   T24] usb 2-1: selecting invalid altsetting 0
[  343.852337][   T30] audit: type=1326 audit(1762598588.784:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  343.860696][T10403] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled
[  343.931599][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'.
[  343.932995][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.951526][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'.
[  343.970560][   T30] audit: type=1326 audit(1762598588.784:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  343.996224][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.008209][   T30] audit: type=1326 audit(1762598588.794:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.017898][T10412] ip6gretap0: entered promiscuous mode
[  344.031194][   T30] audit: type=1326 audit(1762598588.794:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.063558][   T24] usb 2-1: USB disconnect, device number 40
[  344.076591][   T30] audit: type=1326 audit(1762598588.794:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.100841][   T30] audit: type=1326 audit(1762598588.794:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.150765][T10412] ip6gretap0: left promiscuous mode
[  344.278673][   T30] audit: type=1326 audit(1762598588.794:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.305896][   T30] audit: type=1326 audit(1762598588.794:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.329901][   T30] audit: type=1326 audit(1762598588.794:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.353731][   T30] audit: type=1326 audit(1762598588.794:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000
[  344.592290][ T6208] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19
[  344.651385][ T5182] bcm5974 4-1:1.0: could not read from device
[  344.668123][ T5182] bcm5974 4-1:1.0: could not read from device
[  344.687321][ T6208] usb 4-1: USB disconnect, device number 48
[  344.707752][ T5182] bcm5974 4-1:1.0: could not read from device
[  344.732767][ T5182] bcm5974 4-1:1.0: could not read from device
[  344.824882][   T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  344.984999][   T24] usb 3-1: Using ep0 maxpacket: 32
[  344.999072][   T24] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  345.010267][   T44] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  345.018005][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.038279][   T44] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  345.049436][   T24] usb 3-1: config 0 descriptor??
[  345.065772][   T24] gspca_main: nw80x-2.14.0 probing 055f:d001
[  345.234522][ T6203] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  345.396558][ T6203] usb 2-1: config 0 has no interfaces?
[  345.403122][ T6203] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  345.439622][ T6203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  345.452302][T10448] netlink: 'syz.2.1317': attribute type 13 has an invalid length.
[  345.468109][ T6203] usb 2-1: SerialNumber: syz
[  345.474547][T10447] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.500575][ T6203] usb 2-1: config 0 descriptor??
[  345.687807][T10448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.044782][   T24] gspca_nw80x: reg_r err -110
[  346.049579][   T24] nw80x 3-1:0.0: probe with driver nw80x failed with error -110
[  346.229758][T10463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.249529][T10463] syzkaller0: entered promiscuous mode
[  346.262904][T10463] syzkaller0: entered allmulticast mode
[  346.358107][T10463] tipc: Resetting bearer <eth:syzkaller0>
[  346.376348][T10462] tipc: Resetting bearer <eth:syzkaller0>
[  346.416129][T10462] tipc: Disabling bearer <eth:syzkaller0>
[  347.599627][ T6208] usb 3-1: USB disconnect, device number 35
[  347.983617][ T6205] usb 2-1: USB disconnect, device number 41
[  378.548035][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  378.554346][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  439.977270][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  439.983635][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  498.214539][   T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[  498.222102][   T31]       Not tainted syzkaller #0
[  498.227129][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  498.235997][   T31] task:kworker/0:1     state:D stack:22920 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00080000
[  498.249750][   T31] Workqueue: usb_hub_wq hub_event
[  498.254882][   T31] Call Trace:
[  498.258162][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  498.261082][   T31]  __schedule+0x1798/0x4cc0
[  498.265897][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  498.271298][   T31]  ? __pfx___schedule+0x10/0x10
[  498.276278][   T31]  ? schedule+0x91/0x360
[  498.280545][   T31]  schedule+0x165/0x360
[  498.284777][   T31]  usb_kill_urb+0x1be/0x2d0
[  498.289302][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[  498.294347][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  498.300850][   T31]  usb_start_wait_urb+0x18c/0x4c0
[  498.305949][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  498.311514][   T31]  ? usb_alloc_urb+0x46/0x150
[  498.316235][   T31]  usb_control_msg+0x232/0x3e0
[  498.364464][   T31]  hub_port_init+0xbf9/0x2800
[  498.369233][   T31]  hub_event+0x2532/0x4a20
[  498.373725][   T31]  ? __pfx_hub_event+0x10/0x10
[  498.419720][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  498.434426][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  498.458575][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  498.464343][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  498.498864][   T31]  process_scheduled_works+0xae1/0x17b0
[  498.505443][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  498.511463][   T31]  worker_thread+0x8a0/0xda0
[  498.516785][   T31]  kthread+0x711/0x8a0
[  498.520937][   T31]  ? __pfx_worker_thread+0x10/0x10
[  498.526121][   T31]  ? __pfx_kthread+0x10/0x10
[  498.530745][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  498.535973][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.541183][   T31]  ? __pfx_kthread+0x10/0x10
[  498.546025][   T31]  ret_from_fork+0x4bc/0x870
[  498.550610][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  498.556081][   T31]  ? __switch_to_asm+0x39/0x70
[  498.560860][   T31]  ? __switch_to_asm+0x33/0x70
[  498.565703][   T31]  ? __pfx_kthread+0x10/0x10
[  498.570297][   T31]  ret_from_fork_asm+0x1a/0x30
[  498.575420][   T31]  </TASK>
[  498.625229][   T31] 
[  498.625229][   T31] Showing all locks held in the system:
[  498.632988][   T31] 5 locks held by kworker/0:1/10:
[  498.654584][   T31]  #0: ffff88801fe96948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  498.704755][   T31]  #1: ffffc900000f7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  498.764604][   T31]  #2: ffff888146323198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  498.773492][   T31]  #3: ffff888146326518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[  498.844541][   T31]  #4: ffff888145fa3768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[  498.854265][   T31] 1 lock held by khungtaskd/31:
[  498.904497][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  498.955123][   T31] 2 locks held by getty/5584:
[  498.959820][   T31]  #0: ffff8880334a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  499.035896][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  499.114715][   T31] 1 lock held by syz.4.674/8160:
[  499.119849][   T31] 1 lock held by syz.3.1076/9561:
[  499.147798][   T31] 3 locks held by kworker/0:0/10477:
[  499.153142][   T31] 
[  499.194642][   T31] =============================================
[  499.194642][   T31] 
[  499.203105][   T31] NMI backtrace for cpu 1
[  499.203123][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  499.203140][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  499.203151][   T31] Call Trace:
[  499.203158][   T31]  <TASK>
[  499.203165][   T31]  dump_stack_lvl+0x189/0x250
[  499.203192][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.203211][   T31]  ? __pfx__printk+0x10/0x10
[  499.203237][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  499.203259][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  499.203280][   T31]  ? __pfx__printk+0x10/0x10
[  499.203302][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  499.203331][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  499.203353][   T31]  watchdog+0xf60/0xfa0
[  499.203376][   T31]  ? watchdog+0x1e2/0xfa0
[  499.203398][   T31]  kthread+0x711/0x8a0
[  499.203423][   T31]  ? __pfx_watchdog+0x10/0x10
[  499.203440][   T31]  ? __pfx_kthread+0x10/0x10
[  499.203463][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  499.203485][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.203505][   T31]  ? __pfx_kthread+0x10/0x10
[  499.203528][   T31]  ret_from_fork+0x4bc/0x870
[  499.203549][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  499.203574][   T31]  ? __switch_to_asm+0x39/0x70
[  499.203587][   T31]  ? __switch_to_asm+0x33/0x70
[  499.203601][   T31]  ? __pfx_kthread+0x10/0x10
[  499.203623][   T31]  ret_from_fork_asm+0x1a/0x30
[  499.203655][   T31]  </TASK>
[  499.203662][   T31] Sending NMI from CPU 1 to CPUs 0:
[  499.349879][    C0] NMI backtrace for cpu 0
[  499.349897][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  499.349915][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  499.349925][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  499.349949][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  499.349963][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  499.349978][    C0] RAX: 7b59edbaee8a8900 RBX: ffffffff81967bf7 RCX: 7b59edbaee8a8900
[  499.349991][    C0] RDX: 0000000000000001 RSI: ffffffff8d70db89 RDI: ffffffff8bbf0760
[  499.350001][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  499.350014][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce270
[  499.350026][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  499.350036][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  499.350050][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  499.350061][    C0] CR2: 00007fa26d998945 CR3: 000000000dd38000 CR4: 00000000003526f0
[  499.350076][    C0] Call Trace:
[  499.350083][    C0]  <TASK>
[  499.350090][    C0]  default_idle+0x13/0x20
[  499.350105][    C0]  default_idle_call+0x73/0xb0
[  499.350120][    C0]  do_idle+0x1e7/0x510
[  499.350140][    C0]  ? __pfx_do_idle+0x10/0x10
[  499.350187][    C0]  cpu_startup_entry+0x44/0x60
[  499.350203][    C0]  rest_init+0x2de/0x300
[  499.350220][    C0]  start_kernel+0x3ae/0x410
[  499.350238][    C0]  x86_64_start_reservations+0x24/0x30
[  499.350257][    C0]  x86_64_start_kernel+0x143/0x1c0
[  499.350276][    C0]  common_startup_64+0x13e/0x147
[  499.350304][    C0]  </TASK>
[  499.644968][ T9695] 
: (slave syz_tun): Releasing backup interface
[  499.652646][ T9695] syz_tun (unregistering): left promiscuous mode
[  499.675489][ T6203] usb 5-1: USB disconnect, device number 17
[  499.756794][ T9561] bond0: (slave syz_tun): Releasing backup interface
[  499.768491][ T9693] vhci_hcd: connection reset by peer
[  499.842994][ T9885] vhci_hcd: stop threads
[  499.849356][ T5841] bond0: (slave syz_tun): Releasing backup interface
[  499.875654][ T9885] vhci_hcd: release socket
[  499.882434][ T9885] vhci_hcd: disconnect device
[  499.914524][ T5837] bond0: (slave syz_tun): Releasing backup interface
[  499.945490][   T10] vhci_hcd: vhci_device speed not set
[  499.964831][ T5837] syz_tun (unregistering): left allmulticast mode
[  500.016107][ T2958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.042543][ T9561] tipc: Resetting bearer <eth:syzkaller0>
[  500.063754][ T9561] tipc: Disabling bearer <eth:syzkaller0>
[  500.120978][ T2958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.216400][ T2958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.270877][ T2958] team0: Port device netdevsim0 removed
[  500.279395][ T2958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.756518][ T2958] tipc: Disabling bearer <eth:batadv0>
[  500.770309][ T2958] tipc: Left network mode
[  500.788130][ T2958] IPVS: stopping master sync thread 8390 ...
[  501.162204][ T2958] hsr_slave_0: left promiscuous mode
[  501.168679][ T2958] hsr_slave_1: left promiscuous mode
[  501.176814][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.184283][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.193544][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.201082][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.223309][ T2958] veth1_macvtap: left promiscuous mode
[  501.326516][ T2958] pim6reg (unregistering): left allmulticast mode
[  501.425104][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  501.431454][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  501.594073][ T2958] team0 (unregistering): Port device team_slave_1 removed
[  501.630724][ T2958] team0 (unregistering): Port device team_slave_0 removed
[  502.217775][ T2958] IPVS: stop unused estimator thread 0...
[  502.533857][ T2958] team0: Port device netdevsim0 removed
[  502.742658][ T2958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.847179][ T2958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.936650][ T2958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.012290][ T2958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.240593][ T2958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.371019][ T2958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.451165][ T2958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.518418][ T2958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.753654][ T2958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.838291][ T2958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.898651][ T2958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.962331][ T2958] team0: Port device netdevsim0 removed
[  503.970875][ T2958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.133826][ T2958] bond0: left allmulticast mode
[  504.139524][ T2958] bond_slave_0: left allmulticast mode
[  504.145196][ T2958] bond_slave_1: left allmulticast mode
[  504.150760][ T2958] team0: left allmulticast mode
[  504.156686][ T2958] team_slave_0: left allmulticast mode
[  504.162169][ T2958] team_slave_1: left allmulticast mode
[  504.169961][ T2958] dummy0: left allmulticast mode
[  504.176690][ T2958] bond0: left promiscuous mode
[  504.181494][ T2958] bond_slave_0: left promiscuous mode
[  504.187248][ T2958] bond_slave_1: left promiscuous mode
[  504.192842][ T2958] team0: left promiscuous mode
[  504.200997][ T2958] bridge0: port 3(bond0) entered disabled state
[  504.213660][ T2958] bridge_slave_1: left allmulticast mode
[  504.223185][ T2958] bridge_slave_1: left promiscuous mode
[  504.237804][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.247917][ T2958] bridge_slave_0: left allmulticast mode
[  504.253576][ T2958] bridge_slave_0: left promiscuous mode
[  504.259472][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.270295][ T2958] bridge_slave_1: left allmulticast mode
[  504.276337][ T2958] bridge_slave_1: left promiscuous mode
[  504.282135][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.291778][ T2958] bridge_slave_0: left allmulticast mode
[  504.297810][ T2958] bridge_slave_0: left promiscuous mode
[  504.303557][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.556364][ T2958] bridge_slave_1: left allmulticast mode
[  504.562041][ T2958] bridge_slave_1: left promiscuous mode
[  504.569311][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.584131][ T2958] bridge_slave_0: left allmulticast mode
[  504.598698][ T2958] bridge_slave_0: left promiscuous mode
[  504.605134][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.990739][ T2958] bond0 (unregistering): Released all slaves
[  505.245402][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  505.258267][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.268760][ T2958] bond0 (unregistering): (slave team0): Releasing backup interface
[  505.278149][ T2958] team_slave_0: left promiscuous mode
[  505.283807][ T2958] team_slave_1: left promiscuous mode
[  505.289924][ T2958] dummy0: left promiscuous mode
[  505.296016][ T2958] bond0 (unregistering): Released all slaves
[  505.636375][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  505.647455][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.657304][ T2958] bond0 (unregistering): Released all slaves
[  505.670347][ T2958] bond1 (unregistering): Released all slaves
[  505.771485][ T2958] bond0 (unregistering): (slave gretap1): Releasing active interface
[  506.066422][ T2958] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.075021][ T2958] bond_slave_0: left promiscuous mode
[  506.081974][ T2958] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.090942][ T2958] bond_slave_1: left promiscuous mode
[  506.097529][ T2958] 
 (unregistering): Released all slaves
[  506.183124][ T2958] bond0 (unregistering): Released all slaves
[  506.372307][ T2958] tipc: Disabling bearer <eth:batadv0>
[  506.392483][ T2958] tipc: Left network mode
[  506.412917][ T2958] tipc: Disabling bearer <eth:batadv0>
[  506.419100][ T2958] tipc: Left network mode
[  506.430954][ T2958] tipc: Disabling bearer <eth:batadv0>
[  506.445927][ T2958] tipc: Left network mode
[  506.471060][ T2958] tipc: Disabling bearer <eth:batadv0>
[  506.483255][ T2958] tipc: Left network mode
[  506.516121][ T2958] IPVS: stopping backup sync thread 9333 ...
[  508.067175][ T2958] hsr_slave_1: left promiscuous mode
[  508.079018][ T2958] hsr_slave_0: left promiscuous mode
[  508.086643][ T2958] hsr_slave_1: left promiscuous mode
[  508.092652][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.100536][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.108743][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.117141][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.129565][ T2958] hsr_slave_0: left promiscuous mode
[  508.135818][ T2958] hsr_slave_1: left promiscuous mode
[  508.143402][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.151711][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.161980][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.169638][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.179865][ T2958] hsr_slave_0: left promiscuous mode
[  508.185750][ T2958] hsr_slave_1: left promiscuous mode
[  508.191500][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.199086][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.206863][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.214271][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.222685][ T2958] batman_adv: batadv0: Removing interface: virt_wifi0