last executing test programs:

3m44.925547457s ago: executing program 3 (id=1851):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8302, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xd, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket(0x10, 0x803, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(0x0, &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000000840)='\x00\xd5\xe9\xb7\b\xea.\x03`sI\x7f\xb6\x8a\x04\xcd\x80?\xe2\xa0Y\x8e81\xec\x00\a\x9b\x00N\xff\xae\xc6\x8d~P\xd5}/{\x7fr^oZ\xb8\xe2\x04\xbc\xf9\x0e\b\xe5O\x8d\xf1t\xdc\x01\xb3{\x10\xbaB/*\xbew,w\x99\x01\xc8\xd6\x00\x9aS/\xa2\xc9\n1\x91o\xc8', r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='ns\x00')
getdents(r5, 0x0, 0x0)
getdents(r5, 0xffffffffffffffff, 0x5a)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000})
syz_usb_connect(0x0, 0xfad, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xa2, 0x6, 0x9, 0x8, 0x2}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="002501000012fcd1c844b7d7ff82cfdea3cc5c9ff1961f15af6551f5c5144f64424cf2797a88527f67a3134c2a1a734014645ebd678d73c4e78159949c9e05ab5ea8857e80de6747f839b44bbeee6766860ac713"], 0x5, [{0x87, &(0x7f0000000480)=@string={0x87, 0x3, "d77378333480d3977a7f131fbd8efcc46c99f41eb5d094839b42e533c010aa92fc2294c13f704acef30bdd2ac960a17673b265801036f298670c85496e7d73a508ba25ec3f99b54bbd78ed2dd531d959e86979cda2cabb8c62dce89b5c8cffde3dfd238d583ba50b5df8c640cfeec28c25caa4643b333ea7f263b05485bcd6e1c7d618bec5"}}, {0x4c, &(0x7f00000007c0)=ANY=[@ANYBLOB="4c03422f8e994d1f0035729f32bec60745ad799477770bdf20c2fe1a3d2deae71d9b0a8bc089b398efbee9b5b0919b33ef0b234bb1bdab4d159d2ab0425f4f8f3b930000000200"/82]}, {0x8b, &(0x7f0000000680)=@string={0x8b, 0x3, "d32fef1f7862ee3d3e58d94d0c3d3e6a5c114bc92837a02ff7883353c1d0d719b80f1bc8b47594fa3ebe6bb16106cf3ecf1f728955d95d916f5efcadb04f466e34706f8130a7c47d41a5a8d8f687815884dfa5a8a04775f02bf07ad17aba471d545f2da0482df202518cbd0a66b2b16e6ddbdaef7951d097c32314efc43fb63f87cfdfc0df359bfeae"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0x8, &(0x7f00000005c0)=@string={0x8, 0x3, "91a443623529"}}]})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10480, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, 0xffffffffffffffff, 0x1a, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3m41.74741117s ago: executing program 3 (id=1864):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000380)}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3ff, @private1, 0x10}, 0x1c, &(0x7f0000000040)}}], 0x2, 0x4000840)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x6, 0x2, 0x7, 0x76, 0x5, 0x5, 0xd, 0x3, 0x7, 0xed, 0x7, 0x1, 0x0, 0x30}, 0xe)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x5}, [@nested={0x7, 0x11, 0x0, 0x1, [@generic="31f9e0"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009, 0x10, r0, 0xfe660000)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xf0, 0x1f, 0x49, 0x10, 0x1a0a, 0x103, 0x708a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x10, 0xa, "", [{{0x9, 0x4, 0x10, 0x6, 0x0, 0x7e, 0x80, 0xb0, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x200440d5)
r10 = syz_open_procfs(0x0, &(0x7f0000000380)='stack\x00')
lseek(r10, 0x8, 0x1)
socket$nl_route(0x10, 0x3, 0x0)

3m39.945345872s ago: executing program 3 (id=1870):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000000)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x9, 0x4000, 0xffffff48, 0x0}, {0x6, 0x10, 0x0, 0x0}, {0xfffe, 0x1210, 0x0, 0x0}], 0x3})
r3 = socket$inet6(0xa, 0x80002, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000440)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES64=r3], 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@private0, 0x2, 0x0, 0x4e21, 0x80, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, {0x97}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x14)
pipe2(&(0x7f0000000040), 0x0) (async)
syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000000)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x9, 0x4000, 0xffffff48, 0x0}, {0x6, 0x10, 0x0, 0x0}, {0xfffe, 0x1210, 0x0, 0x0}], 0x3}) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000440)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES64=r3], 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3) (async)
dup(r4) (async)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@private0, 0x2, 0x0, 0x4e21, 0x80, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, {0x97}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x14) (async)

3m38.520874551s ago: executing program 3 (id=1877):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2016840, 0x0, 0x0, 0x0, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(r7, &(0x7f000000a300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x102, 0x8000, 0x0, 0x0, 0x0, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000780)={&(0x7f0000000080)={0x50, 0x0, 0x5, {0x7, 0x28, 0x6, 0x38a0e60, 0xfffc, 0x100, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r7, &(0x7f0000000e00)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x23072d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f0000004200)="e195bc6e1d6b988da4e2073a94c78288005b3f020cb2e8bca68e8b6f8f691cc09763521c1165572242dc708fcae259da13efd7300aa364fdc68bc251fb6dd48918cdbffa140425b521a07ca14a938eee1dd8732c2ac9196bbe6e0be0fe82a13610defc10eacb4ae1330f15679aee6204770af214efbd87fec0f9c76203964f28f1984ca5cf7820c35d889b8ecf7d1019a20521f6ee7591179ecdb5c751e9029752c9db0c74def44865ac51acc6a0334e6db6ebf04bd9853fc9c6dfcbd04785bb6bf23715a7f8e2d950cf7d5a0397b6002a8f039bc7aa98ab2cc829581e78c494eb06a24add2d0b431cc43e47d65cfc2bef1f1ce57bf4c04b973beda506204dce2ec12378604f4d38787c00d352675014d7b609956dc1a91e41190c5983bf22d55c74c57c14cb8271827141a5aabedea206cccefd6759920d4232d21ff637bff243d317511b35c3bd7b62c22f8d9b75cdd10654bf137ffa78f0b2a2c186b76e2fb1eadd9ce86082f5a8173359bbeb086c182883edaf6c76c73c47581120f63536f55e382039a3efcf948361d1a7fc9d088846a3875df12dc0e09e941e6177bb66d4dbb5d6a6933bbae9e509608458e57534f5ef37e2e664055692218551b7f0407f8cee1b96b18cc760d8c6e8fc971ce2c0e2afe4e32fcc0e970c71a14579bfab06d1c1871af273f69f5c4cdf7ccfe0d142638ceeb0be027579786613b1854a675dd66e95354acc65c8ab43085f407cc2d00ced818821a96f36b9910e8f386ea49efc792934d37c9a3a52d19a83173f6ae5894f51d0b0e1c289e2485cd00edb0e68a7df5886ec8232c9d41415b551a0e4abb82c302879aa743febac94b4eec256628d75712bac0c9e5bf7ed3688093f6e8bf0ece94fd01d28843387c2c2d8aca0d06b459452068fb9a3acd723f47ad04925cc8f43c39da1b55b56d55c3e7c86b6d54741b78c82a64f605d40dfb2ef66d83f4708e0a0bffef929f5c607e3258ff5543106da032cc897146cfabc74b4bb684a72a0ded91eb04cc0273ac97e4cbf0d7b0c887f5d04f22a96339a401f559261b028c8affdac0a11c355239ec87e66339b1d7001cda4066822ca242db3e4d4b81e48c7ba6fbb8a962ca8761350e5fbe8b50822947a6afaf93fb41395a646399833a29741d3cd7fa86364aaef1347ac2a7088d32d7fdcf3fe86c7291eb8cc39ca2d848d5a4d4638196db67a1b350320cfa6ce318c7f76b122f040bffffb04029a0d6c23e233d4ca4eb8685170f6aade9ce3506c01b5d1429f9ac5d83280a17bb26d9f68aceee514d1eb75cbcd5bb36c131d3c1daa79865b1c171d8562f8b44958bd2a07543686fb9601021ec796201f17c31ce4f04022b4a6115c4f81f3ec92a71ed71eb5467af404de6d7d1ab2a9eab1c68293da82c8ed44cf21f9e1c61c5548541e94e6708bc4d2c92b52fcb8dabc663d65fe6e423867f4f7ccb6a8f7adf49b288b5452e731aa5cfb444f76e4a42453450d645d6cfb82ea6ef29073ab6cc7bccb65ec05c346799206b056590f66f1406af42ab23446c41e04af4327bef319ee8efd7784eb82516c76eddadba3033497a09c1ac2a519ac00c4b0bfd95bb2c5f1db934fb9ae29e6e8db824e4f3769a9a196879558b6af6f05a08903d4883515c42532a23db19794cb81e221a8405cafe3594cf8ef997017dea6008a811ffb9818cc496c462423fb9b08c4b23a51bb0bace6329b32014325568def39a6d0d68faa08b00533c15d4b38da981e115a9f8c6312636c71bcd63397b1b690719582f30f7e55c55678237d489aa47e375d4dd22b9096d6206816da2430090a04ec1eb3fbae45469e2e413290e9bdd499cd86a348cc2f65577fafc8bec8f500c32ba00c6fc6e5eb3d7b1c484312a8bc0fc06a7a43c953e44a09b6710fc6a1f175afa2c8a16832a4275e3e578773284e0ba62526b40bfefe4428f2ea73379b1a8ebf77bb53e06757897d30b0d8a93bc30fbf579a7bf9fe27ca24a923259def18f5957001dd442ec869253557d2694b79161b3460864cf960211aa5951b92ab00d9757926dd68e7a74536d18a8494201cc0843fca3ee6fed6ecbdd645ecdbc8c3ad3f535518180915cf06cb91ddbedf602f51af7372fb75b1bb0503fde6feb2ca9fb3d652f9027b105a56d0a71f0d7c83eb250296104c9c003fddd4409566200776eca7a68f5597ea0ca763acdc274ed1a1250b367617923586c1e2e843ed383fc885602dc120ebe4acd173b4a72c4610b26d1552d3f159c06d05696018650b8a832b15b3ce615d3954d5ce893a3b189da94f6b08050767a1e660c5324f0800d045b99ac04f3f6051e675d34ee6b78712ff33e4cb016044c4c385001b1fcb3aae6e7b861465e0e604eb109d3c29d5f349285b86b16bd26fe0fdafe9545b82ac72370a3423ee83c37d4ca36b110c096d87a3dcaa11c67a82a94c5fe2d24e3553fa777217e8f5ec9fae61cb7e76d13167c1b3e964677498a59db263529acf7fc81f5b0afb63b9ac46fa6aaacb6dae4d2098fea3e7be1a6359b8e22562d96f4859185b5831f7538cc2f1c9eb50ccba3acb61f4a278b4b63e271dc6f6e40d1bc2db0b4a9a6811c340258c5ca082050b655dbdb7a5356025d028b7b0389082b2fbbde343e8d1fe404364387da26aaff3b944451c8ac80367b74b4d06cf2892561c0c29c39ecc5de38c7ea5b8d1953e9117dbb84b3da03f5391e64b8240e0ce432dc787496fd9f5caddb9c4300ea281ad02cbc768f8ca2328199e76963e3b0771c884d0b8185d30e92eed8208a63e8edf49a724fc461b98fdf22ed10c267d0fba7b89f863b9cf0dc62aa4f900dc2e39c85d11871fac6b19c63a1b68178701d6483a7ce0d8cf1dc4edc09106bfcd08e7b5622bc9f9d18421402193ed3fa07b55f2436d3c5883e3b1fc006230a59ffca8c54b111cc69bac870f6c95d7c0d0b7e1aa78192c914651eb26b1b4d9d9ccfae1f31975a6abfda8cc71716c29f68e0cd117181cc5592f8f778e96db4f452405178b1a0715e64195ff797e4981d4c7b210d643554cf149fef91f037863528a4549e5bd5dec6bb953f21245eba7b987a941e7a939520b75048dc42c3af31805dc2bbce81a6870b864d32930813f5df7046d56c6f2541672b31d80298f3f687e798d7497d0ba242f2be69a5d36f3959227982e85b5385bde40e373a610a8e5117a6a639e505ab07b331d8598a9fb65c6715632cbe7ef18e20340b371840e5263381af3bfcfb26dd67b96e8bba43c3a9e834ea4279768b4cace1458ce371ab4bb43bbc934752817dd83a273af1af7a33f468813113acc15f6adc583cc4f673c2b66ca60bb392551a760296651c026e0b2211f7746b1e084909bc230ca2a4f4e59677c1a7131781e8b27e3035087a53b95f1bf52577cfcb85ef64c3ea19c1078b8d5ced3b24f9fe6595ac13a4590d503d58f50af437a1592a01978c33bfd9cdf4a0a5b3ca48c7d3bdd74c5d12964b89583b5cfe4002e37f238bbcb8a747e870f858a5a8a63efb5f2e2cf96aaffce4710febc0ba4504f1bf8c46e7f7881a9b83375616ac5f60dffa741d40ac02c6b40b68792286c2e65b9527a9e5c36230e403aa0cee31fb69ba0077513ed6fa1f38cb591f218639be3cbf9886e7888178cb163b7ae3dc92d20fa2184d8943efcc837f7e3f40c18dabc95d582f74adc8e17317fa5158fc38ff2129c33bb9a8614d20f3444131c2c8b8532a236c9a14bfa3fffc75c071363e5820963674298c392facfef4a012dc72b8df813ca12364f99274776f3769b386b840e420a4a1cfef27a75dc729ac8e84858fb9d56146686f67b778874ffb569912423f23a6d8bea3064f42aec1b2274596ae6adcb54025bac79a9dc9b9a40eaec1615798838354ad4f6534fc196609edfb0e1fef0dcee9a226221d15548a2c8013cbad44bb781c564286240ddb64814ff4918752ccf9836fb20834693b24f108797d672b74dc88db8636c373f0e24a9110ab212bb939316fee05c0a2e1e67af335607fb246f08d6bf0a21438a4fddc27f6688d962674b3a4ea5ad48714d57aa69346c10099f7ce2868a7cf8f0fb485aaa7e0af5a0746f0b0b2325726c5f07dbfc3df2081dccb25cf037799e4aaaab3afa4e37d4317b9a67faacaf8b3206cb623d53a4d6976c86e56991ca87bd7c8aad73389904efd0cde94d59b6a1423dfa8421190aa2fe807bb7461d5c29aa9477fb1b71a9b48efd9d55157fb34e91693593a6d18872d4ae5852e252b43ece5bec9866e8ce746fd576d7e6e46e0b248f6912ed7f963a59b116332bf866f761a6f7e64316ce5beec47bbcc30007ad4b39f3eda07c84f5e9f1a0c29bb3b507fb62974f3fbf8a0f2e82d73d0c4072f1c29a988899c7fd95e2513d92e545f05bc739c3b7ff4f4ecc69a4e78a80783e96a5f515d4d07f0ec9ad6c2877a58f4c35db99ba86102387e7af65d6a0f1c6c51dc6d41afef64a8680088de310ff97d9b66485c2a3bfc7367a779655c9e9a19a314d8874d95bf46fbbacc5b9972f32a4927f3e1fa51ed32927cde14915fd9b106f9c4c3f19a086d4cdc08956e2bb5c8dfbb45f69860954bb406ba0cc75f646e4b8910cf75d7e25d410f627c03050e46ffe4fbf3061209fe453840afef1792ac8a7b56993581c752ad8be8cd368515cc0e1a5ed77b16be81ded4fc0380dafa281daf71610890a670909c979afab21b82af4c86dae4c5787294f4aeb4d4d3b448f51a23c4d84655438134764ccffffff7f0000000078387ac6ee71d0ec60f4061746a46902c5f3ba239a84eb694bb2e3b81b4ded09151de9f53a9946a3239729d6f0e82aaa421de6963e3478f38f035dfe052ceb7d2c09a85d41139ba3e2f15ca207d5cb34f6f9c6c25be9806c14d30ae525802a4bf340e3ced223f700083cdd7b16e0d7e989da8be332c74ac4cfa07a93016be4a7e998aa7b74412f956106e0cffa5abc3a65c4fb5dd80d1dfdbcac70e52f62ddf8f2acb6f9068c908ebbdd006fa2051a216eb5c5757bc00bf0678344b185243f170691b6791aa88b7520c107fd031ea07299cb768b1b6dca787f2a0bcc2b6f6f122bfab31c980666cfc42bd406bc5dfe01551edff9fdfea23e2f9ff0835eac8ed4b46d33c8a8e8bd3bb390a16bb4c3f13525f7cfb520a0880417585bfe78ec9c4f46dbc216115fffa82d4bba90035540daaa91a1dfde2c39093fd64d30d152807ae901a8f6c5c10bb5ffcf764fc09fc47417f4063d3f93512e8928e2b86a419883344548922c00d10aec8d12a18a1a96fe1b734fac7c3e4c6fa698991257af9b5dfaad627293989deab59565975ad586e39d341f2b8302244095f9df97337f1d5ff92dfb76d46f63e6e65e47a132b8d6b753e71c72a6cc4527beee8193efe024c03f41deec425d0920ee0394b44ed16359b78c65833aa3fe6e317d4e03b16387277bed86b6f7bc39406ec60fc3fde967cc9150cfc412bfc7961fa99ad3557b8e5f21f402337e08fc94b85a689839c73fe7f129970b8635bb258c0f518210a23ba3a00e14bc04e0d895b3bad935f58ffc255aaee5cbdf8b0eabc9e576ae5971038c3132bbf129ca79874483669ed20ea004df3d3abb3d298db7e85e5eaad8e2d73cac92baf5af1080b223903f285cd4445d77ef69e31618691dbcd0452dee7824ab1b04688945c3e27007d06e89fb825ade7be144a1a60b8b2cee13946ac34653b3ec4691613f1fa50731f19ce76cffb41459c0f0566055db77baf1446c225c03caf836b5ee9603cd4e649c699773c6caae9bcb2510b38d21d8c06897962033794df26208dac469396074114c485e6d9eedeb774a5fc415b9f6ecdfab3e26dbe159784749d550a34e827320183cd8709cfc14e7697ef389f96418fc0cedbc78df4678a7a3b1b312abdce6940c55a1b114d56e169a302acf5858bfbf8604a564a227200eca7ed1455ad3d69eeb320c577258ab112bb9efcc09a9273407c54a61e254711206e3a3fa6441478ac9136eca17fd347c47db953814980a7e8eb815f9248a3939057b4316c09769776049832e52cf3dbde447b67fcc2147550140dc7bfc44e023d70962b2c18afc6563540a88ba6aa7f384d0f5914e2f2f13aa06280582e859a2531d56315fc804cc92cf87b85a1f3e47e3312de20d73e6feafc0470f24c55bfe3eb9a85177d66e26fff16ba6171781128d8cdce9a9cf5a53a880c77bcd981ae6ee1fce27fc9f553480ddf6fd92354095b9f0a296ca0c71f5b3081dfc31dc3ef2d3acdbfcaae767acb15bbf1fd296d3de2add55b280dc593598beb829d890c3f4cd91ec640fc71ece8384ed0c313378efd3dd3d99dc7a7c717241ae9ab7944dae44aac2ec61c1038fcc408c8a49d37d091e8c195f20f150980ddab5aa6db80c48384cbb6dcdc852e4b48347111e7e391f05e40651c18a7cdf25b9bb87bb8401f8af0d122f0710a5aef3d44e7c80db821ade1432f06aa9e95a0f3b37e1c567fd62e834e1754371bf6f3c06da6c63f9d7c3856a35c04f1c984afa8047ac647624a7d029f40f5315445587aa42a1eda0a69f9fe5c4347e66ea0291c337bf5a035d1373cdab82f0dbc0f72a15807b9026580a3d4e74aa9fb69099a0a239fac88a6cf6834f8e6fe52fa8da8c27cfe8abcda863038739fcd56b50fe42d18f386cc5f8dcb9ee468f13f4eea67ef62c5616c4080e5492a6a65afca6c90daa5fcf66aa7ac2c524808c1c509a95ae4ab14a97cc7bb62c3733bc5079bd107d88b96bd1c27b20bbd29ec43b06855cedae8cca7fdccfa679621c14c68d88d8e95ae7e9393e8d049dd72961249829671232112de066962cb29fda1bd82e45ac733e3630d1f1ee88fe820f9731b133b36e7e064fdef9e3443d7d6cf60d4ef04d2751fffff79d11dc3ec880f657b893f9947eaf9a7ba13408ee87a9c1319a6a459564253fe5cdc37da9029786bf7acb4e579c4cf12a01f7e2e4685efab120ef6afe631b0264e9c9ac27947fd473a4832369285b941906d25027b0329ce2cc2d589bd436f4ad06cbe61cacd8b1d344924ff0ae78a650eed7866896d7f05e6e4896274572f9ee30abf62d22baa245b03027a704a7f205a63f34b267ba4b998d464d9dcc47e327d5bf4f620834dea3b8256e6b3ca78c02a5a0a5fd10841fa0953c1d1aa6d7655b42d09c3765c72bdbe55c0b5dd766181cb12e60e1db7006dba0099ba8c0ccc8c22d15dad6748b3bdcdcbe11ed00c87f044efb0c1517e12f88c24a408d24287307eb421c91f9eb3abf6032a5d16e631e7d31bd38c0441a4280d398b9b24f056b1e7d9ae41601b6b0d1d6495e19e3e1a51a67e8a292dbf3022fa8d5db8a8e7d11592763e016c5dda16c708f2b71d9d07efc3cac4f165d55cff10bee7ea4b1d5bf0b3eada3791cc086b22621b402de75249454a66bcbe1e05617be462413276ed2aaad014a531318c8cc1f6583aca7c10220463be844a2cc5959d649d1cae1ff6f7d719dc28441d69f7a4168d2756cb5f2b0cf39c2d69c050949f3b76840fa751451fa81599444a098138f3cba1446fcee296351252fde0b212882af69b5bca7cdc29774f38562688c577636b8e55a0b64943ee441120a31dcb49aed3b9aa76c9a41806eb6deb3db1d360ede38ef1aefa84fd691bb7eae0db2c747381bffb8589c5d0b355b0feaa63fdaa93baaebc37de5d2b4a94c83f01d8fdf1683bc9c4f14b29708efe725a17325b4635b435990dd5c0b3c6ca15e83bbebef5cbeb67d71d8c81c2f19eb189753ad87850583fc534b506140469c2a23ddf1201c6cb619281d5bf258d14f6d63679fd0e30c9ec05f1998d4a190e5b3b20dcae8bb8a64e6c7aa26ece9f3637dc4773ffddcf9b3fa257618764fc1c572b7ddb96ba79a03a6ab6062f97bb5566eae4dd94ddb43a716b8a1c5022881e9ef6b34fe075b2563008640ea1fd55a7e47e98051d258a9566e5dafac7402cc265b3fad01199dc4d3842c3d323a538d464a47e8d495da09587842336e3fe2256cc763d27cb3722cf9dec77f4aeb2073c92146d9e997235396f365d1754e8b6c173780f182e0e444e36bb88c4013e78f80c10f2cf96b9d2871bd65cf1900921505fe07d0fba7fea4e9688203e5474e58fe9a4abd7b4b22018f25e09056f9d968d92f32d9d3801f3fb7d201bf69cefb245c9ee0d3afc86a7a859aface38c2dafb642b60659747a5be962d3d7173c03882a7ab91547a3b77e7fb3db745a662993909c0d293684bec5a9d64cfe5815624f23be1333d8fe08d5c9ce21cd0f5b79fe680384e05659794ff57cf848b4b730473d5fc0834011d6cded10ac18961315abe9e211442da281c2974386dcd2c1e11c4516731df2743827039403a1eed02731564e34f5132c84c424953ed568469c03cb9b067fce60bef2c4140dbb5a9ae3c45a2a72d68016b468d09529a33940dc27ff1799f0c48f8169c293e761c207ef729a28bf2ece19458d9c21829ff10996f49f4b8da25070a85379304572a53bcd909d7aca8fc85c2843e00487d7ded612f3578c4d672b37dbcca2a7b50e7911e7748a74dbb70b2c64c2717d5aeac6540b2c220059e8519fba3e917260a9a7caf2cd9e02b667d43d6f92e646d157f62d67b8451a0137f1aee506f56f1af2046c29dc11c5ebf245eac4c4375c50077c24d88ef54e4a0eed548a333c0b7e91d5fec04e927870ad31cbca8d1c598b5e7754b24be3b63985440b621cf2399ae86437be0d6370845eb4bcfdd8617e5a19d1869b7ca841331289f0e0cf45902f4b359adeaa92c25e566034231532cc781c6d47e08bb8d8b287e3a5a159dfc660247a796d9e9da3126a026e5bce921567ba957740c3e73e974c781bb9eb151044b973ef3bedc10578b57d879377f165a83a116742fa22b1d869194a9161a316619f2cc79ce476cf8b6585297c1a035e30890fb79aef80ab679b5db50eebde47ca4c7adf856b7c028d69a2d189f8d519a2af0e2ca082a742be8e1c866d8895344fd6b793c3f55b4847ae7003a2d084258b119ee42e6f95ffd326fedc827d2dd7093383a9d48ed1ab44937367b073960fe285cdd976fab94b8db840e94a3a30e7cde5b4a0e842e7e0ef6009f2c11bf33f37f30dd686e1cb86a46d5cbd82b796833b59654b74f3802d31896bf330e64c4de8d3f265d21bfa63459e6837021035eee50e2f72e3ca6dca2ce02a6568489d569342e65b85b2a510c114ee3a855f62a5b7569abca897021c33aa690cefee8053e5ad000fe2f788c77547263c8a678bff1102c4f52b9d24a588588fddb371f6dcc99aeff8ff8bfc00b04fe506834ebdeac00280ef2a25084fda35a4a3429b0d60d7bb5601c414a709b4ddda5b24f3391a8c47dacbbd4e0d71c286ea44da4d9d1d0c2eacda871b71a8af62e64bd05578492404337668b8d461a6de53539f03ea88c1cf978ed5f69f2b83a6332da651f606b98a50c297050d6fb35015b08c3071124fb4132c592d5cf928e11eef09c68b1e313c6f27a298a7a778fa482181ca03e68ab77e4dda7a41ca2c1eedf6367ce1badfbed2c2a474847b10776a32c41e69c13d6c62d1cec780974f60fb9c825a82383ef77aa458e923397f75c1dc02e6cdbcbf88dd263950e8353ecd9b49dc358eafaf2b47deba85b9d72dd57b4951bd34041b7e4ab580d475e72d7c0e2137833866f134145d978d2f1e7ac2be40d5256425a56579c1a311639f8c52416e8e67ab421a5b9a91ff951a1fcf32557dc32658e154adaf1db5dfffd5dadbc17bb67d640ebc38e639befddafd0e249c6265d3b3b8c223bbce55f9544c0d0493523f7d4ba4d53caf1cea52091c953677bd268b7b98a5b7a701435e57bbfddfe853491164c0e90757d711a465a497a8e4c1bf9dec062fc0109d8748887ade67c6da9ebfa11d2a0e6152dcac15866daf869e79cc7cc440ad8849bd6db012336160b46d04f637b6f20d4b24b6b860075963ccb88599ba3b3cddf186146fd796cc335483a97a090624d45229b97e29beaab0dc2028736783918119fab4e90f75961c7d6987ac19123af13e7fee9e92c757e16669d4e9cba9e78f9a004cade023590d43a037db1b7c30222268b52d9749f56f215d0ecb90ff2a6b8d89785c9f66f56eefd55f2579e429a2dabaea85883e6ab974edad5a2da9ac21d5c5bb0e9b4ce33b2fa113be73bb5302d5f36e393e71a1a7e5ed3cde13503b4e7331916bbdfa7f81acb05f95f7e07073545f40c01a32d824b2a0d63e70ef95d1def2934d15078de4b51737e7001a534689466baa3f5921cb65de893862dcb19d47496bd7a93c90cd2cf06fd3264ea16e3f5ebacd73743911ece4ee1745fbca2e667871afe14116387d833393cae69a54708a3dcbe8c1eefdc51e979004c08472aecc6b83aa489c90f74911d353165664358e8f3ff986efc8d09bc348d985751cc005f085edf3c2e463b0ec0d18c3248be87333861d65e535003a6df49aa459665b7350ea6c64d54f4b66dbbe6abc37091603435f8a74d23eb09d095330e82edf23bf20c1a2f43c8be10816144b51bdf9c962e4c9796dfb341055053963e92524b5e756fdc580c310264d988ef87efacd4e084ba12ae04fed44d30930faa59f9e39345f26aaf5f443db3014e4eaa9c5df90dccd805b39a3e04a98caf0b923c621ac729ab7b733ec73fae32a2e0daf8bde879942886cdfb45df3a86bf878edf5a2b18da676cb436c9c5afe49af004d4391300aee26478a35e7f80b6f49c38b0727ebb912b89a4098c98c74cfa4ba0321d74f4ae1f1fe91635ae79425d591fb0fdb82c03176be609d37678f9cf94aa648559126120ce30b1ce9a949c8b9a476facf78ab8014f17aa90725b17f63da33320c4d50f3dafc42d510915f98484922756be96d5f125dc3990ad592f5b5e1e1ce22e147fa0600d4ecd26b3ed4482020b5940b579d6b14fe47bafff46d2509397e12da8856c664eb08205f3fc293f8832514486a4913b9d76505af7931888a328e86dbab954beb68cd3e74c3916e574eac0c369c150aabd93958dbc26137c14d8e38edff0018f50072dc51510e434e63e8e96149f1f24db0a993782f3d313cba9e962f2283d357f32dc56efaff3ff27f5416c1806e47634201cc1c0ea815bd22817ba06920bb128b3e9216ec2b7a96fc24c56eddfeec60c2159c7cc47903fcd7e6c9f9e948b326afb1b37fd512d08d058cd2ba01b04fc8cbdd0bd77e686059a9378f322777fb989bb335a81d0a81473d59986072ef730ae5d9b4d961eb6b9112a7fa78a9635f983bc75bef4953e1c30aa4e2bed9cb3d8c1e4ad2176b79424cbad50efa56caee4571532cfa3b5b38e373e5b51bf09b9a15ef5fea6f1fcccbf7396b53e36c2979e56cdb91819081579cd5944c80950e8a1564c6c8728518a6a7bb27d130ec837c086159fc78f20009b6b9bc89062bf75bca2fe0c2c9a6341784390978879a8e5128e8a6ade7435f422983ba20aba31a387df308ff1a75ee4006e1c233bac21d4a380263438f6ae2e00a9497730fd00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x6, {0x2, 0x4, 0x0, {0x5, 0x0, 0x0, 0x6, 0x200000000e4, 0xfffffffffffffffb, 0xa, 0x7fff, 0x5, 0x6000, 0x5, r9, r10, 0x801fc, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r13 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r13, &(0x7f0000000100)='./file0\x00', 0x126)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)

3m37.428173476s ago: executing program 3 (id=1882):
syz_open_dev$sndctrl(&(0x7f0000001a40), 0x1, 0x40a00)
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="81010000000400", @ANYRES32=r0], 0x10)

3m37.20873673s ago: executing program 3 (id=1883):
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)

3m36.854925876s ago: executing program 32 (id=1883):
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)

14.14850114s ago: executing program 2 (id=2884):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100))
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280))
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000200)={<r5=>r4, 0x8cb9, 0x100000001, 0x9})
ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000240)={'veth1\x00'})
mkdir(0x0, 0x22)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0x50)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000640)={0x6, {{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc}}, 0x0, 0x9, [{{0xa, 0x4e23, 0x6, @loopback, 0x8}}, {{0xa, 0x4e21, 0x7b, @empty, 0x8}}, {{0xa, 0x4e20, 0x8001, @mcast2, 0x10f}}, {{0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {{0xa, 0x4e23, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {{0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x9}}, {{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {{0xa, 0x4e23, 0x10, @private2, 0xa}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffc01}}]}, 0x510)
unshare(0x62040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00'/20, @ANYRES32=0x0, @ANYBLOB="158804008300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r9 = eventfd(0x5ef)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2710, 0x5, 0x58000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$KVM_IOEVENTFD(r8, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xffff1000, 0x0, r9})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x206000, 0x8})

9.968183911s ago: executing program 5 (id=2899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64)
r1 = dup(0xffffffffffffffff) (async, rerun: 64)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (rerun: 32)
close(0xffffffffffffffff) (async)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1], 0xfffffffffffffeac) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @mcast1, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1, 0x0, 0x25}}], 0x2, 0x931766f6319eed40) (async)
shutdown(r5, 0x1) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) (async, rerun: 32)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x9) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x4413}}, 0x18) (async, rerun: 64)
r7 = socket$rds(0x15, 0x5, 0x0) (rerun: 64)
bind$rds(r7, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x44080) (async)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))

9.769592395s ago: executing program 5 (id=2900):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6cd00000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
shutdown(r0, 0x1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x1cd89fa0421ea3b3, 0x720, 0x0, 0xfffffffffffffd25)
r1 = socket(0x27, 0x2, 0x3c644)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4})
r5 = dup2(0xffffffffffffffff, r4)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
socket(0x200000000000011, 0x804, 0xd)
r6 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r6, &(0x7f0000000080)={0x11, 0x800}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000a80)=@attr_other={0x0, 0x3, 0x10000, &(0x7f0000000a40)=0x7})

8.253430463s ago: executing program 5 (id=2907):
syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x4, 0x0, [{0x40000071, 0x0, 0xff00000000150700}, {0x31f, 0x0, 0xe}, {0x39, 0x0, 0x1}, {0x295, 0x0, 0x5}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000040000010902"], 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0)
r7 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x3416, 0x800, 0x2, 0x24, 0x0, r6}, 0x0, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$rds(0x15, 0x5, 0x0) (async)
socket(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffff41}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
r9 = io_uring_setup(0x3975, &(0x7f0000000380)={0x0, 0x4e6a, 0x20, 0x2, 0x300, 0x0, r7})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r8], 0x50)
io_uring_enter(r9, 0x2219, 0xcf74, 0x51, 0x0, 0x0)

8.089240143s ago: executing program 1 (id=2909):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x40800)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r3 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r4, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000000))
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)

7.117955647s ago: executing program 4 (id=2910):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x12122, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00')
write$P9_RVERSION(r0, 0x0, 0x500)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', <r2=>0x0, 0x4, 0x10, 0xed, 0x3, 0x64, @dev={0xfe, 0x80, '\x00', 0x42}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7800, 0x80, 0x6, 0x6ce6fd5a}})
getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000824bd7000ffdbdf25100000006000018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=r2, @ANYBLOB="140002006e6963766630000000000000000000001400020076657468315f746f5f7465616d0000000800030000000000080006000300000008000804800f000008000900010000005000018008000100198fb41f129de36c06a06510de03d5b0f18b634d695990759dd7b7376945a609556c84104051510d7df2d55bdd9846d965df", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000014000200697036746e6c3000000000000000000008000300020000001400020070696d367265670000000000000000000800080009000000"], 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x4000006f)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000140)=0x4)
read$dsp(0xffffffffffffffff, &(0x7f0000000200)=""/25, 0x8a)
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080), &(0x7f0000000340), 0x2, 0x1)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r5})

6.988078625s ago: executing program 1 (id=2911):
r0 = semget(0x3, 0x4, 0x404)
semctl$SETVAL(r0, 0x2, 0x10, &(0x7f00000000c0)=0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000000b00)=""/4096, &(0x7f0000000140)=0x1000)
syz_open_dev$video(0x0, 0x1d24, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r5=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c0001000000000000009bdeffafde2500", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6, <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r7, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0)
syz_emit_ethernet(0x132, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0xfc, 0x2f, 0x0, @dev, @mcast2, {[@srh={0x4, 0x6, 0x4, 0x3, 0x3, 0x48, 0x100, [@dev={0xfe, 0x80, '\x00', 0x29}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}, @fragment={0x3a, 0x0, 0x5, 0x1, 0x0, 0x7, 0x65}], {0x0, 0x6558, 0xbc, 0x0, @wg=@data={0x4, 0xb, 0xde, "e390b0a2c248ece701c9b39cce0e4b2c6593ebb427150a4269966755f5bed34b4a40e671a00c2cb8c3a90a78dee705edecd958ef81505944a74c2bea486aabc4a114cd24a09665bf7268737bc545700862be5688312745fa8282d4dc5fa1cfb6d646ed0c5f81692feedbabbe55f68cfda14ff5844cff8bf7e7941df7525e3662612b1d7b992b07905e6925ee3d74e85834496b320a43c6a921fae0abdb500b102c52c9bd"}}}}}}}, 0x0)
unshare(0xc040480)
r8 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
timerfd_create(0x6, 0xdb45c74533b9965f)
mq_getsetattr(r8, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
mq_timedreceive(r8, &(0x7f00000001c0)=""/105, 0x69, 0x1, &(0x7f0000000240))

6.82900296s ago: executing program 5 (id=2912):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x38}, 0x48, 0xfffffffffffffffd)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
poll(0x0, 0x0, 0x72)

5.789450984s ago: executing program 0 (id=2915):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5.705450669s ago: executing program 0 (id=2916):
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmdt(r5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000300)=ANY=[@ANYRES64=r5], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x10004e0, 0xe4b, 0xa22]})
munlockall()
dup(r3)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x71, 0x1, 0x3, 0x1}, 0x8)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r2, 0x0, 0xfffffffffffffffc, 0x1541})
epoll_create(0x3)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41})

4.725360421s ago: executing program 1 (id=2917):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000301016c000000000000000002000007040001198008000101040000001535d60f88a3dd01f6dbfdb65db57aa3ba091d17d7ac5bf11e9516a789b87ce786cfd111073f92b3a6e90afbe64b77605f6aa34c0d5e85634d0700b29f848c4c76b99230e0"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4010880)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.557445447s ago: executing program 1 (id=2918):
r0 = socket$netlink(0x10, 0x3, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="010001000010000000000f00015b097ed12bce2cee4830b024f500", 0x1b, 0xfffffffffffffffd)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(r0, &(0x7f0000000440), 0x0, 0xadc23a3c6d4f7f4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b0400000000000000000200fffe40000480200001800700010063740000140002800800024000000003080004400000000c1c00018011000100666c6f775f6f66666c6f616400000000040002800900010073797a30000000000900020073797a3200000000"], 0x94}}, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000001c0)={0x5, @win={{0x5, 0x2, 0x1, 0x7fff}, 0x8, 0x40, 0x0, 0xfff, 0x0, 0x8}})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82dfe970afdaab4a", 0x6c, 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newsa={0xfc, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0xa0, 0x3a, 0x0, 0xee00}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x800000192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x1}, 0x70bd2a, 0x3405, 0x2, 0x1, 0x0, 0x20}, [@offload={0xc, 0x1c, {r2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x82, 0x9}, 0x18)
ioctl$SNDCTL_SYNTH_ID(r9, 0xc08c5114, &(0x7f00000002c0)={"e5c471ee395784846345a23ed58b0957ba9ce69597b3b54e4706d0fa305e", 0x5, 0x2, 0x401, 0x3, 0xfffffc2a, 0x5, 0x2, 0x1, [0xc, 0x80, 0x1, 0x0, 0x5, 0x6, 0x5, 0x9, 0xffffffff, 0x6, 0x881d, 0x0, 0x6, 0x8, 0x0, 0x6, 0x6, 0x2, 0x3]})
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r10, 0x5b24, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

4.08308943s ago: executing program 0 (id=2919):
r0 = socket$inet(0x2, 0x4000000000000001, 0x100)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x7, 0x4, 0x4, 0xffffffffffffffff, 0xfff, '\x00', r3, r4, 0x2, 0x1, 0x0, 0x1}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x800}})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000f7d, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)

4.042889597s ago: executing program 4 (id=2920):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000010640)={0x0, 0x0, &(0x7f0000010600)={&(0x7f00000105c0)=ANY=[@ANYBLOB="2400000002030104000003000000007a4fec850000000003080016401b00000008000100"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80004)
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0xa5a0}, {r0, 0x1410}], 0x2, 0x0, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x400800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [<r8=>0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8})
ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000080)={r8})

3.840932588s ago: executing program 0 (id=2921):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffea5, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000003006772653000"/28], 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport}, 0x90)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
open(&(0x7f0000000280)='./file0\x00', 0x2a000, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8004}, 0x1c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r7, 0x80047437, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = fcntl$getown(r1, 0x9)
sched_getattr(r8, &(0x7f00000001c0)={0x38}, 0x38, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4c00, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x10000000, 0x7, 0x101, 0x7, 0x7, 0xc30, 0x6, 0x6b0}, 0x0)

3.302075381s ago: executing program 2 (id=2894):
r0 = socket$xdp(0x2c, 0x3, 0x0)
write(r0, &(0x7f0000000340)="4e666a5b143d14730480b69cdb376fdaba2af0e925625c883abb2376fc40da01b3da1fff584fe22bdc5a9cfdaa18799cc8026e209763fd62868fa7710392cbd7201dfd5a0d41763ee157fffe3a0bd06896bbaf68c3296db0ebb497ee7fca7afafaa7eb9446e3b5121c4e91cf39ce842afaabf32774a1b68fb902a2bad0d2e9172c7f5933", 0x84)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', @ifru_data=&(0x7f0000000580)="77629e9ffe408b0e43366c56b77e81b935d7e1584378dc9ed7c6ed9be933cd1f"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', <r2=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB="9f1732b9e4dcad80"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x3)

3.193095327s ago: executing program 2 (id=2922):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000100)={0x0, 0x0, 0x6, "f08039ad6674"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x40, 0x1, 0x2, "75dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffc, 0x0, 0x10, 0x0, 0x7, 0x83, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x0, '\x00', 0x0, 0x1}) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x3, 0x2, 0xfffffff7}, 0xe52, 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0xfffe, 0xfffffffe, 0x0, [{0x2, 0x3, 0x2, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0xf8}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x4, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0x5, 0xd, 0x3, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0xe, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x6, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x7d, '\x00', 0x7f}, {0x90, 0x7, 0x8, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x1}, {0x7, 0x6, 0x4}]}})

2.861759833s ago: executing program 5 (id=2923):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000140)=""/62, &(0x7f00000001c0)=0x3e)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x17, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff0000000008000800001b01", @ANYRESDEC=r4, @ANYBLOB="478dd3e5ecb8cec81413fde19b33db3a48b159fe5ea56e6972de60600d78402b3758ef8230790fc59ef947482f600d71d8328ad9ef88b32a117688c29e35c7283ce5910843f57f17755df77570919d18ad1f315eab2998a003eb6a52730f097b96b386a51cfb22cd4a90f25d3f89874727dc4b3c7c6ca95d979ed9afe538a4503b4c199a1933de570c34a8ccfdbc24283e7b7bda6f56a47bbe28bc5874b2ad97eac045b82b3061d28913", @ANYRES32=r4, @ANYRESDEC], 0x34}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b5950000fd00000000000000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff0000000008000800f4020000"], 0x34}}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01600000230000001c0012800900010069706970000000000c00028008000300ac1e00012051f105e0e42de7197037664b3088d67be32e404f86ec741a63f12fe125823b1fc372d7238536371f4eb34846c3498017c961"], 0x3c}}, 0x40848c0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000540)={0xf3, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @remote}}}, 0x108)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
r9 = socket(0x1e, 0x1, 0x0)
connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x180, 0x30, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{0x16c, 0x1, [@m_simple={0x168, 0x20, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hash\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'mqprio\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'f*-\x8d\x80\x10)\x00'}, @TCA_DEF_DATA={0x15, 0x3, '/dev/qat_adf_ctl\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x6, 0x8, 0x3ff, 0x8}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xdd, 0x6, "9d3b59f05edf9ae47deb482354a97d5df357f477de20840e4e588357e09f046ead592617394bbd36037b79a3354310ae7bea4fd7a6a72af7255224b5598bd4323e59108fcca5dff91b5f778d96ab8a6ba6f641a7c0ad59c3d47c9ce875acb725f5719d26ae356d95dcf077ad74be80adf5ea87ea35b84cc7c144935849b812677728d48081079de5eb77dfaca108ad350a836d24d94bcfd80bf696cbb5169d673824de51fe00da0a54efdbd37ed1191cdf2f4ae31afba4f68c29f54b46663129d1a273cbff32ac96703d334b195c2358a17cd6fd3f3149d869"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004804}, 0x9108f4950a890777)
shutdown(r0, 0x1)

2.253296794s ago: executing program 0 (id=2924):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
pipe2(0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000100)=0xb)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.033763931s ago: executing program 4 (id=2925):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200000)
unshare(0x22020600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x2, 0x4, 0x8, 0x42040}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x98, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x88, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DATA={0x60, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "e19a13d53cd9b62502a7214f298f9fccb1586c8c46bc0b430c2e1c7ca95be4c1fc294a7f8de1dcd375e33af03320"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000854}, 0x24000000)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x8112})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'})
ioctl$TCXONC(r5, 0x540a, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000140)={{0x40, 0x7f}, 0x0, 0x1, 0xfffffff7, {0x82, 0x4}, 0xa, 0x4c})
r9 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r9, 0x4236}], 0x1, 0x0, 0x0, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.962204069s ago: executing program 2 (id=2926):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2d}}, {@remote, 0xfffffffd}, {@private}, {@dev}, {@rand_addr=0x64010101}, {@local}, {@dev={0xac, 0x14, 0x14, 0x12}}]}]}}}}}}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.638633794s ago: executing program 4 (id=2927):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.385536309s ago: executing program 4 (id=2928):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802)

1.224288725s ago: executing program 1 (id=2929):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.166571348s ago: executing program 0 (id=2930):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020bc20005500000000000109022d00010000600209040000050301010009210000360122050009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003c3fe5d08c008df07d4284aece76d67166b01020301090112005207072020"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "217b8d97"}]}}, 0x0}, 0x0)

1.098906895s ago: executing program 5 (id=2931):
syz_usb_connect(0x5, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4010203010902230001046b40090904e40c81ffe7bb0408240307003f001009050702", @ANYBLOB="676bce620c04591be86efc2d851f38886a51edab390f9b079494ef5b3e14c5301e8c4fc8a360bd8b34e3649c9c1577267370411efd30f6f92300962a7e998f66d4c72176c826b7f19908bfd3788d5140e0a6631af37b8cc15ffeff993bb256d88cb17408aab2fbaedb21934b8b959adc3938ecf1881d3d2e43a4055cf9df303277e864c2069a9be370b86923d0818856a433bf18638b15118cbbb703870dffcb3afbc09a94660e18436c"], 0x0)

1.096438898s ago: executing program 1 (id=2932):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x1, 0x800, 0x0, 0xa7})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)
migrate_pages(0x0, 0x3, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000100))
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f000039f000/0x2000)=nil)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d80)={"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"})
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x100b)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x42090}, 0xc014)
r8 = socket(0x18, 0x3, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r8, &(0x7f0000002580)=[{{&(0x7f0000000640)={0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001dc0)}}, {{&(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001180)="d482975610e0f78e92e5dde5d6eb4bd5af78b54dcb33aac92d49676072c4640dfce2187f33d85a4cbcea741a22682d3b858a522951b1d4f95891d050b2358c9f5f06322fcaecc270819bc631815e6a988913bd56cc4bb51380f9a76e45c08c6af2b95b73a2c62b0d72444e2e8de0f18dee2614803bb5df4d6757feec0e7f92cb6924e13d4118c02e123f1924ab5cb356fad9b5bc1f00b822a01a7b63e10187a220ac65e0df41a7494a1c196282b0041bcce6533ab5e3c0a785f1d047e08bd5498382bdea70d54f93484e1fda2e7fd203016e8db09985b22a62b95be377ffb9c6bb5b6dab588c610a7150b5e2cf44b98beac0771b7cd42e772deaed3cbcd600"/283, 0x11b}, {&(0x7f00000003c0)="5ebf149985199542d4212297e7426ddb9d597d7b82b1cd9b5caa2272b2f1c73e57ea6aedb7d465f1eca0e58105f7ae432779c73a3d4ef4c657512a7f32e7068aa1e28f10d4160761eec377c45c780b68dad7ffbbae2eaa150b8e6d3953f15c76b9c8833e19a79255548b2b636bdec11d1d4e2d400ea3e1b7fc87e806a6f385e6cf99fb8b8b44750b5a3803ee11635f263f9d827a1dfdfec3058567edd288f7244dd849d758f3e3059261da64cba3f369b05291dbf9583ed94f43100a8d6f399aabda83d5339ff990032ac0b39df7", 0xce}, {0x0}, {&(0x7f0000000680)="cdd24b9cb086881c9c8b6b315cd554621e63e1f5094d0e47f8cca08d8f92d97ef5f8b81606c5d4658cb019edbefaed29dead0b9160ae943f4a5e1c85ebb2e1db6d5da7cd01c899a29535fe45f124ece480c5daefc84900d8f558039a558e8ad00a805cb7d47c75627ed970622fc0e00ab1b83cdc9609ef6ce6e9da8fc262d00268806d0560527109c2bdf27a5c114118ec2c8d1d55c86208e4612cac8eca79ae4a423957011408e9089a9d6729e58451fac0a05f68fdb7152f954786ac1338954870338c364b061ffe91ffdef4e3b693275cd56b1b25bf5bf913006c7b18fe3822ff997be1417e6af6f215acd9380000000000000000", 0xf6}, {&(0x7f0000002680)="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", 0x114}, {&(0x7f0000000880)="f200c9d5cb785137f36c3e45cb5c0e42af6fd2168d1b024029920e3cdd6258128a2fa545d3538e13ecc3f69f820ecceb5b710b826b7242e1f4b375a0cf3df6537da9f709df41d6d7be0e145d3a5876d3c4ce4d1144b790d21b383990913f0a94c26de5ffa5cf726f72a3bee79a7705381e124366de7fd932a18cbffbf17a0f477f79839bd8ab2dbab42ea38ceffce2b2fb87e0a29afff2988c4660be35126d66692a255e2e9f3db17ee54f25585dceb7ea921dfa274c4e4dcf61194e3f6f86743a0163ed69ff9cba22cb2ccdd18991c4dcd663d1130b089c4d8d5a9cee5a5ce311a80a3bb3332cdde4f60fd3538ed0407ce8bb08751480", 0xf7}, {&(0x7f0000000980)="55a81ab40120f021597d228ce70de9d1e1f4259e30bd8410559138d35db3639ffa09bf79a6517b0771e61e77249cde91bbf3c12e5d19b2e998a3fce983235b736f0ad817573d1ee7a757888b70d3e1d2a7585662655329e9c51dc83b3bead82a8a2c5b727b766c40af8f8fafae82e7c7127229f02d41beebf23a78cf9f22dced4dda109efb53799306265c812103b74424483736b6ab8b0d4bfbeb8fef4da43944593fde231c26e6608c4fd7ff989461294ed7442cdd5fc8e642183063a1781fb983f50f34005873f3a60686a23e5c43ca76c1fc83ce9b0085acfcc0", 0xdc}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000070000000e940400000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1400000000000000001f0000020000000200"/36], 0x50}}, {{&(0x7f0000000600)={0x2, 0xb70, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b00)="c3716da29191911a88c9d34bc7a8c81c51b87102845b212e97883a45439422ebb97bf1044012486e693eb26f3f3d3579cfb6a0bd21a3789a73364a982b7bd882c758c5b72e9de75a5753f2be90951a722e56177055896ab42be63dab91f0d715f504efd58203b7716431c68e06e38be5d38d9bcfe9dc8956c5851671989f6315b72de4f3862e8a335583162b3cc267ad5cb8967eb2b6bde8ea73f7a5f0c3e5afd61243e0a91bd1cef2ba8ee2d8ef4b44c78c118b9fd644370754fbfa4752139cd9d226dfb844cb1b3fbbf1d143039c5d582a7a", 0xd3}, {&(0x7f0000000c00)="68df14f58e31e3c14b6b7d56042318ea0a13c270d31820d86a25651b82138b266347708fbe547938b20b77533fc2921fcd29bef6a7077334d2f78e9e3b731a2356f65e2ca55ed3b06569de130ef1deb7043f409376f877c0ffd0af8bc458cfe289eb51fabbe454be58e4ac0b49d7d6a4998a9590c7bbb762e56b9839b9dccdcea5df67a884f764f3cdd5cd50202fcf2fbc3032572675b4d02ece", 0x9a}, {&(0x7f00000027c0)="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", 0x10b}], 0x3, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x77535d76}}], 0x18}}, {{&(0x7f0000000d40)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYRES16=r5], 0x160}}], 0x4, 0x4000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000200)="cacb5de7c255eaf50d3483bb5e722bd746917afebd2ee30201b1d79ac7943aa7fd1c89596ecdc3aa95090ade6550321aa62c3ca63dda0452210dfa586cb00abc99eca23503f55e03bd5232dc22edc93398e238a0e06b9d4bf21aa35b1953f85815baddb0836e135eaff8616fa2597454d01afeb9edc0f168f97f6a0d160b33f9f33d34e81c5b58e71e8897e496", 0x8d, r7}, 0x68)

693.002263ms ago: executing program 2 (id=2933):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r0, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000804)
getpeername(r0, 0x0, &(0x7f0000000380))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @hyper, 0x5, 0x0, 0x100001, 0x0, 0xffffffffffffffff, 0x0, 0x407})
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x2000775)
write$binfmt_elf64(r3, &(0x7f0000000c40)=ANY=[@ANYBLOB="7f454c4621fc007f000400000000000002003e00edfffbff94021c00000000004000000000000000dd01000000000000000400000600380001000100020000000300000003000000040000000000000013000000000000000d00000000000000e60000000000000004100000000000000300000000000000"], 0x78)
close(r3)
execveat(r3, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0, 0x800)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}], 0x10) (async)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) (async)
listen(r0, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000804) (async)
getpeername(r0, 0x0, &(0x7f0000000380)) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) (async)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @hyper, 0x5, 0x0, 0x100001, 0x0, 0xffffffffffffffff, 0x0, 0x407}) (async)
inotify_init1(0x0) (async)
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x2000775) (async)
write$binfmt_elf64(r3, &(0x7f0000000c40)=ANY=[@ANYBLOB="7f454c4621fc007f000400000000000002003e00edfffbff94021c00000000004000000000000000dd01000000000000000400000600380001000100020000000300000003000000040000000000000013000000000000000d00000000000000e60000000000000004100000000000000300000000000000"], 0x78) (async)
close(r3) (async)
execveat(r3, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0, 0x800) (async)

233.066325ms ago: executing program 2 (id=2934):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0xffff0000)
r0 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000150020002cbd7000fedbdf25882c23b23ef3f6f4a9b10392d46afc0838e01400"/64], 0x40}}, 0x40000)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9effff0000751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a417e214680c0fdd3eef2f7fe7545cc44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0c000abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514406b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f001000000b50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba54355434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e68a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc895722313e14f17cb7df1e2885ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f46410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7ccb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f985ed743bd321b4df04c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c324832a90ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2cca2f75dcca6849e89e1bab32fe9b598c60407e4c21d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0xcd, 0xffffffffffffffb3, &(0x7f0000000440)="b9e403c6630d698cb8a00b044774879bdc6b2bcf66584e4dba89ff3cc26369665129886a99d6c54f0d1ddcb7ab61f4d1978b22c79bce2ed5f3a54f477b0569e461f75743527a585ae38e5a2a46745fa98bda037b4bbb9d0263311b3134990bd37a690d8ef673edbd0e0070d82141d5801abdfae40d913dfd990183b576dea58ee8dda5e246f1e3ccd097a2ab1b0599c1bad3f52e06457e681b02ed0477ffee6cd47eef1f326c8f2434ae5316631b278fdda2a4ed64beedbd098e0b5417b7bfc10e3ca1cded1891c31da638a330", 0x0, 0x16e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001)
r3 = getpgid(0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3})
sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)='(', 0x1}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x40015)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20)
connect$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4, 0x2}, 0x20)
connect$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x54}, 0x20)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x100}, 0x1, 0xffffffffffffffff, 0x1, 0x6, r3, r3, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
memfd_create(&(0x7f00000000c0)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8an\xd4\xe3\x1a\x0f\xb4\xe5r\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14Op2\x82\xc7\x0e\x97\x03\xef\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00', 0x1)
pipe2(&(0x7f0000000040), 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 4 (id=2935):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x68002, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x6}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

kernel console output (not intermixed with test programs):

d vhci_hcd.0: pdev(1) rhport(0) sockfd(22)
[  629.204009][T15096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  629.212844][T15096] vhci_hcd vhci_hcd.0: Device attached
[  629.220280][T15096] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  629.231268][T15096] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(29)
[  629.237922][T15096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  629.246853][T15096] vhci_hcd vhci_hcd.0: Device attached
[  629.257816][T15096] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(31)
[  629.264564][T15096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  629.273844][T15096] vhci_hcd vhci_hcd.0: Device attached
[  629.280755][T15096] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  629.291510][T15114] vhci_hcd: connection closed
[  629.295039][T15110] vhci_hcd: connection closed
[  629.300364][T15099] vhci_hcd: connection closed
[  629.300528][T15112] vhci_hcd: connection closed
[  629.305183][T15102] vhci_hcd: connection closed
[  629.310564][T15097] vhci_hcd: connection reset by peer
[  629.325675][  T155] vhci_hcd vhci_hcd.1: stop threads
[  629.327785][T15107] vhci_hcd: connection closed
[  629.345042][  T155] vhci_hcd vhci_hcd.1: release socket
[  629.361877][  T155] vhci_hcd vhci_hcd.1: disconnect device
[  629.422693][  T155] vhci_hcd vhci_hcd.1: stop threads
[  629.440687][  T155] vhci_hcd vhci_hcd.1: release socket
[  629.451312][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.467089][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.479168][  T155] vhci_hcd vhci_hcd.1: disconnect device
[  629.485264][  T155] vhci_hcd vhci_hcd.1: stop threads
[  629.492371][  T155] vhci_hcd vhci_hcd.1: release socket
[  629.498724][  T155] vhci_hcd vhci_hcd.1: disconnect device
[  629.506850][  T155] vhci_hcd vhci_hcd.1: stop threads
[  629.512168][  T155] vhci_hcd vhci_hcd.1: release socket
[  629.518159][  T155] vhci_hcd vhci_hcd.1: disconnect device
[  629.524057][  T155] vhci_hcd vhci_hcd.1: stop threads
[  629.528535][T10843] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  629.530631][  T155] vhci_hcd vhci_hcd.1: release socket
[  629.547243][  T155] vhci_hcd vhci_hcd.1: disconnect device
[  629.553338][  T155] vhci_hcd vhci_hcd.1: stop threads
[  629.559512][T10843] usb 6-1: MIDIStreaming interface descriptor not found
[  629.592372][  T155] vhci_hcd vhci_hcd.1: release socket
[  629.604348][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2526'.
[  629.615029][  T155] vhci_hcd vhci_hcd.1: disconnect device
[  629.620850][  T155] vhci_hcd vhci_hcd.1: stop threads
[  629.634925][  T155] vhci_hcd vhci_hcd.1: release socket
[  629.644919][  T155] vhci_hcd vhci_hcd.1: disconnect device
[  629.665424][  T798] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  629.707085][T10843] usb 6-1: USB disconnect, device number 48
[  629.764628][T15132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2527'.
[  630.007694][  T798] usb 3-1: Using ep0 maxpacket: 32
[  630.020532][  T798] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  630.066158][  T798] usb 3-1: config 0 has no interface number 0
[  630.088547][  T798] usb 3-1: config 0 interface 12 has no altsetting 0
[  630.101198][T15116] vhci_hcd: connection closed
[  630.101536][ T8209] vhci_hcd vhci_hcd.1: stop threads
[  630.125816][  T798] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  630.140769][ T8209] vhci_hcd vhci_hcd.1: release socket
[  630.150043][  T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.160257][ T8209] vhci_hcd vhci_hcd.1: disconnect device
[  630.170689][  T798] usb 3-1: Product: syz
[  630.179989][  T798] usb 3-1: Manufacturer: syz
[  630.187994][  T798] usb 3-1: SerialNumber: syz
[  630.205581][  T798] usb 3-1: config 0 descriptor??
[  630.417532][T15119] netlink: 'syz.2.2524': attribute type 1 has an invalid length.
[  630.484267][T15119] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  630.522072][T15119] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  630.564842][T10843] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  630.631636][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'.
[  630.693233][T15140] bond7: (slave bridge1): Enslaving as an active interface with a down link
[  630.705016][T10843] usb 6-1: device descriptor read/64, error -71
[  630.964776][T10843] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  631.127254][T10843] usb 6-1: device descriptor read/64, error -71
[  631.235084][T10843] usb usb6-port1: attempt power cycle
[  631.524734][ T5922] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  631.584684][T10843] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  631.607194][T10843] usb 6-1: device descriptor read/8, error -71
[  631.674940][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  631.682130][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  631.691393][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.707814][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400
[  631.718035][ T5922] pvrusb2: **********
[  631.722097][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  631.732467][ T5922] pvrusb2: Important functionality might not be entirely working.
[  631.740566][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  631.752612][ T5922] pvrusb2: **********
[  631.844688][T10843] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  631.886464][T10843] usb 6-1: device descriptor read/8, error -71
[  631.907575][ T2347] pvrusb2: Invalid write control endpoint
[  631.971151][ T2347] pvrusb2: Invalid write control endpoint
[  631.982200][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  632.001699][T10843] usb usb6-port1: unable to enumerate USB device
[  632.008634][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  632.017481][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  632.027941][ T2347] pvrusb2: Device being rendered inoperable
[  632.039709][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  632.047317][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  632.076423][ T2347] pvrusb2: Attached sub-driver cx25840
[  632.082291][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  632.115041][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  632.148281][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'.
[  632.164497][T10843] usb 2-1: USB disconnect, device number 17
[  632.353091][  T798] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71
[  632.380513][  T798] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  632.416372][  T798] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  632.450803][  T798] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  632.493500][  T798] usb 3-1: USB disconnect, device number 31
[  632.946435][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'.
[  633.023978][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2542'.
[  633.273263][T15210] input: syz1 as /devices/virtual/input/input86
[  633.681576][T15223] FAULT_INJECTION: forcing a failure.
[  633.681576][T15223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.780564][T15223] CPU: 1 UID: 0 PID: 15223 Comm: syz.1.2546 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  633.780598][T15223] Tainted: [L]=SOFTLOCKUP
[  633.780603][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  633.780612][T15223] Call Trace:
[  633.780618][T15223]  <TASK>
[  633.780625][T15223]  dump_stack_lvl+0xe8/0x150
[  633.780648][T15223]  should_fail_ex+0x412/0x560
[  633.780673][T15223]  _copy_to_user+0x31/0xb0
[  633.780691][T15223]  simple_read_from_buffer+0xe1/0x170
[  633.780715][T15223]  proc_fail_nth_read+0x1bb/0x230
[  633.780737][T15223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  633.780758][T15223]  ? rw_verify_area+0x2a6/0x4d0
[  633.780773][T15223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  633.780794][T15223]  vfs_read+0x20c/0xa70
[  633.780807][T15223]  ? fdget_pos+0x246/0x320
[  633.780822][T15223]  ? __pfx___mutex_lock+0x10/0x10
[  633.780842][T15223]  ? __pfx_vfs_read+0x10/0x10
[  633.780857][T15223]  ? __fget_files+0x2a/0x420
[  633.780871][T15223]  ? __fget_files+0x3a0/0x420
[  633.780882][T15223]  ? __fget_files+0x2a/0x420
[  633.780899][T15223]  ksys_read+0x150/0x270
[  633.780915][T15223]  ? __pfx_ksys_read+0x10/0x10
[  633.780936][T15223]  do_syscall_64+0x14d/0xf80
[  633.780953][T15223]  ? trace_irq_disable+0x3b/0x150
[  633.780965][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.780978][T15223]  ? clear_bhb_loop+0x40/0x90
[  633.780994][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.781008][T15223] RIP: 0033:0x7f7519d5d04e
[  633.781022][T15223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  633.781034][T15223] RSP: 002b:00007f751ac3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  633.781049][T15223] RAX: ffffffffffffffda RBX: 00007f751ac3e6c0 RCX: 00007f7519d5d04e
[  633.781059][T15223] RDX: 000000000000000f RSI: 00007f751ac3e0a0 RDI: 0000000000000004
[  633.781068][T15223] RBP: 00007f751ac3e090 R08: 0000000000000000 R09: 0000000000000000
[  633.781076][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.781084][T15223] R13: 00007f751a016038 R14: 00007f751a015fa0 R15: 00007f751a13fa48
[  633.781104][T15223]  </TASK>
[  634.158440][T10833] usb 6-1: new full-speed USB device number 53 using dummy_hcd
[  634.275534][T10834] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  634.386005][T10833] usb 6-1: config 0 has an invalid interface number: 39 but max is 0
[  634.394286][T10833] usb 6-1: config 0 has no interface number 0
[  634.410641][T10833] usb 6-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  634.431762][T10833] usb 6-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a
[  634.454279][T10833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.491352][T10833] usb 6-1: Product: syz
[  634.512851][T10833] usb 6-1: Manufacturer: syz
[  634.555853][T10833] usb 6-1: SerialNumber: syz
[  634.583524][T10833] usb 6-1: config 0 descriptor??
[  634.834326][T15222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.864549][T15222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.975477][ T5948] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  635.161665][ T5948] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  635.181488][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.222947][ T5948] usb 3-1: config 0 descriptor??
[  635.440812][ T5948] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  635.444958][  T798] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  635.555921][T10842] usb usb36-port1: attempt power cycle
[  635.614672][  T798] usb 5-1: Using ep0 maxpacket: 16
[  635.628139][  T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  635.654655][  T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  635.693972][ T5948] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  635.720860][  T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  635.722281][ T5948] [drm] Initialized udl on minor 2
[  635.754664][  T798] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  635.815405][  T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.859871][ T5948] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  635.887928][ T5948] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  635.897498][ T5949] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  635.922623][T10833] usb 6-1: USB disconnect, device number 53
[  635.939415][ T5949] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  635.969628][ T5948] usb 3-1: USB disconnect, device number 32
[  635.990163][ T5949] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  635.998835][  T798] usb 5-1: config 0 descriptor??
[  636.067346][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  636.126903][T10842] usb usb36-port1: unable to enumerate USB device
[  636.324796][T10833] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  636.468742][T10833] usb 6-1: device descriptor read/64, error -71
[  636.640958][T15284] kvm: kvm [15282]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9e2ec0000000
[  636.650743][T15284] kvm: kvm [15282]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc928c0000000
[  636.672725][T15284] kvm: kvm [15282]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xe840c0000000
[  636.691565][T15284] kvm: kvm [15282]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9d35c0000000
[  636.701620][T15284] kvm: kvm [15282]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x814fc0000000
[  636.724708][T10833] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  636.757724][  T798] usbhid 5-1:0.0: can't add hid device: -71
[  636.765093][  T798] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  636.782813][  T798] usb 5-1: USB disconnect, device number 29
[  636.801466][T15289] netlink: 'syz.1.2561': attribute type 62 has an invalid length.
[  636.840131][T15289] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[15289]
[  636.855542][T10833] usb 6-1: device descriptor read/64, error -71
[  636.975434][T10833] usb usb6-port1: attempt power cycle
[  637.103813][T15293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2562'.
[  637.117404][T15293] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  637.404863][T10833] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  637.426847][T10833] usb 6-1: device descriptor read/8, error -71
[  637.664705][T10833] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  637.685665][T10833] usb 6-1: device descriptor read/8, error -71
[  637.935261][T10833] usb usb6-port1: unable to enumerate USB device
[  638.114998][T15303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  638.454674][T10842] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  638.594755][T10842] usb 3-1: device descriptor read/64, error -71
[  638.834699][T10842] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  638.984641][T10842] usb 3-1: device descriptor read/64, error -71
[  639.095414][T10842] usb usb3-port1: attempt power cycle
[  639.438193][T15329] netlink: 'syz.4.2576': attribute type 1 has an invalid length.
[  639.446291][T10833] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[  639.454677][T10842] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  639.478559][T10842] usb 3-1: device descriptor read/8, error -71
[  639.500927][T15329] 8021q: adding VLAN 0 to HW filter on device bond5
[  639.571255][T15333] bond5: (slave veth5): Enslaving as an active interface with a down link
[  639.734639][T10842] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  640.036525][T10833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  640.087006][T10833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  640.089545][T15333] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2576'.
[  640.109449][T10833] usb 6-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[  640.131209][T15329] bond5: (slave dummy0): making interface the new active one
[  640.135179][T10842] usb 3-1: device descriptor read/8, error -71
[  640.139014][T10833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.173485][T10833] usb 6-1: config 0 descriptor??
[  640.184274][T15329] dummy0: entered promiscuous mode
[  640.192867][T15319] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  640.205038][T15329] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  640.241850][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'.
[  640.261692][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2575'.
[  640.271576][T10842] usb usb3-port1: unable to enumerate USB device
[  640.305070][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'.
[  640.332588][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2575'.
[  640.343412][T15333] bond5: (slave dummy0): Releasing active interface
[  640.360924][T15333] dummy0 (unregistering): left promiscuous mode
[  640.465049][T10842] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  640.608296][T15319] netlink: 'syz.5.2570': attribute type 10 has an invalid length.
[  640.624712][T10842] usb 5-1: Using ep0 maxpacket: 32
[  640.632503][T10842] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  640.637326][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.664750][T10842] usb 5-1: config 0 has no interface number 0
[  640.665916][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.698155][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.704983][T10842] usb 5-1: config 0 interface 12 has no altsetting 0
[  640.711900][T10842] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  640.736039][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.738829][T10842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.761863][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.789525][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.804846][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.804846][T10842] usb 5-1: Product: syz
[  640.804876][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.811750][T10842] usb 5-1: Manufacturer: syz
[  640.811767][T10842] usb 5-1: SerialNumber: syz
[  640.835303][T10842] usb 5-1: config 0 descriptor??
[  640.875560][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.882684][T10833] sony 0003:12BA:0100.002C: unknown main item tag 0x0
[  640.903434][T10833] sony 0003:12BA:0100.002C: hidraw0: USB HID v7f.fd Device [HID 12ba:0100] on usb-dummy_hcd.5-1/input0
[  640.935491][T10833] sony 0003:12BA:0100.002C: failed to claim input
[  640.972943][T10833] usb 6-1: USB disconnect, device number 58
[  641.049590][T15347] fido_id[15347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  641.451061][T15329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.465247][T15329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.946412][T15377] netlink: 'syz.5.2583': attribute type 29 has an invalid length.
[  641.955978][ T5948] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  642.134279][T10842] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71
[  642.178256][T10842] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  642.189272][T10842] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  642.199350][T10842] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  642.213638][ T5948] usb 3-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40
[  642.234725][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.236972][T10842] usb 5-1: USB disconnect, device number 30
[  642.378290][ T5948] usb 3-1: Product: �
[  642.389462][ T5948] usb 3-1: Manufacturer: Э
[  642.400792][ T5948] usb 3-1: SerialNumber: syz
[  642.626009][T15371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.639827][T15371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.674735][ T5831] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  642.721406][ T5948] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  642.741294][ T5948] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  642.755650][ T5948] usb 3-1: 2:1 : invalid channels 0
[  642.826729][ T5831] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  642.844874][ T5831] usb 2-1: config 0 has no interface number 0
[  642.862306][ T5948] usb 3-1: USB disconnect, device number 37
[  642.869919][ T5831] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  642.886287][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.920420][ T5831] usb 2-1: Product: syz
[  642.928543][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  642.947217][ T5831] usb 2-1: Manufacturer: syz
[  642.965710][ T5831] usb 2-1: SerialNumber: syz
[  642.986332][ T5831] usb 2-1: config 0 descriptor??
[  643.055752][T10833] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  643.214661][T10833] usb 5-1: Using ep0 maxpacket: 16
[  643.221877][T10833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  643.233259][T10833] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  643.242780][T10833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.258877][T10833] usb 5-1: config 0 descriptor??
[  643.265492][T10842] usb 6-1: new full-speed USB device number 59 using dummy_hcd
[  643.429310][T10842] usb 6-1: config 150 has an invalid interface number: 204 but max is 1
[  643.438801][T10842] usb 6-1: config 150 has no interface number 0
[  643.445823][T10842] usb 6-1: config 150 interface 204 has no altsetting 0
[  643.456117][T10842] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  643.466580][T10842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.488138][T10842] usb 6-1: Product: syz
[  643.492506][T10842] usb 6-1: Manufacturer: syz
[  643.497759][T10842] usb 6-1: SerialNumber: syz
[  643.697025][T10833] corsair 0003:1B1C:1B02.002D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0
[  643.712153][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.721651][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.736170][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.752763][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.770266][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.788828][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.802858][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.818142][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.830512][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.842918][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.876714][T10842] xr_serial 6-1:150.204: xr_serial converter detected
[  643.885806][T10833] corsair 0003:1B1C:1B02.002D: Failed to get K90 initial state (error -32).
[  643.899558][T10842] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  643.913066][T10842] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  643.942132][  T798] usb 5-1: USB disconnect, device number 31
[  643.955004][T10842] usb 6-1: USB disconnect, device number 59
[  643.990687][T10842] xr_serial 6-1:150.204: device disconnected
[  644.438755][ T5831] usb 2-1: Firmware version (0.0) predates our first public release.
[  644.450056][ T5831] usb 2-1: Please update to version 0.2 or newer
[  644.754856][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  644.854756][ T5831] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  644.864619][  T798] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  645.017637][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short
[  645.027165][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  645.041405][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  645.050208][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  645.062715][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  645.074416][  T798] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  645.084997][  T798] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  645.093398][  T798] usb 6-1: Manufacturer: syz
[  645.093833][ T5831] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40
[  645.111462][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.116380][  T798] usb 6-1: config 0 descriptor??
[  645.147751][ T5831] usb 3-1: Product: syz
[  645.189579][ T5831] usb 3-1: Manufacturer: syz
[  645.194979][ T5831] usb 3-1: SerialNumber: syz
[  645.211312][ T5831] usb 3-1: selecting invalid altsetting 1
[  645.221125][ T5831] usb 3-1: unit 6 not found!
[  645.463949][ T5831] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  645.482588][T10833] usb 2-1: USB disconnect, device number 18
[  645.495193][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'.
[  645.543945][ T5831] usb 3-1: USB disconnect, device number 38
[  645.558531][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2598'.
[  645.646238][ T7017] udevd[7017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  645.693271][  T798] usbhid 6-1:0.0: can't add hid device: -71
[  645.709396][  T798] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  645.784930][  T798] usb 6-1: USB disconnect, device number 60
[  646.104648][T10833] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  646.254726][T10833] usb 2-1: device descriptor read/64, error -71
[  646.254743][  T798] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  646.414707][  T798] usb 3-1: Using ep0 maxpacket: 8
[  646.431109][  T798] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed
[  646.444780][  T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.460952][  T798] usb 3-1: Product: syz
[  646.471133][  T798] usb 3-1: Manufacturer: syz
[  646.478154][  T798] usb 3-1: SerialNumber: syz
[  646.509975][  T798] usb 3-1: config 0 descriptor??
[  646.524843][T10833] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  646.554805][ T5831] usb 6-1: new low-speed USB device number 61 using dummy_hcd
[  646.628620][T15455] bridge_slave_0: left allmulticast mode
[  646.664921][T15455] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.675406][T10833] usb 2-1: device descriptor read/64, error -71
[  646.704972][ T5831] usb 6-1: Invalid ep0 maxpacket: 16
[  646.741228][  T798] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  646.774659][  T798] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  646.785588][  T798] usbserial_generic 3-1:0.0: device has no bulk endpoints
[  646.795631][T10833] usb usb2-port1: attempt power cycle
[  646.806174][  T798] usb 3-1: USB disconnect, device number 39
[  646.834832][ T5831] usb 6-1: new low-speed USB device number 62 using dummy_hcd
[  646.994617][ T5831] usb 6-1: Invalid ep0 maxpacket: 16
[  647.005376][ T5831] usb usb6-port1: attempt power cycle
[  647.136176][T10833] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  647.175520][T10833] usb 2-1: device descriptor read/8, error -71
[  647.346887][ T5831] usb 6-1: new low-speed USB device number 63 using dummy_hcd
[  647.367768][T15469] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  647.385362][ T5831] usb 6-1: Invalid ep0 maxpacket: 16
[  647.416638][T10833] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  647.446583][T10833] usb 2-1: device descriptor read/8, error -71
[  647.514890][ T5831] usb 6-1: new low-speed USB device number 64 using dummy_hcd
[  647.535322][ T5831] usb 6-1: Invalid ep0 maxpacket: 16
[  647.550054][ T5831] usb usb6-port1: unable to enumerate USB device
[  647.557569][T10833] usb usb2-port1: unable to enumerate USB device
[  647.635236][  T798] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  647.648519][T15475] FAULT_INJECTION: forcing a failure.
[  647.648519][T15475] name failslab, interval 1, probability 0, space 0, times 0
[  647.661286][T15475] CPU: 0 UID: 0 PID: 15475 Comm: syz.4.2612 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  647.661317][T15475] Tainted: [L]=SOFTLOCKUP
[  647.661327][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  647.661337][T15475] Call Trace:
[  647.661344][T15475]  <TASK>
[  647.661351][T15475]  dump_stack_lvl+0xe8/0x150
[  647.661375][T15475]  should_fail_ex+0x412/0x560
[  647.661400][T15475]  should_failslab+0xa8/0x100
[  647.661419][T15475]  __kmalloc_cache_noprof+0x88/0x660
[  647.661436][T15475]  ? __rdma_create_id+0x65/0x7b0
[  647.661451][T15475]  ? __pfx_ucma_event_handler+0x10/0x10
[  647.661465][T15475]  ? __pfx_ucma_event_handler+0x10/0x10
[  647.661478][T15475]  __rdma_create_id+0x65/0x7b0
[  647.661491][T15475]  ? do_raw_spin_unlock+0xf5/0x210
[  647.661506][T15475]  ? __pfx_ucma_event_handler+0x10/0x10
[  647.661519][T15475]  rdma_create_user_id+0x81/0xc0
[  647.661534][T15475]  ucma_create_id+0x22e/0x380
[  647.661555][T15475]  ? __pfx_ucma_create_id+0x10/0x10
[  647.661584][T15475]  ucma_write+0x24e/0x2f0
[  647.661605][T15475]  ? __pfx_ucma_write+0x10/0x10
[  647.661623][T15475]  ? security_file_permission+0x75/0x260
[  647.661642][T15475]  ? rw_verify_area+0x255/0x4d0
[  647.661660][T15475]  vfs_writev+0x4bd/0x990
[  647.661679][T15475]  ? __pfx_ucma_write+0x10/0x10
[  647.661701][T15475]  ? __pfx_vfs_writev+0x10/0x10
[  647.661727][T15475]  ? __fget_files+0x2a/0x420
[  647.661742][T15475]  ? __fget_files+0x3a0/0x420
[  647.661753][T15475]  ? __fget_files+0x2a/0x420
[  647.661770][T15475]  do_writev+0x154/0x2e0
[  647.661789][T15475]  ? __pfx_do_writev+0x10/0x10
[  647.661814][T15475]  do_syscall_64+0x14d/0xf80
[  647.661832][T15475]  ? trace_irq_disable+0x3b/0x150
[  647.661844][T15475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.661858][T15475]  ? clear_bhb_loop+0x40/0x90
[  647.661896][T15475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.661916][T15475] RIP: 0033:0x7f97adb9c819
[  647.661936][T15475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.661953][T15475] RSP: 002b:00007f97aeb02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  647.661968][T15475] RAX: ffffffffffffffda RBX: 00007f97ade15fa0 RCX: 00007f97adb9c819
[  647.661978][T15475] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009
[  647.661987][T15475] RBP: 00007f97aeb02090 R08: 0000000000000000 R09: 0000000000000000
[  647.661995][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.662004][T15475] R13: 00007f97ade16038 R14: 00007f97ade15fa0 R15: 00007f97adf3fa48
[  647.662024][T15475]  </TASK>
[  648.015783][  T798] usb 3-1: Using ep0 maxpacket: 32
[  648.037222][  T798] usb 3-1: config 3 has an invalid interface number: 171 but max is 29
[  648.049288][  T798] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 30
[  648.059080][  T798] usb 3-1: config 3 has no interface number 0
[  648.065727][  T798] usb 3-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0
[  648.076490][  T798] usb 3-1: config 3 interface 171 has no altsetting 0
[  648.086304][  T798] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5
[  648.095824][  T798] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  648.104029][  T798] usb 3-1: Product: syz
[  648.108616][  T798] usb 3-1: Manufacturer: syz
[  648.113243][  T798] usb 3-1: SerialNumber: syz
[  648.256007][T10833] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  648.331453][  T798] as10x_usb: device has been detected
[  648.337670][  T798] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  648.352412][  T798] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  648.368246][  T798] as10x_usb: error during firmware upload part1
[  648.375940][  T798] Registered device Sky IT Digital Key (green led)
[  648.379561][  T798] usb 3-1: USB disconnect, device number 40
[  648.414101][  T798] Unregistered device Sky IT Digital Key (green led)
[  648.421107][  T798] as10x_usb: device has been disconnected
[  648.443483][T10833] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  648.454942][T10833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.463249][T10833] usb 5-1: Product: syz
[  648.468523][T10833] usb 5-1: Manufacturer: syz
[  648.473229][T10833] usb 5-1: SerialNumber: syz
[  648.484670][T10833] usb 5-1: config 0 descriptor??
[  648.493617][T10833] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  650.014938][T10833] gspca_sunplus: reg_w_riv err -110
[  650.020474][T10833] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  650.207766][T15512] syzkaller0: entered promiscuous mode
[  650.217010][T15512] syzkaller0: entered allmulticast mode
[  650.272513][T15510] FAULT_INJECTION: forcing a failure.
[  650.272513][T15510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.288937][T15510] CPU: 1 UID: 0 PID: 15510 Comm: syz.5.2624 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  650.288960][T15510] Tainted: [L]=SOFTLOCKUP
[  650.288965][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  650.288974][T15510] Call Trace:
[  650.288979][T15510]  <TASK>
[  650.288985][T15510]  dump_stack_lvl+0xe8/0x150
[  650.289009][T15510]  should_fail_ex+0x412/0x560
[  650.289034][T15510]  _copy_to_user+0x31/0xb0
[  650.289051][T15510]  ucma_create_id+0x2de/0x380
[  650.289074][T15510]  ? __pfx_ucma_create_id+0x10/0x10
[  650.289103][T15510]  ucma_write+0x24e/0x2f0
[  650.289124][T15510]  ? __pfx_ucma_write+0x10/0x10
[  650.289142][T15510]  ? security_file_permission+0x75/0x260
[  650.289162][T15510]  ? rw_verify_area+0x255/0x4d0
[  650.289179][T15510]  vfs_writev+0x4bd/0x990
[  650.289199][T15510]  ? __pfx_ucma_write+0x10/0x10
[  650.289220][T15510]  ? __pfx_vfs_writev+0x10/0x10
[  650.289247][T15510]  ? __fget_files+0x2a/0x420
[  650.289261][T15510]  ? __fget_files+0x3a0/0x420
[  650.289273][T15510]  ? __fget_files+0x2a/0x420
[  650.289289][T15510]  do_writev+0x154/0x2e0
[  650.289309][T15510]  ? __pfx_do_writev+0x10/0x10
[  650.289333][T15510]  do_syscall_64+0x14d/0xf80
[  650.289351][T15510]  ? trace_irq_disable+0x3b/0x150
[  650.289363][T15510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.289376][T15510]  ? clear_bhb_loop+0x40/0x90
[  650.289397][T15510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.289410][T15510] RIP: 0033:0x7f168819c819
[  650.289423][T15510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.289435][T15510] RSP: 002b:00007f1688fc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  650.289450][T15510] RAX: ffffffffffffffda RBX: 00007f1688415fa0 RCX: 00007f168819c819
[  650.289460][T15510] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009
[  650.289469][T15510] RBP: 00007f1688fc1090 R08: 0000000000000000 R09: 0000000000000000
[  650.289477][T15510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.289485][T15510] R13: 00007f1688416038 R14: 00007f1688415fa0 R15: 00007f168853fa48
[  650.289505][T15510]  </TASK>
[  650.605673][T15518] sctp: [Deprecated]: syz.5.2627 (pid 15518) Use of int in max_burst socket option.
[  650.605673][T15518] Use struct sctp_assoc_value instead
[  650.690505][T15521] netlink: 'syz.5.2628': attribute type 41 has an invalid length.
[  651.008565][  T798] usb 5-1: USB disconnect, device number 32
[  651.014964][T10840] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  651.074905][T10833] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  651.175888][T10840] usb 2-1: Using ep0 maxpacket: 16
[  651.214908][T10833] usb 6-1: device descriptor read/64, error -71
[  651.228069][T10840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.240507][T10840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.252003][T10840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  651.286181][T10840] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  651.301002][T10840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.318311][T10840] usb 2-1: config 0 descriptor??
[  651.454624][T10833] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  651.584618][T10833] usb 6-1: device descriptor read/64, error -71
[  651.591134][ T5831] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  651.704883][T10833] usb usb6-port1: attempt power cycle
[  651.754880][ T5831] usb 3-1: Using ep0 maxpacket: 32
[  651.762934][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short
[  651.775344][ T5831] usb 3-1: config 1 interface 0 has no altsetting 0
[  651.788113][ T5831] usb 3-1: string descriptor 0 read error: -22
[  651.795354][ T5831] usb 3-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.40
[  651.804692][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.045460][T10833] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  652.078305][T10833] usb 6-1: device descriptor read/8, error -71
[  652.242810][T15535] tipc: Can't bind to reserved service type 1
[  652.336258][ T5831] hid_parser_main: 214 callbacks suppressed
[  652.336297][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.350234][T10833] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  652.367440][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.375471][T10833] usb 6-1: device descriptor read/8, error -71
[  652.381959][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.389327][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.396496][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.404138][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.411929][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.428323][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.437793][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.454719][ T5831] evision 0003:320F:5041.002E: unknown main item tag 0x0
[  652.503030][T10833] usb usb6-port1: unable to enumerate USB device
[  652.552678][ T5831] evision 0003:320F:5041.002E: hidraw0: USB HID v0.05 Device [HID 320f:5041] on usb-dummy_hcd.2-1/input0
[  652.572520][ T5831] usb 3-1: USB disconnect, device number 41
[  652.657791][T15545] fido_id[15545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  652.862418][T15554] FAULT_INJECTION: forcing a failure.
[  652.862418][T15554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  652.876997][T15554] CPU: 0 UID: 0 PID: 15554 Comm: syz.4.2637 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  652.877029][T15554] Tainted: [L]=SOFTLOCKUP
[  652.877037][T15554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  652.877053][T15554] Call Trace:
[  652.877059][T15554]  <TASK>
[  652.877066][T15554]  dump_stack_lvl+0xe8/0x150
[  652.877094][T15554]  should_fail_ex+0x412/0x560
[  652.877141][T15554]  _copy_from_user+0x2d/0xb0
[  652.877167][T15554]  ucma_write+0x15d/0x2f0
[  652.877198][T15554]  ? __pfx_ucma_write+0x10/0x10
[  652.877225][T15554]  ? iov_iter_iovec_advance+0x1e0/0x290
[  652.877246][T15554]  vfs_writev+0x4bd/0x990
[  652.877283][T15554]  ? __pfx_ucma_write+0x10/0x10
[  652.877321][T15554]  ? __pfx_vfs_writev+0x10/0x10
[  652.877359][T15554]  ? __fget_files+0x2a/0x420
[  652.877381][T15554]  ? __fget_files+0x3a0/0x420
[  652.877393][T15554]  ? __fget_files+0x2a/0x420
[  652.877411][T15554]  do_writev+0x154/0x2e0
[  652.877453][T15554]  ? __pfx_do_writev+0x10/0x10
[  652.877490][T15554]  do_syscall_64+0x14d/0xf80
[  652.877519][T15554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.877534][T15554]  ? clear_bhb_loop+0x40/0x90
[  652.877551][T15554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.877566][T15554] RIP: 0033:0x7f97adb9c819
[  652.877616][T15554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  652.877636][T15554] RSP: 002b:00007f97aeb02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  652.877659][T15554] RAX: ffffffffffffffda RBX: 00007f97ade15fa0 RCX: 00007f97adb9c819
[  652.877674][T15554] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009
[  652.877693][T15554] RBP: 00007f97aeb02090 R08: 0000000000000000 R09: 0000000000000000
[  652.877714][T15554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  652.877722][T15554] R13: 00007f97ade16038 R14: 00007f97ade15fa0 R15: 00007f97adf3fa48
[  652.877744][T15554]  </TASK>
[  653.269626][T15561] input: syz0 as /devices/virtual/input/input88
[  653.525082][T10842] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  653.681762][T10842] usb 5-1: config 0 has no interfaces?
[  653.690585][T10842] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  653.703602][T10842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.712486][T10840] usbhid 2-1:0.0: can't add hid device: -71
[  653.721335][T10840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  653.736350][T10842] usb 5-1: Product: syz
[  653.750804][T10842] usb 5-1: Manufacturer: syz
[  653.760776][T10842] usb 5-1: SerialNumber: syz
[  653.767983][T10840] usb 2-1: USB disconnect, device number 23
[  653.791391][T10842] usb 5-1: config 0 descriptor??
[  654.009015][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'.
[  654.062803][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.089687][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.108122][ T5831] usb 5-1: USB disconnect, device number 33
[  654.164631][T10840] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  654.430912][T10840] usb 3-1: Using ep0 maxpacket: 16
[  654.437686][T15599] xt_ecn: cannot match TCP bits for non-tcp packets
[  654.459541][T10840] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.478199][T10840] usb 3-1: config 0 interface 0 has no altsetting 0
[  654.503291][T10840] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  654.523658][T15602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.548783][T10840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.617903][T10840] usb 3-1: config 0 descriptor??
[  655.189694][T15620] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  655.250891][T10840] usbhid 3-1:0.0: can't add hid device: -71
[  655.260239][T10840] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  655.307464][T10840] usb 3-1: USB disconnect, device number 42
[  655.515096][T10833] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  655.685136][T10833] usb 5-1: Using ep0 maxpacket: 8
[  655.692170][T10833] usb 5-1: config 0 has an invalid interface number: 187 but max is 0
[  655.700666][T10833] usb 5-1: config 0 has no interface number 0
[  655.706868][T10833] usb 5-1: config 0 interface 187 has no altsetting 0
[  655.713772][T10833] usb 5-1: New USB device found, idVendor=c942, idProduct=2c0f, bcdDevice=47.09
[  655.726668][T10833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.744197][T10833] usb 5-1: config 0 descriptor??
[  655.827669][T15640] syzkaller0: entered promiscuous mode
[  655.833336][T15640] syzkaller0: entered allmulticast mode
[  655.896210][T15646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  656.036491][T10833] usb 5-1: string descriptor 0 read error: -71
[  656.043673][T10833] usb-storage 5-1:0.187: USB Mass Storage device detected
[  656.101272][T15650] loop5: detected capacity change from 0 to 7
[  656.110004][ T5840]  loop5:
[  656.113035][ T5840] loop5: partition table partially beyond EOD, truncated
[  656.135489][T15650]  loop5:
[  656.138561][T15650] loop5: partition table partially beyond EOD, truncated
[  656.337798][T10833] usb 5-1: USB disconnect, device number 34
[  656.694788][T10834] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  656.864774][T10834] usb 3-1: Using ep0 maxpacket: 16
[  656.888214][T10834] usb 3-1: config 0 has no interfaces?
[  656.920677][T10834] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  656.954670][T10834] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  656.962842][T10834] usb 3-1: Manufacturer: syz
[  656.985645][T10834] usb 3-1: config 0 descriptor??
[  657.218971][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'.
[  657.253121][T10842] usb 3-1: USB disconnect, device number 43
[  657.318260][T15682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.335200][T10834] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  657.526501][T10834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  657.536271][T10834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  657.554308][T10834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  657.564740][T10840] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  657.574044][T10834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  657.610433][T10834] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  657.620045][T10834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.641967][T10834] usb 6-1: config 0 descriptor??
[  657.714667][T10840] usb 5-1: device descriptor read/64, error -71
[  657.857497][T15675] program syz.5.2665 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  657.868548][T10834] hdpvr 6-1:0.0: firmware version 0x26 dated S¶zŸŒ‹“î‹ŽhHfÐï3;¨&X^„œ	wÒΖŠg/ƒµn#»†
[  657.891798][T10834] hdpvr 6-1:0.0: untested firmware, the driver might not work.
[  657.974659][T10840] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  657.984874][T15693] FAULT_INJECTION: forcing a failure.
[  657.984874][T15693] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  658.008532][T15693] CPU: 0 UID: 0 PID: 15693 Comm: syz.2.2670 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  658.008559][T15693] Tainted: [L]=SOFTLOCKUP
[  658.008565][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  658.008575][T15693] Call Trace:
[  658.008582][T15693]  <TASK>
[  658.008590][T15693]  dump_stack_lvl+0xe8/0x150
[  658.008620][T15693]  should_fail_ex+0x412/0x560
[  658.008650][T15693]  _copy_from_user+0x2d/0xb0
[  658.008670][T15693]  kstrtouint_from_user+0xd6/0x180
[  658.008698][T15693]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  658.008736][T15693]  proc_fail_nth_write+0x8e/0x210
[  658.008763][T15693]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  658.008791][T15693]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  658.008819][T15693]  vfs_write+0x29a/0xb90
[  658.008846][T15693]  ? __pfx_vfs_write+0x10/0x10
[  658.008867][T15693]  ? __fget_files+0x2a/0x420
[  658.008886][T15693]  ? __fget_files+0x3a0/0x420
[  658.008901][T15693]  ? __fget_files+0x2a/0x420
[  658.008924][T15693]  ksys_write+0x150/0x270
[  658.008946][T15693]  ? __pfx_ksys_write+0x10/0x10
[  658.008976][T15693]  do_syscall_64+0x14d/0xf80
[  658.008999][T15693]  ? trace_irq_disable+0x3b/0x150
[  658.009023][T15693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.009042][T15693]  ? clear_bhb_loop+0x40/0x90
[  658.009064][T15693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.009083][T15693] RIP: 0033:0x7fed4155d04e
[  658.009101][T15693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  658.009116][T15693] RSP: 002b:00007fed4243ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  658.009136][T15693] RAX: ffffffffffffffda RBX: 00007fed424406c0 RCX: 00007fed4155d04e
[  658.009150][T15693] RDX: 0000000000000001 RSI: 00007fed424400a0 RDI: 000000000000000c
[  658.009162][T15693] RBP: 00007fed42440090 R08: 0000000000000000 R09: 0000000000000000
[  658.009173][T15693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.009184][T15693] R13: 00007fed41816128 R14: 00007fed41816090 R15: 00007fed4193fa48
[  658.009213][T15693]  </TASK>
[  658.116153][T10840] usb 5-1: device descriptor read/64, error -71
[  658.320894][T15695] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  658.504707][T10840] usb usb5-port1: attempt power cycle
[  658.621664][T10834] hdpvr 6-1:0.0: Could not setup controls
[  658.640600][T10834] hdpvr 6-1:0.0: registering videodev failed
[  658.724976][T10834] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71
[  658.742141][T10834] usb 6-1: USB disconnect, device number 69
[  658.904884][T10840] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  658.925149][T10840] usb 5-1: device descriptor read/8, error -71
[  658.974630][  T798] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  659.167204][T10840] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  659.204941][  T798] usb 2-1: Using ep0 maxpacket: 16
[  659.225910][T10840] usb 5-1: device descriptor read/8, error -71
[  659.232840][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.244455][  T798] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  659.255778][  T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.406418][T10840] usb usb5-port1: unable to enumerate USB device
[  659.452344][  T798] usb 2-1: config 0 descriptor??
[  659.980811][  T798] corsair 0003:1B1C:1B02.002F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  660.028900][  T798] corsair 0003:1B1C:1B02.002F: Failed to get K90 initial state (error -32).
[  660.186444][T15739] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  660.440596][T15742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  660.454704][  T798] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  660.613043][  T798] usb 3-1: Using ep0 maxpacket: 32
[  660.639721][  T798] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  660.679178][  T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.725739][  T798] usb 3-1: Product: syz
[  660.737027][  T798] usb 3-1: Manufacturer: syz
[  660.752897][  T798] usb 3-1: SerialNumber: syz
[  660.785241][  T798] usb 3-1: config 0 descriptor??
[  660.794056][T15748] fuse: Bad value for 'user_id'
[  660.831642][T15748] fuse: Bad value for 'user_id'
[  660.854053][T15749] fuse: Unknown parameter 'smackfshat'
[  661.230625][  T798] airspy 3-1:0.0: Board ID: 00
[  661.424577][  T798] airspy 3-1:0.0: Firmware version: 
[  661.768360][T10840] usb 2-1: USB disconnect, device number 24
[  662.675098][  T798] airspy 3-1:0.0: usb_control_msg() failed -110 request 12
[  662.688127][  T798] airspy 3-1:0.0: Registered as swradio24
[  662.704103][  T798] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  663.037745][  T798] usb 3-1: USB disconnect, device number 44
[  663.115652][T10834] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  663.306452][T10834] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  663.315639][T10834] usb 5-1: config 0 has no interface number 0
[  663.330672][T10834] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  663.350958][T15802] loop4: detected capacity change from 0 to 1
[  663.357328][T10834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.366264][T15802] Dev loop4: unable to read RDB block 1
[  663.372533][T15802]  loop4: unable to read partition table
[  663.382103][T10834] usb 5-1: Product: syz
[  663.387323][T15802] loop4: partition table beyond EOD, truncated
[  663.407195][T10834] usb 5-1: Manufacturer: syz
[  663.416945][T10834] usb 5-1: SerialNumber: syz
[  663.419238][T15802] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5)
[  663.548707][T10834] usb 5-1: config 0 descriptor??
[  663.565254][T15806] syzkaller0: entered promiscuous mode
[  663.571196][T15806] syzkaller0: entered allmulticast mode
[  663.758963][T10834] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  663.774491][T10834] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  663.801724][T10834] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  663.810473][T10834] usb 5-1: media controller created
[  663.835607][T10834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  664.355865][ T5831] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  664.524679][ T5831] usb 3-1: Using ep0 maxpacket: 16
[  664.531955][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.546221][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  664.556837][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  664.571648][ T5831] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  664.581958][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.595369][ T5831] usb 3-1: config 0 descriptor??
[  664.734670][T10833] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  664.905084][T10833] usb 6-1: Using ep0 maxpacket: 8
[  664.913860][T10833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.931931][T10833] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  664.942617][T10833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.954952][T10833] usb 6-1: Product: syz
[  664.959304][T10833] usb 6-1: Manufacturer: syz
[  664.964067][T10833] usb 6-1: SerialNumber: syz
[  664.973783][T10833] usb 6-1: config 0 descriptor??
[  664.986367][T10833] gspca_main: stk014-2.14.0 probing 05e1:0893
[  664.992944][T10833] usb 6-1: selecting invalid altsetting 1
[  665.044354][T10834] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  665.051957][ T5831] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0030/input/input89
[  665.183745][T10833] gspca_stk014: init reg: 0x00
[  665.189064][T10834] usb 5-1: USB disconnect, device number 39
[  665.195534][T10833] stk014 6-1:0.0: probe with driver stk014 failed with error -5
[  665.443935][ T5831] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  665.475137][ T5831] usb 3-1: USB disconnect, device number 45
[  665.481475][T10840] usb 6-1: USB disconnect, device number 70
[  666.424676][T10840] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  666.579248][T10840] usb 6-1: config 0 has no interfaces?
[  666.588014][T10840] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  666.604656][T10840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.622765][T10840] usb 6-1: Product: syz
[  666.639548][T10840] usb 6-1: Manufacturer: syz
[  666.644251][T10840] usb 6-1: SerialNumber: syz
[  666.652579][T10840] usb 6-1: config 0 descriptor??
[  666.794683][T10840] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  666.907213][T15856] veth0_vlan: left promiscuous mode
[  666.913100][T15856] veth0_vlan: entered promiscuous mode
[  666.923281][T10833] usb 6-1: USB disconnect, device number 71
[  666.946250][T10840] usb 5-1: config 0 has an invalid interface number: 84 but max is 0
[  666.955724][T10840] usb 5-1: config 0 has no interface number 0
[  666.962377][T10840] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64
[  666.976810][T10840] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  666.988380][T10840] usb 5-1: config 0 interface 84 has no altsetting 0
[  666.995332][T10840] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05
[  667.005046][T10840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.036807][T10840] usb 5-1: config 0 descriptor??
[  667.042473][T15865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  667.060486][T10840] option 5-1:0.84: GSM modem (1-port) converter detected
[  667.290253][T15865] xt_hashlimit: size too large, truncated to 1048576
[  667.457645][T10833] usb 5-1: USB disconnect, device number 40
[  667.492137][T10833] option 5-1:0.84: device disconnected
[  667.756261][ T5831] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  667.884854][T10833] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  667.950628][ T5831] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  667.962514][ T5831] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  668.049950][ T5831] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.064686][T10833] usb 6-1: Using ep0 maxpacket: 8
[  668.089687][T10833] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  668.156634][T10833] usb 6-1: config 179 has no interface number 0
[  668.184972][T10833] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  668.200328][ T5831] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  668.225755][T15888] team0: entered allmulticast mode
[  668.230918][T15888] team_slave_0: entered allmulticast mode
[  668.236848][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  668.245316][T10833] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  668.274800][T15888] team_slave_1: entered allmulticast mode
[  668.283241][ T5831] usb 2-1: Product: syz
[  668.304820][ T5831] usb 2-1: Manufacturer: syz
[  668.309498][ T5831] usb 2-1: SerialNumber: syz
[  668.315059][T10833] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  668.335950][T10833] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  668.351802][ T5831] usb 2-1: config 0 descriptor??
[  668.381493][ T5831] usb 2-1: selecting invalid altsetting 0
[  668.393749][T10833] usb 6-1: config 179 interface 65 has no altsetting 0
[  668.441326][T10833] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  668.507203][T10840] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  668.510540][T10833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.614631][ T5831] usb 2-1: USB disconnect, device number 25
[  668.666495][T10840] usb 3-1: device descriptor read/64, error -71
[  668.745516][T15896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'.
[  668.793666][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  669.024671][T10840] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  669.072393][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2718'.
[  669.154748][T10840] usb 3-1: device descriptor read/64, error -71
[  669.265641][T10840] usb usb3-port1: attempt power cycle
[  669.334809][ T5831] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  669.422180][T15903] netlink: 'syz.1.2719': attribute type 21 has an invalid length.
[  669.432091][T15903] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2719'.
[  669.441650][T15903] netlink: 'syz.1.2719': attribute type 5 has an invalid length.
[  669.450150][T15903] netlink: 'syz.1.2719': attribute type 6 has an invalid length.
[  669.458186][T15903] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2719'.
[  669.486408][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.497868][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.508150][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  669.521532][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  669.531016][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.544054][ T5831] usb 5-1: config 0 descriptor??
[  669.614637][T10840] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  669.635583][T10840] usb 3-1: device descriptor read/8, error -71
[  669.847204][T10833] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  669.874700][T10840] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  669.906961][T10840] usb 3-1: device descriptor read/8, error -71
[  669.964660][ T5831] plantronics 0003:047F:FFFF.0031: reserved main item tag 0xd
[  669.979829][ T5831] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  669.993654][T10833] usb 2-1: device descriptor read/64, error -71
[  670.024965][T10840] usb usb3-port1: unable to enumerate USB device
[  670.216421][ T5831] usb 5-1: USB disconnect, device number 41
[  670.234849][T10833] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  670.385037][T10833] usb 2-1: device descriptor read/64, error -71
[  670.494966][T10833] usb usb2-port1: attempt power cycle
[  670.553121][T10840] usb 6-1: USB disconnect, device number 72
[  670.656841][T15924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  670.834989][T10833] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  670.862663][T10833] usb 2-1: device descriptor read/8, error -71
[  670.986219][   T29] kauditd_printk_skb: 54 callbacks suppressed
[  670.986238][   T29] audit: type=1326 audit(1774996081.693:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15934 comm="syz.4.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  671.030926][   T29] audit: type=1326 audit(1774996081.723:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15934 comm="syz.4.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  671.054658][   T29] audit: type=1326 audit(1774996081.723:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15934 comm="syz.4.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  671.083535][   T29] audit: type=1326 audit(1774996081.723:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15934 comm="syz.4.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  671.113369][   T29] audit: type=1326 audit(1774996081.723:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15934 comm="syz.4.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  671.136248][T10833] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  671.155475][T10833] usb 2-1: device descriptor read/8, error -71
[  671.264814][T10833] usb usb2-port1: unable to enumerate USB device
[  672.664976][T10842] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  672.839534][T10842] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  672.858964][T10842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.870327][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.889459][T10842] usb 5-1: Product: syz
[  672.893706][T10842] usb 5-1: Manufacturer: syz
[  672.897590][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.932318][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.941159][T10842] usb 5-1: SerialNumber: syz
[  672.964298][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.014787][T10833] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  673.084622][T10834] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  673.183400][T10833] usb 2-1: device descriptor read/64, error -71
[  673.259251][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'.
[  673.360995][T10842] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  673.384832][T10842] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  673.425805][T10833] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  673.574674][T10833] usb 2-1: device descriptor read/64, error -71
[  673.697618][T10833] usb usb2-port1: attempt power cycle
[  673.725884][T10834] usb 3-1: device descriptor read/64, error -71
[  673.735607][T15993] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2740'.
[  673.745519][T15993] netlink: 990 bytes leftover after parsing attributes in process `syz.0.2740'.
[  673.755974][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'.
[  673.765212][T15995] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2741'.
[  673.965152][T10834] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  674.044801][T10833] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  674.065336][T10833] usb 2-1: device descriptor read/8, error -71
[  674.116764][T10834] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  674.126836][T10834] usb 3-1: config 0 interface 0 has no altsetting 0
[  674.136628][T10834] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  674.145895][T10834] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  674.154144][T10834] usb 3-1: Product: syz
[  674.158483][T10834] usb 3-1: Manufacturer: syz
[  674.163522][T10834] usb 3-1: SerialNumber: syz
[  674.171868][T10834] usb 3-1: config 0 descriptor??
[  674.185087][T10834] usb 3-1: selecting invalid altsetting 0
[  674.304849][T10833] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  674.325388][T10833] usb 2-1: device descriptor read/8, error -71
[  674.436232][T10833] usb usb2-port1: unable to enumerate USB device
[  674.910575][T16007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.016387][T10842] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[  675.051144][T10842] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  675.070199][T10842] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  675.095113][T10842] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  675.129677][T10842] usb 5-1: USB disconnect, device number 42
[  675.762853][T16020] FAULT_INJECTION: forcing a failure.
[  675.762853][T16020] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  675.788396][T16020] CPU: 0 UID: 0 PID: 16020 Comm: syz.1.2749 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  675.788431][T16020] Tainted: [L]=SOFTLOCKUP
[  675.788440][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  675.788453][T16020] Call Trace:
[  675.788461][T16020]  <TASK>
[  675.788470][T16020]  dump_stack_lvl+0xe8/0x150
[  675.788510][T16020]  should_fail_ex+0x412/0x560
[  675.788546][T16020]  _copy_from_user+0x2d/0xb0
[  675.788572][T16020]  ___sys_sendmsg+0x1c6/0x360
[  675.788605][T16020]  ? __pfx____sys_sendmsg+0x10/0x10
[  675.788662][T16020]  ? __fget_files+0x2a/0x420
[  675.788680][T16020]  ? __fget_files+0x3a0/0x420
[  675.788708][T16020]  __x64_sys_sendmsg+0x1bd/0x2a0
[  675.788737][T16020]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  675.788771][T16020]  ? __pfx_ksys_write+0x10/0x10
[  675.788804][T16020]  do_syscall_64+0x14d/0xf80
[  675.788830][T16020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.788851][T16020]  ? clear_bhb_loop+0x40/0x90
[  675.788875][T16020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.788895][T16020] RIP: 0033:0x7f7519d9c819
[  675.788914][T16020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.788929][T16020] RSP: 002b:00007f751ac3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  675.788951][T16020] RAX: ffffffffffffffda RBX: 00007f751a015fa0 RCX: 00007f7519d9c819
[  675.788965][T16020] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000018
[  675.788978][T16020] RBP: 00007f751ac3e090 R08: 0000000000000000 R09: 0000000000000000
[  675.788991][T16020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  675.789003][T16020] R13: 00007f751a016038 R14: 00007f751a015fa0 R15: 00007f751a13fa48
[  675.789046][T16020]  </TASK>
[  676.141318][T10842] usb 3-1: USB disconnect, device number 51
[  676.287887][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'.
[  677.224688][T10834] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  677.378422][T10834] usb 5-1: config 0 has no interfaces?
[  677.389781][T10834] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  677.401872][T10834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.424698][T10834] usb 5-1: Product: syz
[  677.554810][T10834] usb 5-1: Manufacturer: syz
[  677.559472][T10834] usb 5-1: SerialNumber: syz
[  677.582452][T10834] usb 5-1: config 0 descriptor??
[  677.696096][T16079] FAULT_INJECTION: forcing a failure.
[  677.696096][T16079] name failslab, interval 1, probability 0, space 0, times 0
[  677.715089][T16079] CPU: 0 UID: 0 PID: 16079 Comm: syz.2.2760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  677.715113][T16079] Tainted: [L]=SOFTLOCKUP
[  677.715119][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  677.715127][T16079] Call Trace:
[  677.715133][T16079]  <TASK>
[  677.715140][T16079]  dump_stack_lvl+0xe8/0x150
[  677.715164][T16079]  should_fail_ex+0x412/0x560
[  677.715189][T16079]  should_failslab+0xa8/0x100
[  677.715208][T16079]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  677.715224][T16079]  ? __alloc_skb+0x186/0x7d0
[  677.715239][T16079]  ? __alloc_skb+0x1d0/0x7d0
[  677.715252][T16079]  ? __local_bh_enable_ip+0xd0/0x130
[  677.715273][T16079]  __alloc_skb+0x1d0/0x7d0
[  677.715290][T16079]  netlink_sendmsg+0x5d4/0xb40
[  677.715310][T16079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  677.715326][T16079]  ? aa_sock_msg_perm+0xf1/0x1b0
[  677.715348][T16079]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  677.715366][T16079]  ____sys_sendmsg+0x972/0x9f0
[  677.715389][T16079]  ? __pfx_____sys_sendmsg+0x10/0x10
[  677.715411][T16079]  ? import_iovec+0x73/0xa0
[  677.715429][T16079]  ___sys_sendmsg+0x2a5/0x360
[  677.715449][T16079]  ? __pfx____sys_sendmsg+0x10/0x10
[  677.715485][T16079]  ? __fget_files+0x2a/0x420
[  677.715497][T16079]  ? __fget_files+0x3a0/0x420
[  677.715515][T16079]  __x64_sys_sendmsg+0x1bd/0x2a0
[  677.715533][T16079]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  677.715556][T16079]  ? __pfx_ksys_write+0x10/0x10
[  677.715580][T16079]  do_syscall_64+0x14d/0xf80
[  677.715597][T16079]  ? trace_irq_disable+0x3b/0x150
[  677.715609][T16079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.715623][T16079]  ? clear_bhb_loop+0x40/0x90
[  677.715639][T16079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.715652][T16079] RIP: 0033:0x7fed4159c819
[  677.715665][T16079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.715677][T16079] RSP: 002b:00007fed42461028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  677.715691][T16079] RAX: ffffffffffffffda RBX: 00007fed41815fa0 RCX: 00007fed4159c819
[  677.715701][T16079] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000018
[  677.715710][T16079] RBP: 00007fed42461090 R08: 0000000000000000 R09: 0000000000000000
[  677.715718][T16079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.715726][T16079] R13: 00007fed41816038 R14: 00007fed41815fa0 R15: 00007fed4193fa48
[  677.715746][T16079]  </TASK>
[  678.216923][T10834] usb 5-1: USB disconnect, device number 43
[  678.330967][T16083] could not allocate digest TFM handle hmac(sha1-neon)
[  678.554814][T10840] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  678.734716][T10840] usb 3-1: Using ep0 maxpacket: 16
[  678.756450][T10840] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[  678.781425][T10840] usb 3-1: config 0 has no interface number 0
[  678.796792][T10840] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.808180][T10840] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.818484][T10840] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  678.828240][T10840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.841096][T10840] usb 3-1: config 0 descriptor??
[  679.085456][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'.
[  679.172678][T16125] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  679.201749][T16124] tunl0: Caught tx_queue_len zero misconfig
[  679.412872][T16128] random: crng reseeded on system resumption
[  679.598702][T10840] usbhid 3-1:0.4: can't add hid device: -71
[  679.606751][T10840] usbhid 3-1:0.4: probe with driver usbhid failed with error -71
[  679.673888][T10840] usb 3-1: USB disconnect, device number 52
[  680.312143][T16147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2776'.
[  680.330660][T16146] fuse: Bad value for 'fd'
[  680.503549][T16153] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  680.771756][T16161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2781'.
[  681.007718][T16167] gtp0: entered promiscuous mode
[  681.041132][T16167] gtp0: entered allmulticast mode
[  681.164890][T10840] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  681.204291][   T29] audit: type=1326 audit(1774996091.833:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7519d9c819 code=0x7ffc0000
[  681.253374][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'.
[  681.328473][   T29] audit: type=1326 audit(1774996091.883:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7519d9c819 code=0x7ffc0000
[  681.385882][   T29] audit: type=1326 audit(1774996091.883:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7519d9c819 code=0x7ffc0000
[  681.431911][   T29] audit: type=1326 audit(1774996091.883:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7519d9c819 code=0x7ffc0000
[  681.460124][T10840] usb 3-1: unable to get BOS descriptor or descriptor too short
[  681.472999][T10840] usb 3-1: not running at top speed; connect to a high speed hub
[  681.484802][T10840] usb 3-1: config 9 has an invalid interface number: 21 but max is 2
[  681.493224][T10840] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  681.584185][T10840] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3
[  681.614131][T10840] usb 3-1: config 9 has no interface number 0
[  681.634024][T10840] usb 3-1: config 9 interface 21 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  681.659641][T10840] usb 3-1: config 9 interface 21 has no altsetting 0
[  681.791966][T10840] usb 3-1: New USB device found, idVendor=19d2, idProduct=2813, bcdDevice=74.f4
[  681.801296][T10840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.809684][T10840] usb 3-1: Product: syz
[  681.816312][T10840] usb 3-1: Manufacturer: syz
[  681.824766][T10840] usb 3-1: SerialNumber: syz
[  682.318719][T10840] usb 3-1: bad CDC descriptors
[  682.358569][T10840] usb 3-1: USB disconnect, device number 53
[  683.179108][   T29] audit: type=1326 audit(1774996093.843:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16187 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168819c819 code=0x7ffc0000
[  683.278162][   T29] audit: type=1326 audit(1774996093.843:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16187 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f168819c819 code=0x7ffc0000
[  683.315858][T10840] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  683.414660][  T798] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  683.570588][   T29] audit: type=1326 audit(1774996093.843:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16187 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168819c819 code=0x7ffc0000
[  683.604333][T10840] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  683.613208][T10840] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  683.633995][T10840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  683.643956][   T29] audit: type=1326 audit(1774996093.843:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16187 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f168819c819 code=0x7ffc0000
[  683.674947][T10840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  683.694998][T10840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  683.714781][  T798] usb 6-1: Using ep0 maxpacket: 32
[  683.724718][   T29] audit: type=1326 audit(1774996093.843:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16187 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168819c819 code=0x7ffc0000
[  683.749858][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  683.771350][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  683.792914][T10840] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  683.802863][T10840] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  683.819329][  T798] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  683.834686][   T29] audit: type=1326 audit(1774996093.843:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16187 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f168819c819 code=0x7ffc0000
[  683.857317][T10840] usb 3-1: Product: syz
[  683.867444][  T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.876194][T10840] usb 3-1: Manufacturer: syz
[  683.933913][  T798] usb 6-1: config 0 descriptor??
[  684.036848][T10840] cdc_wdm 3-1:1.0: skipping garbage
[  684.048559][T10840] cdc_wdm 3-1:1.0: skipping garbage
[  684.066315][T10840] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  684.072335][T10840] cdc_wdm 3-1:1.0: Unknown control protocol
[  684.325405][T16199] netlink: 'syz.4.2789': attribute type 1 has an invalid length.
[  684.406188][T10840] usb 3-1: USB disconnect, device number 54
[  684.486745][T16199] 8021q: adding VLAN 0 to HW filter on device bond6
[  684.517478][T16201] bond6: (slave geneve3): making interface the new active one
[  684.527420][T16201] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  684.542586][T15714] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0
[  684.557024][T15714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.576287][T15714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.589196][T15714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.650342][T16207] sch_tbf: peakrate 9021045209943505153 is lower than or equals to rate 14276780941599193350 !
[  684.662701][T16207] sch_tbf: peakrate 9021045209943505153 is lower than or equals to rate 14276780941599193350 !
[  684.678079][T16207] sch_tbf: peakrate 9021045209943505153 is lower than or equals to rate 14276780941599193350 !
[  684.774732][T10840] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  684.915256][T10840] usb 5-1: device descriptor read/64, error -71
[  685.074663][ T5831] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  685.155698][T10840] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  685.229101][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short
[  685.246151][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  685.256820][ T5831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  685.268185][ T5831] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  685.298215][ T5831] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  685.304896][T10840] usb 5-1: device descriptor read/64, error -71
[  685.308403][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.343781][ T5831] usb 2-1: Product: syz
[  685.352802][ T5831] usb 2-1: Manufacturer: syz
[  685.365284][ T5831] usb 2-1: SerialNumber: syz
[  685.424992][T10840] usb usb5-port1: attempt power cycle
[  685.449689][T16226] vivid-004: disconnect
[  685.459623][T16226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  685.634290][ T5831] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  685.651081][ T5831] cdc_ncm 2-1:1.0: bind() failure
[  685.675669][ T5831] usb 2-1: USB disconnect, device number 34
[  685.719297][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  685.725762][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  685.784454][T16231] batadv_slave_1: entered allmulticast mode
[  685.794058][T16231] batadv_slave_1: left allmulticast mode
[  685.795424][T10840] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  685.825296][T10840] usb 5-1: device descriptor read/8, error -71
[  685.871182][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2798'.
[  685.978895][T16223] vivid-004: reconnect
[  686.065939][T10840] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  686.105512][T10840] usb 5-1: device descriptor read/8, error -71
[  686.125277][  T798] usbhid 6-1:0.0: can't add hid device: -71
[  686.144778][  T798] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  686.174100][  T798] usb 6-1: USB disconnect, device number 73
[  686.227429][T10840] usb usb5-port1: unable to enumerate USB device
[  686.664697][  T798] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  686.764696][T10840] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  686.773923][T16252] netlink: 'syz.0.2803': attribute type 24 has an invalid length.
[  686.781882][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'.
[  686.790885][T16252] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  686.824874][  T798] usb 6-1: Using ep0 maxpacket: 8
[  686.839581][  T798] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  686.855518][  T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.876922][  T798] usb 6-1: Product: syz
[  686.884633][  T798] usb 6-1: Manufacturer: syz
[  686.889404][  T798] usb 6-1: SerialNumber: syz
[  686.903899][  T798] usb 6-1: config 0 descriptor??
[  686.923561][  T798] gspca_main: se401-2.14.0 probing 047d:5003
[  686.977194][T10840] usb 3-1: Using ep0 maxpacket: 16
[  686.992476][T16254] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  687.010411][T10840] usb 3-1: config 2 has an invalid interface number: 142 but max is 0
[  687.018812][T10840] usb 3-1: config 2 has no interface number 0
[  687.054059][T10840] usb 3-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A
[  687.085173][T10840] usb 3-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  687.114857][T10840] usb 3-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  687.124972][T10840] usb 3-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  687.202173][T10840] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e
[  687.212137][T10840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.220366][T10840] usb 3-1: Product: syz
[  687.234945][T10840] usb 3-1: Manufacturer: syz
[  687.261129][T10840] usb 3-1: SerialNumber: syz
[  687.286703][T16259] pim6reg0: tun_chr_ioctl cmd 1074812118
[  687.348944][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.368270][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.382550][T10840] usb 3-1: NFC: intf ffff88807c4f3000 id ffffffff8f1d2ba0
[  687.417277][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.450230][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.518967][  T798] gspca_se401: Frame size: 0x0 1/16th janggu
[  687.529871][  T798] gspca_se401: Frame size: 0x0 1/16th janggu
[  687.575191][  T798] gspca_se401: Frame size: 0x0 1/16th janggu
[  687.581337][  T798] gspca_se401: Frame size: 0x0 1/16th janggu
[  687.646021][  T798] gspca_se401: Frame size: 0x0 1/16th janggu
[  687.652247][  T798] gspca_se401: Frame size: 0x0 1/16th janggu
[  687.697216][T16266] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2808'.
[  687.747522][  T798] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input91
[  687.771041][  T798] usb 6-1: USB disconnect, device number 74
[  687.996519][T16273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2810'.
[  688.152481][T16275] loop2: detected capacity change from 0 to 7
[  688.161504][T16275] Dev loop2: unable to read RDB block 7
[  688.169696][T16275]  loop2: AHDI p1 p2 p3
[  688.174428][T16275] loop2: partition table partially beyond EOD, truncated
[  688.182631][T16275] loop2: p1 start 1601398130 is beyond EOD, truncated
[  688.190563][T16275] loop2: p2 start 1702059890 is beyond EOD, truncated
[  688.764852][ T5831] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  688.944835][ T5831] usb 5-1: Using ep0 maxpacket: 16
[  688.959086][ T5831] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  688.969827][ T5831] usb 5-1: config 0 has no interface number 0
[  688.981703][ T5831] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  689.012626][ T5831] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  689.024392][ T5831] usb 5-1: config 0 interface 41 has no altsetting 0
[  689.041187][ T5831] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  689.050820][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.059097][ T5831] usb 5-1: Product: syz
[  689.069251][ T5831] usb 5-1: Manufacturer: syz
[  689.073943][ T5831] usb 5-1: SerialNumber: syz
[  689.106371][ T5831] usb 5-1: config 0 descriptor??
[  689.124450][T16283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  689.132133][T16283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  689.239716][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2817'.
[  689.346219][T16283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  689.355631][T16283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  689.598565][ T5831] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  689.739020][T16307] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001
[  689.822494][ T5831] usb 5-1: USB disconnect, device number 48
[  689.871561][T16309] loop2: detected capacity change from 0 to 7
[  689.899121][T16309] Dev loop2: unable to read RDB block 7
[  689.909564][T10833] usb 3-1: USB disconnect, device number 55
[  689.941196][T16309]  loop2: AHDI p1 p2 p3
[  689.965132][T16309] loop2: partition table partially beyond EOD, truncated
[  689.994936][T16309] loop2: p1 start 1601398130 is beyond EOD, truncated
[  690.012892][T16309] loop2: p2 start 1702059890 is beyond EOD, truncated
[  690.081630][T16310] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  690.804686][T10842] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  690.834792][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  691.004946][T10842] usb 5-1: Using ep0 maxpacket: 16
[  691.018416][T10842] usb 5-1: config index 0 descriptor too short (expected 18640, got 56)
[  691.042196][T10842] usb 5-1: config 194 has too many interfaces: 199, using maximum allowed: 32
[  691.051358][T10840] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  691.059262][T10842] usb 5-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config
[  691.077096][T10842] usb 5-1: config 194 has 0 interfaces, different from the descriptor's value: 199
[  691.090539][T10842] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  691.100434][T10842] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  691.108667][T10842] usb 5-1: Manufacturer: syz
[  691.137553][T16343] loop2: detected capacity change from 0 to 7
[  691.147112][T16343] Dev loop2: unable to read RDB block 7
[  691.152994][T16343]  loop2: AHDI p1 p2 p3
[  691.157639][T16343] loop2: partition table partially beyond EOD, truncated
[  691.165368][T16343] loop2: p1 start 1601398130 is beyond EOD, truncated
[  691.172487][T16343] loop2: p2 start 1702059890 is beyond EOD, truncated
[  691.231874][T10840] usb 6-1: Using ep0 maxpacket: 32
[  691.240337][T10840] usb 6-1: config 0 has an invalid interface number: 111 but max is 1
[  691.264909][T10840] usb 6-1: config 0 has no interface number 1
[  691.273814][T10840] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  691.284369][T10840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.294312][T10840] usb 6-1: Product: syz
[  691.299480][T10840] usb 6-1: Manufacturer: syz
[  691.305007][T10840] usb 6-1: SerialNumber: syz
[  691.313357][T10840] usb 6-1: config 0 descriptor??
[  691.344987][  T798] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  691.491301][  T798] usb 2-1: device descriptor read/64, error -71
[  691.542631][T10840] snd-usb-6fire 6-1:0.111: unable to receive device firmware state.
[  691.553246][T10840] snd-usb-6fire 6-1:0.111: probe with driver snd-usb-6fire failed with error -121
[  691.572840][T16350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2836'.
[  691.609416][T16350] ip6gre3: entered promiscuous mode
[  691.619856][T16350] ip6gre3: entered allmulticast mode
[  691.755280][  T798] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  691.925156][  T798] usb 2-1: device descriptor read/64, error -71
[  692.017757][T16321] Set syz1 is full, maxelem 6117 reached
[  692.052364][  T798] usb usb2-port1: attempt power cycle
[  692.416496][  T798] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  692.453413][T10833] usb 6-1: USB disconnect, device number 75
[  692.460336][  T798] usb 2-1: device descriptor read/8, error -71
[  692.617486][T16374] 8021q: VLANs not supported on vxcan0
[  692.704696][  T798] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  692.746566][  T798] usb 2-1: device descriptor read/8, error -71
[  692.876476][  T798] usb usb2-port1: unable to enumerate USB device
[  692.954661][T10833] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  693.104648][T10833] usb 6-1: device descriptor read/64, error -71
[  693.349585][T10833] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  693.452853][T10842] usb 5-1: USB disconnect, device number 49
[  693.494869][T10833] usb 6-1: device descriptor read/64, error -71
[  693.609268][T10833] usb usb6-port1: attempt power cycle
[  693.622858][T16392] loop2: detected capacity change from 0 to 7
[  693.646118][T16392] Dev loop2: unable to read RDB block 7
[  693.653365][T16392]  loop2: AHDI p1 p2 p3
[  693.661523][T16392] loop2: partition table partially beyond EOD, truncated
[  693.669217][T16392] loop2: p1 start 1601398130 is beyond EOD, truncated
[  693.678948][T16392] loop2: p2 start 1702059890 is beyond EOD, truncated
[  693.960521][T16400] fuse: Bad value for 'group_id'
[  693.982733][T16400] fuse: Bad value for 'group_id'
[  694.199042][T16409] FAULT_INJECTION: forcing a failure.
[  694.199042][T16409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  694.278321][T16409] CPU: 0 UID: 0 PID: 16409 Comm: syz.2.2851 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  694.278344][T16409] Tainted: [L]=SOFTLOCKUP
[  694.278349][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  694.278358][T16409] Call Trace:
[  694.278364][T16409]  <TASK>
[  694.278370][T16409]  dump_stack_lvl+0xe8/0x150
[  694.278423][T16409]  should_fail_ex+0x412/0x560
[  694.278458][T16409]  _copy_to_user+0x31/0xb0
[  694.278483][T16409]  ucma_create_id+0x2de/0x380
[  694.278518][T16409]  ? __pfx_ucma_create_id+0x10/0x10
[  694.278546][T16409]  ucma_write+0x24e/0x2f0
[  694.278567][T16409]  ? __pfx_ucma_write+0x10/0x10
[  694.278585][T16409]  ? security_file_permission+0x75/0x260
[  694.278604][T16409]  ? rw_verify_area+0x255/0x4d0
[  694.278620][T16409]  vfs_writev+0x4bd/0x990
[  694.278639][T16409]  ? __pfx_ucma_write+0x10/0x10
[  694.278660][T16409]  ? __pfx_vfs_writev+0x10/0x10
[  694.278687][T16409]  ? __fget_files+0x2a/0x420
[  694.278725][T16409]  ? __fget_files+0x3a0/0x420
[  694.278736][T16409]  ? __fget_files+0x2a/0x420
[  694.278753][T16409]  do_writev+0x154/0x2e0
[  694.278772][T16409]  ? __pfx_do_writev+0x10/0x10
[  694.278797][T16409]  do_syscall_64+0x14d/0xf80
[  694.278814][T16409]  ? trace_irq_disable+0x3b/0x150
[  694.278826][T16409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.278839][T16409]  ? clear_bhb_loop+0x40/0x90
[  694.278856][T16409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.278869][T16409] RIP: 0033:0x7fed4159c819
[  694.278882][T16409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.278894][T16409] RSP: 002b:00007fed42461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  694.278908][T16409] RAX: ffffffffffffffda RBX: 00007fed41815fa0 RCX: 00007fed4159c819
[  694.278918][T16409] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009
[  694.278927][T16409] RBP: 00007fed42461090 R08: 0000000000000000 R09: 0000000000000000
[  694.278935][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  694.278943][T16409] R13: 00007fed41816038 R14: 00007fed41815fa0 R15: 00007fed4193fa48
[  694.278967][T16409]  </TASK>
[  694.694867][T16411] sg_write: data in/out 262111/98 bytes for SCSI command 0x0-- guessing data in;
[  694.694867][T16411]    program syz.1.2850 not setting count and/or reply_len properly
[  694.712482][T10833] usb usb6-port1: Cannot enable. Maybe the USB cable is bad?
[  694.777274][T16416] sg_write: data in/out 544497988/11 bytes for SCSI command 0x65-- guessing data in;
[  694.777274][T16416]    program syz.1.2850 not setting count and/or reply_len properly
[  694.854753][T10833] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  694.882128][T10833] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  694.895986][T10833] usb 6-1: config 0 has no interfaces?
[  694.910578][T10833] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  694.944412][T10833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.968125][T10833] usb 6-1: rejected 1 configuration due to insufficient available bus power
[  694.990402][T10833] usb 6-1: no configuration chosen from 1 choice
[  695.342748][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'.
[  695.352002][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'.
[  695.361422][T16431] netlink: 'syz.4.2859': attribute type 6 has an invalid length.
[  695.378607][T15713] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0
[  695.386967][T15713] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  695.405687][T15713] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  695.424718][T15713] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  695.599711][T16437] FAULT_INJECTION: forcing a failure.
[  695.599711][T16437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  695.617437][T16437] CPU: 1 UID: 0 PID: 16437 Comm: syz.2.2862 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  695.617469][T16437] Tainted: [L]=SOFTLOCKUP
[  695.617476][T16437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  695.617488][T16437] Call Trace:
[  695.617497][T16437]  <TASK>
[  695.617505][T16437]  dump_stack_lvl+0xe8/0x150
[  695.617536][T16437]  should_fail_ex+0x412/0x560
[  695.617580][T16437]  _copy_from_user+0x2d/0xb0
[  695.617602][T16437]  ucma_write+0x15d/0x2f0
[  695.617632][T16437]  ? __pfx_ucma_write+0x10/0x10
[  695.617656][T16437]  ? iov_iter_iovec_advance+0x1e0/0x290
[  695.617678][T16437]  vfs_writev+0x4bd/0x990
[  695.617702][T16437]  ? __pfx_ucma_write+0x10/0x10
[  695.617727][T16437]  ? __pfx_vfs_writev+0x10/0x10
[  695.617757][T16437]  ? __fget_files+0x2a/0x420
[  695.617774][T16437]  ? __fget_files+0x3a0/0x420
[  695.617787][T16437]  ? __fget_files+0x2a/0x420
[  695.617806][T16437]  do_writev+0x154/0x2e0
[  695.617830][T16437]  ? __pfx_do_writev+0x10/0x10
[  695.617858][T16437]  do_syscall_64+0x14d/0xf80
[  695.617878][T16437]  ? trace_irq_disable+0x3b/0x150
[  695.617892][T16437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.617908][T16437]  ? clear_bhb_loop+0x40/0x90
[  695.617926][T16437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.617942][T16437] RIP: 0033:0x7fed4159c819
[  695.617957][T16437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.617971][T16437] RSP: 002b:00007fed42461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  695.617988][T16437] RAX: ffffffffffffffda RBX: 00007fed41815fa0 RCX: 00007fed4159c819
[  695.618000][T16437] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009
[  695.618010][T16437] RBP: 00007fed42461090 R08: 0000000000000000 R09: 0000000000000000
[  695.618019][T16437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.618028][T16437] R13: 00007fed41816038 R14: 00007fed41815fa0 R15: 00007fed4193fa48
[  695.618051][T16437]  </TASK>
[  695.886405][T10833] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  695.987516][T16446] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2865'.
[  696.048037][T10833] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  696.056558][T10833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  696.069811][T10833] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  696.080629][T10833] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  696.088902][T10833] usb 2-1: Manufacturer: syz
[  696.105219][T10833] usb 2-1: config 0 descriptor??
[  696.124616][T10842] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  696.196517][T10833] rc_core: IR keymap rc-hauppauge not found
[  696.210312][T10833] Registered IR keymap rc-empty
[  696.228967][T10833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  696.255174][T10833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input93
[  696.284682][T10842] usb 3-1: device descriptor read/64, error -71
[  696.320352][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  696.495805][T16460] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  696.534643][T10842] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  696.664722][T10842] usb 3-1: device descriptor read/64, error -71
[  696.774971][T10842] usb usb3-port1: attempt power cycle
[  697.114664][T10842] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  697.128590][T10840] usb 6-1: USB disconnect, device number 79
[  697.156361][T10842] usb 3-1: device descriptor read/8, error -71
[  697.394430][T16474] FAULT_INJECTION: forcing a failure.
[  697.394430][T16474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  697.408620][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.4.2873 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  697.408664][T16474] Tainted: [L]=SOFTLOCKUP
[  697.408672][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  697.408684][T16474] Call Trace:
[  697.408693][T16474]  <TASK>
[  697.408702][T16474]  dump_stack_lvl+0xe8/0x150
[  697.408735][T16474]  should_fail_ex+0x412/0x560
[  697.408770][T16474]  _copy_from_user+0x2d/0xb0
[  697.408794][T16474]  ucma_init_qp_attr+0x195/0x580
[  697.408827][T16474]  ? __pfx_ucma_init_qp_attr+0x10/0x10
[  697.408858][T16474]  ? ucma_create_id+0x32b/0x380
[  697.408897][T16474]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  697.408959][T16474]  ucma_write+0x24e/0x2f0
[  697.408989][T16474]  ? __pfx_ucma_write+0x10/0x10
[  697.409015][T16474]  ? iov_iter_iovec_advance+0x1e0/0x290
[  697.409044][T16474]  vfs_writev+0x4bd/0x990
[  697.409072][T16474]  ? __pfx_ucma_write+0x10/0x10
[  697.409104][T16474]  ? __pfx_vfs_writev+0x10/0x10
[  697.409143][T16474]  ? __fget_files+0x2a/0x420
[  697.409164][T16474]  ? __fget_files+0x3a0/0x420
[  697.409181][T16474]  ? __fget_files+0x2a/0x420
[  697.409206][T16474]  do_writev+0x154/0x2e0
[  697.409247][T16474]  ? __pfx_do_writev+0x10/0x10
[  697.409284][T16474]  do_syscall_64+0x14d/0xf80
[  697.409329][T16474]  ? trace_irq_disable+0x3b/0x150
[  697.409347][T16474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.409369][T16474]  ? clear_bhb_loop+0x40/0x90
[  697.409395][T16474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.409416][T16474] RIP: 0033:0x7f97adb9c819
[  697.409436][T16474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.409453][T16474] RSP: 002b:00007f97aeb02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  697.409475][T16474] RAX: ffffffffffffffda RBX: 00007f97ade15fa0 RCX: 00007f97adb9c819
[  697.409491][T16474] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009
[  697.409504][T16474] RBP: 00007f97aeb02090 R08: 0000000000000000 R09: 0000000000000000
[  697.409518][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  697.409529][T16474] R13: 00007f97ade16038 R14: 00007f97ade15fa0 R15: 00007f97adf3fa48
[  697.409559][T16474]  </TASK>
[  697.415133][T10842] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  697.665907][T10842] usb 3-1: device descriptor read/8, error -71
[  697.743583][T16480] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  697.758075][T16478] loop0: detected capacity change from 0 to 2640
[  697.768012][T16480] tipc: Resetting bearer <eth:syzkaller0>
[  697.773294][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.782965][T10842] usb usb3-port1: unable to enumerate USB device
[  697.790833][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.799143][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.807587][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.815720][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.838103][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.866405][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.876182][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.909823][ T5840] ldm_validate_partition_table(): Disk read failed.
[  697.916867][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.924843][ T5840] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.936642][ T5840] Dev loop0: unable to read RDB block 0
[  697.942533][ T5840]  loop0: unable to read partition table
[  697.951351][T16478] ldm_validate_partition_table(): Disk read failed.
[  697.958517][T16478] Dev loop0: unable to read RDB block 0
[  697.964713][T16478]  loop0: unable to read partition table
[  697.972397][T16478] loop_reread_partitions: partition scan of loop0 (3„¾‚³˜) failed (rc=-5)
[  698.038478][ T5195] ldm_validate_partition_table(): Disk read failed.
[  698.045527][ T5195] Dev loop0: unable to read RDB block 0
[  698.054697][ T5195]  loop0: unable to read partition table
[  698.555834][T10843] usb 2-1: USB disconnect, device number 39
[  698.807309][T16499] xt_hashlimit: size too large, truncated to 1048576
[  699.181357][T16510] FAULT_INJECTION: forcing a failure.
[  699.181357][T16510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  699.240131][T16510] CPU: 1 UID: 0 PID: 16510 Comm: syz.1.2885 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  699.240162][T16510] Tainted: [L]=SOFTLOCKUP
[  699.240170][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  699.240181][T16510] Call Trace:
[  699.240189][T16510]  <TASK>
[  699.240197][T16510]  dump_stack_lvl+0xe8/0x150
[  699.240230][T16510]  should_fail_ex+0x412/0x560
[  699.240264][T16510]  _copy_to_user+0x31/0xb0
[  699.240288][T16510]  simple_read_from_buffer+0xe1/0x170
[  699.240319][T16510]  proc_fail_nth_read+0x1bb/0x230
[  699.240350][T16510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  699.240380][T16510]  ? rw_verify_area+0x2a6/0x4d0
[  699.240400][T16510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  699.240436][T16510]  vfs_read+0x20c/0xa70
[  699.240455][T16510]  ? fdget_pos+0x246/0x320
[  699.240475][T16510]  ? __pfx___mutex_lock+0x10/0x10
[  699.240502][T16510]  ? __pfx_vfs_read+0x10/0x10
[  699.240524][T16510]  ? __fget_files+0x2a/0x420
[  699.240546][T16510]  ? __fget_files+0x3a0/0x420
[  699.240562][T16510]  ? __fget_files+0x2a/0x420
[  699.240587][T16510]  ksys_read+0x150/0x270
[  699.240611][T16510]  ? __pfx_ksys_read+0x10/0x10
[  699.240642][T16510]  do_syscall_64+0x14d/0xf80
[  699.240666][T16510]  ? trace_irq_disable+0x3b/0x150
[  699.240682][T16510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.240703][T16510]  ? clear_bhb_loop+0x40/0x90
[  699.240726][T16510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.240745][T16510] RIP: 0033:0x7f7519d5d04e
[  699.240763][T16510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  699.240780][T16510] RSP: 002b:00007f751ac3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  699.240801][T16510] RAX: ffffffffffffffda RBX: 00007f751ac3e6c0 RCX: 00007f7519d5d04e
[  699.240815][T16510] RDX: 000000000000000f RSI: 00007f751ac3e0a0 RDI: 000000000000000c
[  699.240827][T16510] RBP: 00007f751ac3e090 R08: 0000000000000000 R09: 0000000000000000
[  699.240839][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  699.240850][T16510] R13: 00007f751a016038 R14: 00007f751a015fa0 R15: 00007f751a13fa48
[  699.240880][T16510]  </TASK>
[  699.798517][T16524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2887'.
[  699.823911][T16525] team0: entered promiscuous mode
[  699.829122][T16525] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  699.838001][T16525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  700.264637][T10833] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  700.640682][T16538] fuse: Bad value for 'fd'
[  700.653120][T10833] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  700.709988][T10833] usb 2-1: config 0 interface 0 has no altsetting 0
[  700.779950][T10833] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  700.834075][T10833] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  700.857043][T10833] usb 2-1: Product: syz
[  700.869781][T10833] usb 2-1: Manufacturer: syz
[  700.888726][T10833] usb 2-1: SerialNumber: syz
[  700.909947][T10833] usb 2-1: config 0 descriptor??
[  700.937678][T10833] usb 2-1: selecting invalid altsetting 0
[  701.252117][T10834] usb 2-1: USB disconnect, device number 40
[  702.925020][T16565] loop2: detected capacity change from 0 to 7
[  702.947624][T16565] Dev loop2: unable to read RDB block 7
[  702.976089][T16565]  loop2: AHDI p1 p2 p3
[  702.980359][T16565] loop2: partition table partially beyond EOD, truncated
[  703.013675][T16567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  703.030920][T16567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  703.044431][T16565] loop2: p1 start 1601398130 is beyond EOD, truncated
[  703.044980][T16567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  703.060885][T16567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  703.075072][T16567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  703.100211][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  703.108936][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  703.117534][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  703.121810][T16565] loop2: p2 start 1702059890 is beyond EOD, 
[  703.127687][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  703.142958][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  703.144991][T16565] truncated
[  703.973602][T16577] chnl_net:caif_netlink_parms(): no params data found
[  704.111400][T16577] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.118773][T16577] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.126529][T16577] bridge_slave_0: entered allmulticast mode
[  704.134431][T16577] bridge_slave_0: entered promiscuous mode
[  704.143281][T16577] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.150724][T16577] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.158593][T16577] bridge_slave_1: entered allmulticast mode
[  704.167074][T16577] bridge_slave_1: entered promiscuous mode
[  704.217119][T16577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.230156][T16577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.301068][T16577] team0: Port device team_slave_0 added
[  704.320368][T16577] team0: Port device team_slave_1 added
[  704.367767][T16577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  704.374884][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.405065][T16577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  704.482169][T16577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  704.521827][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.618995][T16577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  704.828394][T16577] hsr_slave_0: entered promiscuous mode
[  704.840970][T16577] hsr_slave_1: entered promiscuous mode
[  704.853387][T16577] debugfs: 'hsr0' already exists in 'hsr'
[  704.859880][T16577] Cannot create hsr debugfs directory
[  705.285198][ T5836] Bluetooth: hci5: command tx timeout
[  705.404631][T10842] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  705.458032][   T29] kauditd_printk_skb: 48 callbacks suppressed
[  705.458048][   T29] audit: type=1326 audit(1774996116.163:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  705.487064][T10843] IPVS: starting estimator thread 0...
[  705.493684][   T29] audit: type=1326 audit(1774996116.163:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97adb5d04e code=0x7ffc0000
[  705.511320][T16577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  705.519395][   T29] audit: type=1326 audit(1774996116.163:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  705.551854][   T29] audit: type=1326 audit(1774996116.163:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97adb9c819 code=0x7ffc0000
[  705.616211][T10842] usb 6-1: Using ep0 maxpacket: 8
[  705.616348][T16636] IPVS: using max 32 ests per chain, 76800 per kthread
[  705.646935][T10842] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  705.656208][T10842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.664374][T10842] usb 6-1: Product: syz
[  705.669240][T10842] usb 6-1: Manufacturer: syz
[  705.673931][T10842] usb 6-1: SerialNumber: syz
[  705.695619][T10842] usb 6-1: config 0 descriptor??
[  705.709016][T10842] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  705.769786][T16577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  705.857180][T16577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  705.981639][T16637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.995506][T16637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.091463][T16577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  706.288684][T10842] gspca_m5602: Failed to find a sensor
[  706.315837][T10842] ALi m5602 6-1:0.0: ALi m5602 webcam failed
[  706.390342][T10842] usb 6-1: USB disconnect, device number 80
[  706.669668][T16577] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  706.683015][T16655] FAULT_INJECTION: forcing a failure.
[  706.683015][T16655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.698221][T16655] CPU: 1 UID: 0 PID: 16655 Comm: syz.0.2914 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  706.698253][T16655] Tainted: [L]=SOFTLOCKUP
[  706.698260][T16655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  706.698277][T16655] Call Trace:
[  706.698286][T16655]  <TASK>
[  706.698294][T16655]  dump_stack_lvl+0xe8/0x150
[  706.698336][T16655]  should_fail_ex+0x412/0x560
[  706.698371][T16655]  _copy_from_user+0x2d/0xb0
[  706.698394][T16655]  ucma_write+0x15d/0x2f0
[  706.698425][T16655]  ? __pfx_ucma_write+0x10/0x10
[  706.698451][T16655]  ? security_file_permission+0x75/0x260
[  706.698478][T16655]  ? rw_verify_area+0x255/0x4d0
[  706.698502][T16655]  vfs_writev+0x4bd/0x990
[  706.698531][T16655]  ? __pfx_ucma_write+0x10/0x10
[  706.698563][T16655]  ? __pfx_vfs_writev+0x10/0x10
[  706.698602][T16655]  ? __fget_files+0x2a/0x420
[  706.698622][T16655]  ? __fget_files+0x3a0/0x420
[  706.698638][T16655]  ? __fget_files+0x2a/0x420
[  706.698663][T16655]  do_writev+0x154/0x2e0
[  706.698693][T16655]  ? __pfx_do_writev+0x10/0x10
[  706.698730][T16655]  do_syscall_64+0x14d/0xf80
[  706.698755][T16655]  ? trace_irq_disable+0x3b/0x150
[  706.698773][T16655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.698793][T16655]  ? clear_bhb_loop+0x40/0x90
[  706.698818][T16655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.698838][T16655] RIP: 0033:0x7f616f59c819
[  706.698857][T16655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.698874][T16655] RSP: 002b:00007f61703ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  706.698896][T16655] RAX: ffffffffffffffda RBX: 00007f616f815fa0 RCX: 00007f616f59c819
[  706.698911][T16655] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007
[  706.698924][T16655] RBP: 00007f61703ed090 R08: 0000000000000000 R09: 0000000000000000
[  706.698937][T16655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.698949][T16655] R13: 00007f616f816038 R14: 00007f616f815fa0 R15: 00007f616f93fa48
[  706.698979][T16655]  </TASK>
[  707.262868][T16577] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  707.275766][T16577] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  707.299483][T16577] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  707.320339][ T5836] Bluetooth: hci5: command tx timeout
[  707.808593][T16577] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.989645][T16577] 8021q: adding VLAN 0 to HW filter on device team0
[  708.073043][T15714] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.080228][T15714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  708.099733][T16667] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  708.379915][T15721] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.387215][T15721] bridge0: port 2(bridge_slave_1) entered forwarding state
[  708.462955][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'.
[  708.610699][T16577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  709.004199][T16577] veth0_vlan: entered promiscuous mode
[  709.090881][T16577] veth1_vlan: entered promiscuous mode
[  709.149620][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2920'.
[  709.177822][T16678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2919'.
[  709.200449][T16577] veth0_macvtap: entered promiscuous mode
[  709.211526][T16577] veth1_macvtap: entered promiscuous mode
[  709.231644][T16577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  709.250681][T16577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  709.291899][ T8209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.302806][ T8209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  709.317715][ T8209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.331131][ T8209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  709.394864][ T5836] Bluetooth: hci5: command tx timeout
[  709.404668][T10840] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  709.441958][T10834] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  709.452936][T16683] x_tables: duplicate underflow at hook 4
[  709.461144][T16683] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  709.532512][T15722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.541959][T15713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.552175][T15722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.644712][T10840] usb 2-1: Using ep0 maxpacket: 8
[  709.652903][T10840] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  709.654718][T15713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.674351][T10840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  709.691900][T10840] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024
[  709.706212][T10840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  709.725365][T10834] usb 5-1: Using ep0 maxpacket: 16
[  709.738543][T10834] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  709.750285][T10834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.763273][T10840] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  709.763388][T10834] usb 5-1: Product: syz
[  709.797368][T10834] usb 5-1: Manufacturer: syz
[  709.800200][T10840] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  709.821353][T10834] usb 5-1: SerialNumber: syz
[  709.900078][T10834] usb 5-1: config 0 descriptor??
[  709.933514][T10834] gspca_main: spca508-2.14.0 probing 041e:4018
[  709.941124][T10840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.153609][T10834] gspca_spca508: reg_read err -32
[  710.211427][T10834] gspca_spca508: reg_read err -32
[  710.220740][T10840] usb 2-1: GET_CAPABILITIES returned 0
[  710.228838][T10834] gspca_spca508: reg_read err -32
[  710.234179][T10840] usbtmc 2-1:16.0: can't read capabilities
[  710.234712][T10834] gspca_spca508: reg_read err -32
[  710.253882][T10834] gspca_spca508: reg_read err -32
[  710.344615][T10833] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  710.597816][T10834] gspca_spca508: reg write: error -71
[  710.603370][T10834] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  710.653971][T10834] usb 5-1: USB disconnect, device number 50
[  710.684462][T10833] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  710.694594][T10833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.768257][T10833] usb 3-1: config 0 descriptor??
[  711.085779][T10833] usb 3-1: Cannot set MAC address
[  711.091112][T10833] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  711.139207][T10833] usb 3-1: USB disconnect, device number 60
[  711.475843][ T5836] Bluetooth: hci5: command tx timeout
[  711.580167][T16711] netlink: 'syz.4.2927': attribute type 15 has an invalid length.
[  711.588498][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'.
[  711.607947][T15713] netdevsim netdevsim4 : set [0, 1] type 1 family 0 port 2816 - 0
[  711.616305][T15713] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  711.626300][T16711] netlink: 'syz.4.2927': attribute type 15 has an invalid length.
[  711.634326][T15713] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  711.649828][T15713] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  711.660279][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'.
[  711.871358][T10843] usb 2-1: USB disconnect, device number 41
[  712.369241][T10834] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  712.544603][T10834] usb 6-1: Using ep0 maxpacket: 32
[  712.552542][T10834] usb 6-1: config 4 has an invalid interface number: 228 but max is 0
[  712.571210][T10834] usb 6-1: config 4 has no interface number 0
[  712.578430][T10834] usb 6-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[  712.597689][T10834] usb 6-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid maxpacket 27495, setting to 1024
[  712.609871][T10834] usb 6-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 1024
[  712.620509][T10834] usb 6-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  712.635477][T10834] usb 6-1: config 4 interface 228 has no altsetting 0
[  712.648542][T10834] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  712.658232][T10834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.733635][T10834] usb 6-1: Product: syz
[  712.739681][T10834] usb 6-1: Manufacturer: syz
[  712.744444][T10834] usb 6-1: SerialNumber: syz
[  712.788632][T16723] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  713.176431][T16734] 
[  713.178904][T16734] =====================================================
[  713.185859][T16734] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  713.193358][T16734] syzkaller #0 Tainted: G             L     
[  713.199359][T16734] -----------------------------------------------------
[  713.206310][T16734] syz.2.2934/16734 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  713.214066][T16734] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[  713.222927][T16734] 
[  713.222927][T16734] and this task is already holding:
[  713.230321][T16734] ffff88807d676e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  713.239060][T16734] which would create a new lock dependency:
[  713.244963][T16734]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  713.252558][T16734] 
[  713.252558][T16734] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  713.262016][T16734]  (&dev->event_lock#2){..-.}-{3:3}
[  713.262048][T16734] 
[  713.262048][T16734] ... which became SOFTIRQ-irq-safe at:
[  713.274948][T16734]   lock_acquire+0xf0/0x2e0
[  713.279474][T16734]   _raw_spin_lock_irqsave+0x40/0x60
[  713.284766][T16734]   input_event+0x76/0xe0
[  713.289108][T16734]   xpad360_process_packet+0xda/0xdd0
[  713.294488][T16734]   xpad_irq_in+0x14e/0x25e0
[  713.299104][T16734]   __usb_hcd_giveback_urb+0x376/0x540
[  713.304583][T16734]   dummy_timer+0xbbd/0x45d0
[  713.309205][T16734]   __hrtimer_run_queues+0x53a/0xcc0
[  713.314527][T16734]   hrtimer_run_softirq+0x182/0x5a0
[  713.319758][T16734]   handle_softirqs+0x22a/0x870
[  713.324642][T16734]   __irq_exit_rcu+0x5f/0x150
[  713.329349][T16734]   irq_exit_rcu+0x9/0x30
[  713.333704][T16734]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  713.339445][T16734]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  713.345536][T16734]   finish_task_switch+0x245/0x920
[  713.350686][T16734]   __schedule+0x15e5/0x52d0
[  713.355303][T16734]   preempt_schedule_irq+0x4d/0xa0
[  713.360462][T16734]   irqentry_exit+0x599/0x620
[  713.365179][T16734]   asm_sysvec_reschedule_ipi+0x1a/0x20
[  713.370743][T16734]   __rcu_read_unlock+0x38/0xe0
[  713.375621][T16734]   unwind_next_frame+0x1aaf/0x23c0
[  713.380847][T16734]   arch_stack_walk+0x11b/0x150
[  713.385735][T16734]   stack_trace_save+0xa9/0x100
[  713.390591][T16734]   kasan_save_track+0x3e/0x80
[  713.395368][T16734]   __kasan_kmalloc+0x93/0xb0
[  713.400058][T16734]   __kmalloc_noprof+0x35c/0x760
[  713.405003][T16734]   tomoyo_encode+0x28b/0x550
[  713.409688][T16734]   tomoyo_realpath_from_path+0x58d/0x5d0
[  713.415424][T16734]   tomoyo_check_open_permission+0x229/0x470
[  713.421434][T16734]   security_file_open+0xa9/0x240
[  713.426478][T16734]   do_dentry_open+0x384/0x14e0
[  713.431342][T16734]   vfs_open+0x3b/0x340
[  713.435506][T16734]   path_openat+0x2e08/0x3860
[  713.440194][T16734]   do_file_open+0x23e/0x4a0
[  713.444810][T16734]   do_sys_openat2+0x113/0x200
[  713.449607][T16734]   __x64_sys_openat+0x138/0x170
[  713.454568][T16734]   do_syscall_64+0x14d/0xf80
[  713.459263][T16734]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.465252][T16734] 
[  713.465252][T16734] to a SOFTIRQ-irq-unsafe lock:
[  713.472276][T16734]  (tasklist_lock){.+.+}-{3:3}
[  713.472303][T16734] 
[  713.472303][T16734] ... which became SOFTIRQ-irq-unsafe at:
[  713.484942][T16734] ...
[  713.484950][T16734]   lock_acquire+0xf0/0x2e0
[  713.492103][T16734]   _raw_read_lock+0x36/0x50
[  713.496707][T16734]   __do_wait+0xde/0x740
[  713.500954][T16734]   do_wait+0x1e7/0x540
[  713.505146][T16734]   kernel_wait+0xd6/0x1c0
[  713.509570][T16734]   call_usermodehelper_exec_work+0xbe/0x230
[  713.515563][T16734]   process_scheduled_works+0xb6e/0x18c0
[  713.521214][T16734]   worker_thread+0xa53/0xfc0
[  713.525897][T16734]   kthread+0x388/0x470
[  713.530057][T16734]   ret_from_fork+0x51e/0xb90
[  713.534748][T16734]   ret_from_fork_asm+0x1a/0x30
[  713.539614][T16734] 
[  713.539614][T16734] other info that might help us debug this:
[  713.539614][T16734] 
[  713.549846][T16734] Chain exists of:
[  713.549846][T16734]   &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock
[  713.549846][T16734] 
[  713.562901][T16734]  Possible interrupt unsafe locking scenario:
[  713.562901][T16734] 
[  713.571229][T16734]        CPU0                    CPU1
[  713.576615][T16734]        ----                    ----
[  713.581980][T16734]   lock(tasklist_lock);
[  713.586242][T16734]                                local_irq_disable();
[  713.593004][T16734]                                lock(&dev->event_lock#2);
[  713.600232][T16734]                                lock(&f_owner->lock);
[  713.607091][T16734]   <Interrupt>
[  713.610549][T16734]     lock(&dev->event_lock#2);
[  713.615422][T16734] 
[  713.615422][T16734]  *** DEADLOCK ***
[  713.615422][T16734] 
[  713.623571][T16734] 2 locks held by syz.2.2934/16734:
[  713.628776][T16734]  #0: ffff888035776fe0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0
[  713.637321][T16734]  #1: ffff88807d676e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  713.646469][T16734] 
[  713.646469][T16734] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  713.656878][T16734]    -> (&dev->event_lock#2){..-.}-{3:3} {
[  713.662721][T16734]       IN-SOFTIRQ-W at:
[  713.666972][T16734]                           lock_acquire+0xf0/0x2e0
[  713.673577][T16734]                           _raw_spin_lock_irqsave+0x40/0x60
[  713.680959][T16734]                           input_event+0x76/0xe0
[  713.687388][T16734]                           xpad360_process_packet+0xda/0xdd0
[  713.694910][T16734]                           xpad_irq_in+0x14e/0x25e0
[  713.701603][T16734]                           __usb_hcd_giveback_urb+0x376/0x540
[  713.709159][T16734]                           dummy_timer+0xbbd/0x45d0
[  713.715854][T16734]                           __hrtimer_run_queues+0x53a/0xcc0
[  713.723242][T16734]                           hrtimer_run_softirq+0x182/0x5a0
[  713.730545][T16734]                           handle_softirqs+0x22a/0x870
[  713.737517][T16734]                           __irq_exit_rcu+0x5f/0x150
[  713.744303][T16734]                           irq_exit_rcu+0x9/0x30
[  713.750749][T16734]                           sysvec_apic_timer_interrupt+0xa6/0xc0
[  713.758576][T16734]                           asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  713.766905][T16734]                           finish_task_switch+0x245/0x920
[  713.774130][T16734]                           __schedule+0x15e5/0x52d0
[  713.780823][T16734]                           preempt_schedule_irq+0x4d/0xa0
[  713.788031][T16734]                           irqentry_exit+0x599/0x620
[  713.794813][T16734]                           asm_sysvec_reschedule_ipi+0x1a/0x20
[  713.802464][T16734]                           __rcu_read_unlock+0x38/0xe0
[  713.809403][T16734]                           unwind_next_frame+0x1aaf/0x23c0
[  713.816790][T16734]                           arch_stack_walk+0x11b/0x150
[  713.823741][T16734]                           stack_trace_save+0xa9/0x100
[  713.830692][T16734]                           kasan_save_track+0x3e/0x80
[  713.837552][T16734]                           __kasan_kmalloc+0x93/0xb0
[  713.844345][T16734]                           __kmalloc_noprof+0x35c/0x760
[  713.851429][T16734]                           tomoyo_encode+0x28b/0x550
[  713.858282][T16734]                           tomoyo_realpath_from_path+0x58d/0x5d0
[  713.866094][T16734]                           tomoyo_check_open_permission+0x229/0x470
[  713.874178][T16734]                           security_file_open+0xa9/0x240
[  713.881312][T16734]                           do_dentry_open+0x384/0x14e0
[  713.888270][T16734]                           vfs_open+0x3b/0x340
[  713.894543][T16734]                           path_openat+0x2e08/0x3860
[  713.901322][T16734]                           do_file_open+0x23e/0x4a0
[  713.908027][T16734]                           do_sys_openat2+0x113/0x200
[  713.914900][T16734]                           __x64_sys_openat+0x138/0x170
[  713.921930][T16734]                           do_syscall_64+0x14d/0xf80
[  713.928707][T16734]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.936784][T16734]       INITIAL USE at:
[  713.940945][T16734]                          lock_acquire+0xf0/0x2e0
[  713.947460][T16734]                          _raw_spin_lock_irqsave+0x40/0x60
[  713.954756][T16734]                          input_inject_event+0xa5/0x340
[  713.961807][T16734]                          kbd_led_trigger_activate+0xbc/0x100
[  713.969385][T16734]                          led_trigger_set+0x535/0x960
[  713.976246][T16734]                          led_trigger_set_default+0x260/0x2a0
[  713.983808][T16734]                          led_classdev_register_ext+0x787/0x9c0
[  713.991554][T16734]                          input_leds_connect+0x517/0x790
[  713.998732][T16734]                          input_register_device+0xd00/0x1160
[  714.006205][T16734]                          atkbd_connect+0x731/0xa50
[  714.012888][T16734]                          serio_driver_probe+0x82/0xd0
[  714.019862][T16734]                          really_probe+0x267/0xaf0
[  714.026501][T16734]                          __driver_probe_device+0x18c/0x320
[  714.033890][T16734]                          driver_probe_device+0x4f/0x240
[  714.041023][T16734]                          __driver_attach+0x34c/0x640
[  714.047896][T16734]                          bus_for_each_dev+0x23b/0x2c0
[  714.054879][T16734]                          serio_handle_event+0x20a/0xdd0
[  714.061999][T16734]                          process_scheduled_works+0xb6e/0x18c0
[  714.069643][T16734]                          worker_thread+0xa53/0xfc0
[  714.076337][T16734]                          kthread+0x388/0x470
[  714.082496][T16734]                          ret_from_fork+0x51e/0xb90
[  714.089192][T16734]                          ret_from_fork_asm+0x1a/0x30
[  714.096074][T16734]     }
[  714.098851][T16734]     ... key      at: [<ffffffff9a614c00>] input_allocate_device.__key.7+0x0/0x20
[  714.108192][T16734]   -> (&client->buffer_lock){....}-{3:3} {
[  714.114127][T16734]      INITIAL USE at:
[  714.118212][T16734]                        lock_acquire+0xf0/0x2e0
[  714.124557][T16734]                        _raw_spin_lock_irq+0x3d/0x50
[  714.131332][T16734]                        evdev_read+0x37d/0xcb0
[  714.137583][T16734]                        vfs_read+0x20c/0xa70
[  714.143674][T16734]                        ksys_read+0x150/0x270
[  714.149852][T16734]                        do_syscall_64+0x14d/0xf80
[  714.156384][T16734]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.164209][T16734]    }
[  714.166912][T16734]    ... key      at: [<ffffffff9a614ea0>] evdev_open.__key.27+0x0/0x20
[  714.175292][T16734]    ... acquired at:
[  714.179283][T16734]    _raw_spin_lock+0x2e/0x40
[  714.183982][T16734]    evdev_pass_values+0xb9/0xbd0
[  714.189025][T16734]    evdev_events+0x1aa/0x340
[  714.193715][T16734]    input_pass_values+0x1c2/0x890
[  714.198846][T16734]    input_event_dispose+0x330/0x6b0
[  714.204161][T16734]    input_inject_event+0x1dd/0x340
[  714.209403][T16734]    evdev_write+0x325/0x4c0
[  714.214038][T16734]    vfs_write+0x29a/0xb90
[  714.218475][T16734]    ksys_write+0x150/0x270
[  714.223027][T16734]    do_syscall_64+0x14d/0xf80
[  714.227829][T16734]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.233910][T16734] 
[  714.236251][T16734]  -> (&new->fa_lock){....}-{3:3} {
[  714.241500][T16734]     INITIAL USE at:
[  714.245494][T16734]                      lock_acquire+0xf0/0x2e0
[  714.251677][T16734]                      _raw_write_lock_irq+0x3d/0x50
[  714.258387][T16734]                      fasync_remove_entry+0xf1/0x1c0
[  714.265156][T16734]                      lease_modify+0x4f7/0x6c0
[  714.271416][T16734]                      locks_remove_file+0x5f0/0xf70
[  714.278113][T16734]                      __fput+0x3ae/0xa70
[  714.283856][T16734]                      task_work_run+0x1d9/0x270
[  714.290199][T16734]                      exit_to_user_mode_loop+0xed/0x480
[  714.297232][T16734]                      do_syscall_64+0x32d/0xf80
[  714.303576][T16734]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.311227][T16734]     INITIAL READ USE at:
[  714.315656][T16734]                           lock_acquire+0xf0/0x2e0
[  714.322257][T16734]                           _raw_read_lock_irqsave+0x48/0x60
[  714.329632][T16734]                           kill_fasync+0x199/0x4d0
[  714.336240][T16734]                           sock_wake_async+0x137/0x160
[  714.343223][T16734]                           sk_wake_async+0x184/0x280
[  714.350034][T16734]                           unix_release_sock+0x74f/0xc80
[  714.357170][T16734]                           unix_release+0x92/0xd0
[  714.363782][T16734]                           sock_close+0xc3/0x240
[  714.370225][T16734]                           __fput+0x44f/0xa70
[  714.376439][T16734]                           task_work_run+0x1d9/0x270
[  714.383228][T16734]                           get_signal+0x11eb/0x1330
[  714.389933][T16734]                           arch_do_signal_or_restart+0xbc/0x830
[  714.397678][T16734]                           exit_to_user_mode_loop+0x86/0x480
[  714.405158][T16734]                           do_syscall_64+0x32d/0xf80
[  714.411953][T16734]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.420030][T16734]   }
[  714.422626][T16734]   ... key      at: [<ffffffff9a2f5700>] fasync_insert_entry.__key+0x0/0x20
[  714.431435][T16734]   ... acquired at:
[  714.435336][T16734]    _raw_read_lock_irqsave+0x48/0x60
[  714.440726][T16734]    kill_fasync+0x199/0x4d0
[  714.445327][T16734]    evdev_pass_values+0x627/0xbd0
[  714.450455][T16734]    evdev_events+0x1e6/0x340
[  714.455147][T16734]    input_pass_values+0x288/0x890
[  714.460269][T16734]    input_event_dispose+0x330/0x6b0
[  714.465692][T16734]    input_inject_event+0x1dd/0x340
[  714.470933][T16734]    evdev_write+0x325/0x4c0
[  714.475573][T16734]    vfs_write+0x29a/0xb90
[  714.480019][T16734]    ksys_write+0x150/0x270
[  714.484547][T16734]    do_syscall_64+0x14d/0xf80
[  714.489333][T16734]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.495415][T16734] 
[  714.497758][T16734] -> (&f_owner->lock){....}-{3:3} {
[  714.503012][T16734]    INITIAL USE at:
[  714.506932][T16734]                    lock_acquire+0xf0/0x2e0
[  714.512925][T16734]                    _raw_write_lock_irq+0x3d/0x50
[  714.519441][T16734]                    __f_setown+0x67/0x370
[  714.525273][T16734]                    generic_setlease+0xacf/0xff0
[  714.531697][T16734]                    do_fcntl_add_lease+0x35e/0x470
[  714.538310][T16734]                    fcntl_setlease+0x123/0x180
[  714.544593][T16734]                    do_fcntl+0x8b3/0x1a20
[  714.550419][T16734]                    __se_sys_fcntl+0xc8/0x150
[  714.556583][T16734]                    do_syscall_64+0x14d/0xf80
[  714.562754][T16734]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.570232][T16734]    INITIAL READ USE at:
[  714.574585][T16734]                         lock_acquire+0xf0/0x2e0
[  714.581025][T16734]                         _raw_read_lock_irqsave+0x48/0x60
[  714.588272][T16734]                         send_sigio+0x38/0x370
[  714.594531][T16734]                         dnotify_handle_event+0x169/0x440
[  714.601757][T16734]                         fsnotify+0x1831/0x1ae0
[  714.608109][T16734]                         vfs_readv+0x6dc/0x840
[  714.614373][T16734]                         __x64_sys_preadv+0x19f/0x2a0
[  714.621244][T16734]                         do_syscall_64+0x14d/0xf80
[  714.627847][T16734]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.635755][T16734]  }
[  714.638266][T16734]  ... key      at: [<ffffffff9a2f56e0>] file_f_owner_allocate.__key+0x0/0x20
[  714.647142][T16734]  ... acquired at:
[  714.650956][T16734]    _raw_read_lock_irqsave+0x48/0x60
[  714.656357][T16734]    send_sigio+0x38/0x370
[  714.660819][T16734]    kill_fasync+0x24d/0x4d0
[  714.665422][T16734]    sock_wake_async+0x137/0x160
[  714.670368][T16734]    sk_wake_async+0x184/0x280
[  714.675153][T16734]    unix_release_sock+0x74f/0xc80
[  714.680284][T16734]    unix_release+0x92/0xd0
[  714.684813][T16734]    sock_close+0xc3/0x240
[  714.689263][T16734]    __fput+0x44f/0xa70
[  714.693446][T16734]    task_work_run+0x1d9/0x270
[  714.698237][T16734]    get_signal+0x11eb/0x1330
[  714.702974][T16734]    arch_do_signal_or_restart+0xbc/0x830
[  714.708710][T16734]    exit_to_user_mode_loop+0x86/0x480
[  714.714275][T16734]    do_syscall_64+0x32d/0xf80
[  714.719070][T16734]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.725146][T16734] 
[  714.727478][T16734] 
[  714.727478][T16734] the dependencies between the lock to be acquired
[  714.727489][T16734]  and SOFTIRQ-irq-unsafe lock:
[  714.741015][T16734] -> (tasklist_lock){.+.+}-{3:3} {
[  714.746152][T16734]    HARDIRQ-ON-R at:
[  714.750143][T16734]                     lock_acquire+0xf0/0x2e0
[  714.756222][T16734]                     _raw_read_lock+0x36/0x50
[  714.762387][T16734]                     __do_wait+0xde/0x740
[  714.768201][T16734]                     do_wait+0x1e7/0x540
[  714.773934][T16734]                     kernel_wait+0xd6/0x1c0
[  714.779932][T16734]                     call_usermodehelper_exec_work+0xbe/0x230
[  714.787498][T16734]                     process_scheduled_works+0xb6e/0x18c0
[  714.794717][T16734]                     worker_thread+0xa53/0xfc0
[  714.800980][T16734]                     kthread+0x388/0x470
[  714.806740][T16734]                     ret_from_fork+0x51e/0xb90
[  714.812996][T16734]                     ret_from_fork_asm+0x1a/0x30
[  714.819434][T16734]    SOFTIRQ-ON-R at:
[  714.823431][T16734]                     lock_acquire+0xf0/0x2e0
[  714.829525][T16734]                     _raw_read_lock+0x36/0x50
[  714.835697][T16734]                     __do_wait+0xde/0x740
[  714.841603][T16734]                     do_wait+0x1e7/0x540
[  714.847378][T16734]                     kernel_wait+0xd6/0x1c0
[  714.853468][T16734]                     call_usermodehelper_exec_work+0xbe/0x230
[  714.861040][T16734]                     process_scheduled_works+0xb6e/0x18c0
[  714.868252][T16734]                     worker_thread+0xa53/0xfc0
[  714.874512][T16734]                     kthread+0x388/0x470
[  714.880245][T16734]                     ret_from_fork+0x51e/0xb90
[  714.886507][T16734]                     ret_from_fork_asm+0x1a/0x30
[  714.892948][T16734]    INITIAL USE at:
[  714.896865][T16734]                    lock_acquire+0xf0/0x2e0
[  714.902881][T16734]                    _raw_write_lock_irq+0x3d/0x50
[  714.909419][T16734]                    copy_process+0x247a/0x3cd0
[  714.915689][T16734]                    kernel_clone+0x248/0x8e0
[  714.921800][T16734]                    user_mode_thread+0x110/0x180
[  714.928236][T16734]                    rest_init+0x23/0x300
[  714.933972][T16734]                    start_kernel+0x385/0x3d0
[  714.940072][T16734]                    x86_64_start_reservations+0x24/0x30
[  714.947115][T16734]                    x86_64_start_kernel+0x143/0x1c0
[  714.953805][T16734]                    common_startup_64+0x13e/0x147
[  714.960408][T16734]    INITIAL READ USE at:
[  714.964741][T16734]                         lock_acquire+0xf0/0x2e0
[  714.971168][T16734]                         _raw_read_lock+0x36/0x50
[  714.977687][T16734]                         __do_wait+0xde/0x740
[  714.983855][T16734]                         do_wait+0x1e7/0x540
[  714.989951][T16734]                         kernel_wait+0xd6/0x1c0
[  714.996297][T16734]                         call_usermodehelper_exec_work+0xbe/0x230
[  715.004205][T16734]                         process_scheduled_works+0xb6e/0x18c0
[  715.011773][T16734]                         worker_thread+0xa53/0xfc0
[  715.018389][T16734]                         kthread+0x388/0x470
[  715.024468][T16734]                         ret_from_fork+0x51e/0xb90
[  715.031097][T16734]                         ret_from_fork_asm+0x1a/0x30
[  715.037875][T16734]  }
[  715.040385][T16734]  ... key      at: [<ffffffff8e40c058>] tasklist_lock+0x18/0x40
[  715.048168][T16734]  ... acquired at:
[  715.051979][T16734]    _raw_read_lock+0x36/0x50
[  715.056670][T16734]    send_sigurg+0x12b/0x420
[  715.061266][T16734]    sk_send_sigurg+0x6c/0x2e0
[  715.066045][T16734]    queue_oob+0x42c/0x4f0
[  715.070467][T16734]    unix_stream_sendmsg+0xcb1/0xe80
[  715.075773][T16734]    ____sys_sendmsg+0x972/0x9f0
[  715.080724][T16734]    ___sys_sendmsg+0x2a5/0x360
[  715.085590][T16734]    __sys_sendmmsg+0x27c/0x4e0
[  715.090468][T16734]    __x64_sys_sendmmsg+0xa0/0xc0
[  715.095512][T16734]    do_syscall_64+0x14d/0xf80
[  715.100297][T16734]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.106373][T16734] 
[  715.108711][T16734] 
[  715.108711][T16734] stack backtrace:
[  715.114636][T16734] CPU: 1 UID: 0 PID: 16734 Comm: syz.2.2934 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  715.114669][T16734] Tainted: [L]=SOFTLOCKUP
[  715.114676][T16734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  715.114688][T16734] Call Trace:
[  715.114696][T16734]  <TASK>
[  715.114704][T16734]  dump_stack_lvl+0xe8/0x150
[  715.114732][T16734]  __lock_acquire+0x2a94/0x2cf0
[  715.114765][T16734]  lock_acquire+0xf0/0x2e0
[  715.114787][T16734]  ? send_sigurg+0x12b/0x420
[  715.114811][T16734]  _raw_read_lock+0x36/0x50
[  715.114831][T16734]  ? send_sigurg+0x12b/0x420
[  715.114849][T16734]  send_sigurg+0x12b/0x420
[  715.114869][T16734]  sk_send_sigurg+0x6c/0x2e0
[  715.114897][T16734]  queue_oob+0x42c/0x4f0
[  715.114914][T16734]  ? __pfx_queue_oob+0x10/0x10
[  715.114932][T16734]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  715.114956][T16734]  unix_stream_sendmsg+0xcb1/0xe80
[  715.114995][T16734]  ? rcu_is_watching+0x15/0xb0
[  715.115019][T16734]  ? trace_sched_exit_tp+0x3a/0x150
[  715.115041][T16734]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  715.115067][T16734]  ? aa_sock_msg_perm+0xda/0x1b0
[  715.115094][T16734]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  715.115113][T16734]  ____sys_sendmsg+0x972/0x9f0
[  715.115137][T16734]  ? __pfx_____sys_sendmsg+0x10/0x10
[  715.115160][T16734]  ? import_iovec+0x73/0xa0
[  715.115180][T16734]  ___sys_sendmsg+0x2a5/0x360
[  715.115202][T16734]  ? __pfx____sys_sendmsg+0x10/0x10
[  715.115225][T16734]  ? __pfx_futex_wake_mark+0x10/0x10
[  715.115260][T16734]  ? __fget_files+0x2a/0x420
[  715.115274][T16734]  ? __fget_files+0x3a0/0x420
[  715.115291][T16734]  __sys_sendmmsg+0x27c/0x4e0
[  715.115314][T16734]  ? __pfx___sys_sendmmsg+0x10/0x10
[  715.115334][T16734]  ? do_futex+0x333/0x420
[  715.115357][T16734]  ? __pfx_do_fcntl+0x10/0x10
[  715.115379][T16734]  ? __fget_files+0x2a/0x420
[  715.115393][T16734]  ? __pfx___se_sys_futex+0x10/0x10
[  715.115418][T16734]  __x64_sys_sendmmsg+0xa0/0xc0
[  715.115440][T16734]  do_syscall_64+0x14d/0xf80
[  715.115461][T16734]  ? trace_irq_disable+0x3b/0x150
[  715.115475][T16734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.115491][T16734]  ? clear_bhb_loop+0x40/0x90
[  715.115510][T16734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.115526][T16734] RIP: 0033:0x7fb6dbd9c819
[  715.115543][T16734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.115558][T16734] RSP: 002b:00007fb6dcbf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  715.115577][T16734] RAX: ffffffffffffffda RBX: 00007fb6dc015fa0 RCX: 00007fb6dbd9c819
[  715.115590][T16734] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 000000000000000e
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  715.115601][T16734] RBP: 00007fb6dbe32c91 R08: 0000000000000000 R09: 0000000000000000
[  715.115612][T16734] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000
[  715.115622][T16734] R13: 00007fb6dc016038 R14: 00007fb6dc015fa0 R15: 00007fb6dc13fa48
[  715.115641][T16734]  </TASK>
[  715.192889][T10834] usb 6-1: USB disconnect, device number 81
[  715.546464][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  716.190886][T15722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.233609][T16724] syz_tun (unregistering): left allmulticast mode
[  716.292750][T15722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.354036][T15722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.410862][T15722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.514023][T15722] bridge_slave_1: left allmulticast mode
[  716.525036][T15722] bridge_slave_1: left promiscuous mode
[  716.530802][T15722] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.540021][T15722] bridge_slave_0: left allmulticast mode
[  716.547406][T15722] bridge_slave_0: left promiscuous mode
[  716.553178][T15722] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.643033][T15722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.653726][T15722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.664682][T15722] bond0 (unregistering): Released all slaves
[  716.857699][T15722] hsr_slave_0: left promiscuous mode
[  716.874584][T15722] hsr_slave_1: left promiscuous mode
[  716.880943][T15722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.902001][T15722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.918411][T15722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.931042][T15722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.942715][T15722] veth1_macvtap: left promiscuous mode
[  716.948582][T15722] veth0_macvtap: left promiscuous mode
[  716.954156][T15722] veth1_vlan: left promiscuous mode
[  716.962862][T15722] veth0_vlan: left promiscuous mode
[  717.127328][T15722] team0 (unregistering): Port device team_slave_1 removed
[  717.139791][T15722] team0 (unregistering): Port device team_slave_0 removed
[  717.561504][T15722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.572732][T15722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.672616][T15722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.687725][T15722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.719873][T15722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.744643][T15722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.818957][T15722] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  717.828353][T15722] team0: Port device netdevsim0 removed
[  717.836976][T15722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.847425][T15722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.923522][T15722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.933940][T15722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  717.945162][T15722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.009680][T15722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  718.020285][T15722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  718.032216][T15722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.081376][T15722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  718.091920][T15722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  718.102292][T15722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.150829][T15722] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  718.161192][T15722] netdevsim netdevsim4  (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  718.171085][T15722] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.303885][ T8209] tipc: Resetting bearer <ib:wg1>
[  718.548734][T15722] bridge0: port 3(batadv0) entered disabled state
[  718.557207][T15722] bridge_slave_1: left allmulticast mode
[  718.562911][T15722] bridge_slave_1: left promiscuous mode
[  718.568988][T15722] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.581623][T15722] bridge_slave_1: left allmulticast mode
[  718.589434][T15722] bridge_slave_1: left promiscuous mode
[  718.597794][T15722] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.608240][T15722] bridge_slave_0: left allmulticast mode
[  718.613952][T15722] bridge_slave_0: left promiscuous mode
[  718.620191][T15722] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.734097][T15722] bond3 (unregistering): (slave gretap1): Releasing active interface
[  718.751813][T15722] gretap1 (unregistering): left allmulticast mode
[  718.761148][T15722] bond8 (unregistering): (slave gretap2): Releasing active interface
[  718.779917][T15722] bond6 (unregistering): (slave geneve2): Releasing backup interface
[  718.886620][T15722] bond7 (unregistering): (slave bridge2): Releasing active interface
[  718.894863][T15722] bridge2 (unregistering): left promiscuous mode
[  718.901190][T15722] bridge2 (unregistering): left allmulticast mode
[  718.947016][T15722] bond1 (unregistering): Released all slaves
[  718.957556][T15722] bond2 (unregistering): (slave veth3): Releasing active interface
[  718.967057][T15722] bond2 (unregistering): (slave vlan0): Releasing active interface
[  718.975733][T15722] veth0_to_bond: left promiscuous mode
[  718.981897][T15722] bond2 (unregistering): Released all slaves
[  718.992998][T15722] bond3 (unregistering): Released all slaves
[  719.002548][T15722] bond4 (unregistering): Released all slaves
[  719.012994][T15722] bond5 (unregistering): Released all slaves
[  719.022897][T15722] bond6 (unregistering): Released all slaves
[  719.037068][T15722] bond7 (unregistering): Released all slaves
[  719.050336][T15722] bond8 (unregistering): Released all slaves
[  719.066112][T15722] bond9 (unregistering): Released all slaves
[  719.141750][T15722] bond6 (unregistering): (slave geneve3): Releasing active interface
[  719.317918][T15722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  719.328065][T15722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  719.338280][T15722] bond0 (unregistering): Released all slaves
[  719.346319][T15722] bond1 (unregistering): Released all slaves
[  719.356900][T15722] bond2 (unregistering): Released all slaves
[  719.366596][T15722] bond3 (unregistering): Released all slaves
[  719.376156][T15722] bond4 (unregistering): Released all slaves
[  719.388255][T15722] bond5 (unregistering): (slave veth5): Releasing active interface
[  719.397351][T15722] bond5 (unregistering): Released all slaves
[  719.412508][T15722] bond6 (unregistering): Released all slaves
[  719.512695][T15722] bond0 (unregistering): left promiscuous mode
[  719.518970][T15722] bond_slave_0: left promiscuous mode
[  719.524464][T15722] bond_slave_1: left promiscuous mode
[  719.530988][T15722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  719.540001][T15722] bond_slave_0: left allmulticast mode
[  719.547636][T15722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  719.556979][T15722] bond_slave_1: left allmulticast mode
[  719.562745][T15722] bond0 (unregistering): Released all slaves
[  719.570883][T15722] bond1 (unregistering): Released all slaves
[  719.703291][T15722] tipc: Disabling bearer <ib:wg1>
[  719.709014][T15722] tipc: Left network mode
[  719.732360][T15722] tipc: Disabling bearer <eth:syzkaller0>
[  719.738768][T15722] tipc: Left network mode
[  719.757755][T15722] IPVS: stopping backup sync thread 11999 ...
[  720.452551][T15722] hsr_slave_0: left promiscuous mode
[  720.468122][T15722] hsr_slave_1: left promiscuous mode
[  720.477497][T15722] hsr_slave_0: left promiscuous mode
[  720.483624][T15722] hsr_slave_1: left promiscuous mode
[  720.490153][T15722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.499063][T15722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.508589][T15722] batadv0: left promiscuous mode
[  720.517017][T15722] hsr_slave_0: left promiscuous mode
[  720.522868][T15722] hsr_slave_1: left promiscuous mode
[  720.528948][T15722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.536972][T15722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.548025][T15722] veth1_macvtap: left promiscuous mode
[  720.553670][T15722] veth0_macvtap: left promiscuous mode
[  720.837889][T15722] team_slave_1 (unregistering): left allmulticast mode
[  720.853045][T15722] team0 (unregistering): Port device team_slave_1 removed
[  720.863490][T15722] team_slave_0 (unregistering): left allmulticast mode
[  720.870894][T15722] team0 (unregistering): Port device team_slave_0 removed
[  720.982533][T15722] team0 (unregistering): Port device team_slave_1 removed
[  720.993462][T15722] team0 (unregistering): Port device team_slave_0 removed
[  721.631590][T15722] IPVS: stop unused estimator thread 0...