last executing test programs:

42.512946651s ago: executing program 0 (id=520):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150002020000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r1, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x5, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0xfff2}, {0x5, 0xfff3}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c8855}, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c)
memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r10, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x54000, 0x3, 0x7, 0x1, 0x0, [{0x9, 0x4, 0xe, '\x00', 0x3}, {0x1a, 0xf, 0x31, '\x00', 0xbc}, {0x40, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x5, 0x1f, '\x00', 0x9}, {0x0, 0x4, 0x3, '\x00', 0x3}, {0x0, 0x0, 0x9, '\x00', 0xf}, {0x8d, 0x7, 0xfe, '\x00', 0x7}, {0x10, 0x2}, {0x9, 0x3, 0x40, '\x00', 0x40}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x3, 0x4, 0x0, '\x00', 0xba}, {0x7, 0xe, 0x5, '\x00', 0x80}, {0x8, 0x2, 0x43, '\x00', 0x3}, {0x0, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x55, 0x1, '\x00', 0x8}, {0x7, 0xfe, 0xd, '\x00', 0x6}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0x8, 0xff, 0x4, '\x00', 0x4}, {0xff, 0x6, 0x2, '\x00', 0x5}, {0x8, 0x9, 0x9, '\x00', 0x45}, {0x2, 0x9, 0x8, '\x00', 0x9f}, {0x4, 0x8, 0xff, '\x00', 0x2}, {0xc5, 0xc, 0x7, '\x00', 0x3}, {0x0, 0x6, 0x3, '\x00', 0x5}]}})

41.357064225s ago: executing program 0 (id=522):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2040400)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = syz_io_uring_setup(0x118d, 0x0, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)

40.010037889s ago: executing program 0 (id=526):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x6a040000)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0xffffc8b7, 0x200100)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
preadv2(r4, 0x0, 0x0, 0x2, 0x5, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x3000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0xeeee0000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=<r7=>0x0, &(0x7f0000002d00)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0xfffffffffffffff0}], 0x1}, 0x0, 0x24004890})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)

38.798367839s ago: executing program 1 (id=528):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x129740, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
r1 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002380)={'bridge0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x88}})
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000a40)=""/38, 0x26}], 0x5, 0x10000, 0xfffffff9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

38.522004898s ago: executing program 0 (id=530):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd3, 0x40000)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x101c, 0x6, 0x9, 0x9fb4, 0xd, 0x1})
socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000400210000000000"], 0x1d)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x8a0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0x6, 0x7}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x40c0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', <r5=>0x0, 0x10, 0x80, 0xffff, 0x5, {{0x15, 0x4, 0x3, 0x4, 0x54, 0xfffd, 0x0, 0x7, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, {[@rr={0x7, 0x3, 0xf2}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x5f, 0x3, 0x1, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x204}]}, @rr={0x7, 0x7, 0x2e, [@rand_addr=0x64010101]}, @timestamp={0x44, 0xc, 0xd2, 0x0, 0xd, [0x534, 0x3]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x6, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}]}}}}})
r6 = openat$sequencer2(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000300), &(0x7f0000001300)={0x0, 0xfb, 0x1015, 0x3, 0x8, "6aab6b8bc97c8242bdd6998ed70e8891", "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"}, 0x1015, 0x2)
r7 = fsmount(0xffffffffffffffff, 0x1, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000fb000000010000000100000006c80600", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0300000003000000030000000200100000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

38.398237345s ago: executing program 1 (id=531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="6dcd817563929ea4e254f4af6dc352221db70536599b3eb231727406e0e800fdd6d1c700301b7b97d38d61b383a4b57b10e277301f", @ANYBLOB="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", @ANYBLOB="01002cbd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x4d, 0x2000008}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000048}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56143, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {0xfff3}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000202050000000000000000000a000005440002802c0001801400230000000000000000000000ffffac1414aa14000400fe8000000000000000000000000000aa06000340000300000c00028005000100324a00003d2257a6c51ae5165019f6ff769f148801d09e9136d548e45a63a3355a3f3a11746fc643e47c"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4008004)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x4, 0xfffffff1, 0x5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)
ioctl$TCXONC(r9, 0x540a, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040))
r11 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r11, 0xc0f8565c, &(0x7f0000000180)={0x5, 0x3ff, 0x2, {0x5, @win={{0x7, 0xff, 0xac72, 0x5}, 0x7, 0x3, &(0x7f0000000640)={{0x3, 0x200, 0x9, 0x4a7}}, 0x0, 0x0, 0x1}}, 0x10059f})
r12 = socket$netlink(0x10, 0x3, 0x2)
sendmsg(r12, &(0x7f0000000300)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a4454653ccd7d0173032676fae50a78d88ee3a54", 0x14}, {&(0x7f0000000440)="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", 0x1000}, {0xffffffffffffffff}, {&(0x7f0000000100)="1e8b53192b2b9b9a5d148bd9d99912006cc05ec6818f7cf6d196c6d32b08ad030e46f90a3d9be000bfb26190cac6f17c06b561347ebfa10df80ff6379c40fc7a1a9521553c", 0x45}, {&(0x7f0000000180)}, {&(0x7f0000001440)="e3413a1c2e936c9ef7bf50f32357777ee30297c29ce12cfd6fee7344f9f46c0964dc6a6b002aa6a26d21f3bdbf9f613d87331a5681870bd49463c3bfd2fa00c9462d4f17828c063439ef3f14b6bda890bbb6ddd8cd174c5078dead8e545f7030c65f1410a9274a187fa6fb0f09ac9ae3dc2709677642f9d9fc79f3cfe08c0564cbf604e056cca6b92ee10ed9791e82822d1217ce516fb7e452ca798039f1d4d44bd1ab95773800", 0xa7}, {&(0x7f0000001500)="db2a478bf5ca4b1d1409ee236602dba1e79479800c71b73f86161b52ccae73db996b3763ad75c1f0b88d5d76c6c29880fdb5952c77162ad4b5b8b88f52dc02f1cf42f94350eb7cd605b7958e3057c3822346ebdc4633a96627e4d989bf23005d8de0665fbdb3c56001fe50371563c7630977668793ca036d6c", 0x79}], 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="200000001701000003000000440f2907b6c27b99e9db2cc81f1435c0185ab81fac00000006000000fcffffff226fbab472f11405edbb69467303aa181155be396354c957371fc1d0f9c4f9142e3a6bcd0dc050c08129e1a18684ffc75cecee55495eddff8ba6cf9f1d79dbe77ebc091026922d6f31dfe75b386c1ebf5c067d83e753ad44e5a923980228df425db25375372a3357ced70a1397dca18934c42c59c28bf172c87eaa6f5897d20f92c5cdcdf54fccba493c6fcbe01b48234a2c435a523fc97b415b1c9d755c3559bc0000001901000000800000bf55176123dc456cadc9e9ccde7394803c6b6b3f2f23ab086d2c9a412b1cd658bc193c1da03b7b6efc742503afa0b34acfd75d3058886d7e5a8c23bdb75c1632ab6048f03c71475e4d40be56c8281ee8ad84527d1969b8b16d27cad051d23f37cd12dd724cda6531d99f4a34b0f88005e54e46b12494cdfb8d36febcd5704ec8189cd554a84ba9bad88d40dfddc21fa49e89a69e9e277066fe768a39cd3337a0e9bb000000e80000000000000001040000deaf090b63a14a82a38dc3cc272f7d8c26946f5205dcddee9e836204e6c82ad214e814b8d2960063af6454a46ada6c24a7ba24c0b2fd7d40a25c1aeeac719921e353bf7a309c332768dfabbe8d7088c60083b51f5d9f82aaf29e1e46072debc5512e467a8e7be43f2db3e47812f84c3e6d5c9862007aa9321f726abf8e1ccef6c0290b145a1d441e683f171c77508e0846e5032bf812066ea218240b027da3272661724ae7287d89f8a29deaa5df0f3ef88a3289dc455128502c6a5d8e920a8796da21c3b41c8ef32de4ec2fd15549f508aa0c9b11c24b0d70f90000"], 0x270}, 0x40)
socket(0x40000000015, 0x5, 0x0)

35.241798337s ago: executing program 1 (id=534):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150002020000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r1, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x5, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0xfff2}, {0x5, 0xfff3}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c8855}, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c)
memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r10, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x54000, 0x3, 0x7, 0x1, 0x0, [{0x9, 0x4, 0xe, '\x00', 0x3}, {0x1a, 0xf, 0x31, '\x00', 0xbc}, {0x40, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x5, 0x1f, '\x00', 0x9}, {0x0, 0x4, 0x3, '\x00', 0x3}, {0x0, 0x0, 0x9, '\x00', 0xf}, {0x8d, 0x7, 0xfe, '\x00', 0x7}, {0x10, 0x2}, {0x9, 0x3, 0x40, '\x00', 0x40}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x3, 0x4, 0x0, '\x00', 0xba}, {0x7, 0xe, 0x5, '\x00', 0x80}, {0x8, 0x2, 0x43, '\x00', 0x3}, {0x0, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x55, 0x1, '\x00', 0x8}, {0x7, 0xfe, 0xd, '\x00', 0x6}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0x8, 0xff, 0x4, '\x00', 0x4}, {0xff, 0x6, 0x2, '\x00', 0x5}, {0x8, 0x9, 0x9, '\x00', 0x45}, {0x2, 0x9, 0x8, '\x00', 0x9f}, {0x4, 0x8, 0xff, '\x00', 0x2}, {0xc5, 0xc, 0x7, '\x00', 0x3}, {0x0, 0x6, 0x3, '\x00', 0x5}]}})

35.232698121s ago: executing program 0 (id=544):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="6dcd817563929ea4e254f4af6dc352221db70536599b3eb231727406e0e800fdd6d1c700301b7b97d38d61b383a4b57b10e277301f", @ANYBLOB="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", @ANYBLOB="01002cbd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x4d, 0x2000008}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000048}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56143, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {0xfff3}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000202050000000000000000000a000005440002802c0001801400230000000000000000000000ffffac1414aa14000400fe8000000000000000000000000000aa06000340000300000c00028005000100324a00003d2257a6c51ae5165019f6ff769f148801d09e9136d548e45a63a3355a3f3a11746fc643e47c"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4008004)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x4, 0xfffffff1, 0x5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)
ioctl$TCXONC(r9, 0x540a, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040))
r11 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r11, 0xc0f8565c, &(0x7f0000000180)={0x5, 0x3ff, 0x2, {0x5, @win={{0x7, 0xff, 0xac72, 0x5}, 0x7, 0x3, &(0x7f0000000640)={{0x3, 0x200, 0x9, 0x4a7}}, 0x0, 0x0, 0x1}}, 0x10059f})
r12 = socket$netlink(0x10, 0x3, 0x2)
sendmsg(r12, &(0x7f0000000300)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a4454653ccd7d0173032676fae50a78d88ee3a54", 0x14}, {&(0x7f0000000440)="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", 0x1000}, {0xffffffffffffffff}, {&(0x7f0000000100)="1e8b53192b2b9b9a5d148bd9d99912006cc05ec6818f7cf6d196c6d32b08ad030e46f90a3d9be000bfb26190cac6f17c06b561347ebfa10df80ff6379c40fc7a1a9521553c", 0x45}, {&(0x7f0000000180)}, {&(0x7f0000001440)="e3413a1c2e936c9ef7bf50f32357777ee30297c29ce12cfd6fee7344f9f46c0964dc6a6b002aa6a26d21f3bdbf9f613d87331a5681870bd49463c3bfd2fa00c9462d4f17828c063439ef3f14b6bda890bbb6ddd8cd174c5078dead8e545f7030c65f1410a9274a187fa6fb0f09ac9ae3dc2709677642f9d9fc79f3cfe08c0564cbf604e056cca6b92ee10ed9791e82822d1217ce516fb7e452ca798039f1d4d44bd1ab95773800", 0xa7}, {&(0x7f0000001500)="db2a478bf5ca4b1d1409ee236602dba1e79479800c71b73f86161b52ccae73db996b3763ad75c1f0b88d5d76c6c29880fdb5952c77162ad4b5b8b88f52dc02f1cf42f94350eb7cd605b7958e3057c3822346ebdc4633a96627e4d989bf23005d8de0665fbdb3c56001fe50371563c7630977668793ca036d6c", 0x79}], 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x270}, 0x40)
socket(0x40000000015, 0x5, 0x0)

34.240766628s ago: executing program 1 (id=537):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680))
epoll_create1(0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, &(0x7f00000016c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
socket$inet(0x2, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000001780)=@ethtool_perm_addr={0x20, 0xffd, "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"}})
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
dup(r6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7)

33.052988602s ago: executing program 1 (id=541):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2040400)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = syz_io_uring_setup(0x118d, 0x0, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)

31.679706807s ago: executing program 0 (id=546):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x129740, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
r1 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002380)={'bridge0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x88}})
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000a40)=""/38, 0x26}], 0x5, 0x10000, 0xfffffff9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

31.417830582s ago: executing program 1 (id=547):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0xffffff97, 0x0, 0x3, 0x1}, 0x8)

28.192323748s ago: executing program 2 (id=554):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000)
r2 = dup(r1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$binfmt_aout(r2, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x20000041}}], 0x1, 0xc004)
lseek(0xffffffffffffffff, 0xfffffffe, 0x2)

26.851671987s ago: executing program 2 (id=556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x121000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x2, 0x0, 0xfff, {0x4, 0x401}, 0x4, 0x97})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x23, 0x0, &(0x7f0000001240))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x600200, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

26.5504173s ago: executing program 2 (id=557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="6dcd817563929ea4e254f4af6dc352221db70536599b3eb231727406e0e800fdd6d1c700301b7b97d38d61b383a4b57b10e277301f", @ANYBLOB="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", @ANYBLOB="01002cbd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x4d, 0x2000008}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000048}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56143, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {0xfff3}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000202050000000000000000000a000005440002802c0001801400230000000000000000000000ffffac1414aa14000400fe8000000000000000000000000000aa06000340000300000c00028005000100324a00003d2257a6c51ae5165019f6ff769f148801d09e9136d548e45a63a3355a3f3a11746fc643e47c"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4008004)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x4, 0xfffffff1, 0x5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)
ioctl$TCXONC(r9, 0x540a, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040))
r11 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r11, 0xc0f8565c, &(0x7f0000000180)={0x5, 0x3ff, 0x2, {0x5, @win={{0x7, 0xff, 0xac72, 0x5}, 0x7, 0x3, &(0x7f0000000640)={{0x3, 0x200, 0x9, 0x4a7}}, 0x0, 0x0, 0x1}}, 0x10059f})
r12 = socket$netlink(0x10, 0x3, 0x2)
sendmsg(r12, &(0x7f0000000300)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a4454653ccd7d0173032676fae50a78d88ee3a54", 0x14}, {&(0x7f0000000440)="d3eb8c47b1b55c4403d2326913ba35914b57a2c07dafcb0725bc866ee5259582e1f267d82e6cc3986b29ba9493b871016bb9c3f84cf2bbecb66942a736da6c5baa698456e7c051ea500a08d7c40d9a425f28dd965859e8b4dd5ea8d56ff409806f755e280e85d8bdb4d1da349a9a1ffa7c7a9e635316459da8588cdf7e97165965e574e70fc1912d87296b1e178f53790cd916ebaac892eadc87819f354148fb46191d305d09c3d29f968d20f3ca5ddc456009c64cd699c1d3f2d0b73f3749286a8d3d9ddc2820704e4560c0b73504bcb37924f0a3dfa05e9aeb563d5b40f27ab069999875be9a848d62e7f11bfab04b1378ac79b7628bf5fbb591682316da0009b06e07f305b49f1da0d50de45c502179174537f3fdea46fca46e02ccd785f3d746721a1f11b56f2e9d09996889570cba60285ec869fecea549b4377d52ccc9eb2f47371c898591f8be88cd4a0287283d3ec4bf686b837e90ef112148573d82f55303d6f4820da6045ad13bdfca27e5e49688ac0874fdfe20c7ac5c24a4f33d29e112b19151b8c0a90cb2638923b526cb2974f590756b6c6214dfa18e35b536e2adf080b2096f9186c357459479ab39eadf73998a4f74087f0d077edc58ae9638b7b387fb0cbdb5e330ab7bff7ebdca716d2231eaa943bc4ef4e9d3033095035ff0296de62f04aa90fda0625cc36116b755bdd6b56c2fc73f69c6ed5b1afd6c13434bd1419974e3f45aa1055ca8d28494102f71e691bcc14d563d2950239226bc3b5b77d46e30584a0558b261ea3ea371f88b90d110ee48dd1b07f536b7760912aa9f798197ef1373ea8f08035523e4fa1e97b7e66c31121ae7f8ddd3d8755a13c9857674c5b08751c25824db7ee989d997148185c08933628bc9b761744c09d84c6eb619cc0d6828da5b3f1495a55ff6ecda5fa44c3e6f29ebb3e83df57f5f9050805bb6e260bb776beca4ae2877145ec04449d99abd4cef2e98c73a9dfa1aaf4908811e620c29d95941a119fb522b11d61a079d40a9650e7010291216d722afe65532f37cd6cbe6ba12006357aaa1dd75dcd335791ae132129cd6a3a5bfa72fd5851adf783fcf5ecd89b9b7b9f642cc1d0997a7db5b48d5c411e13ca5d13c12d2ae0b9a07020b06ae17f55f55e0469fe02cfe5675cccb44a043b4f25464ef0c0b90014f6b947caac40d22efe6028981bf2457dc0c8deac80452b31edd562c9568268abd9a0c4fb2eff4dd3a24faee71580178745e0bac2bc0c525fb6171c0cf4cb134933a2fb8d06c243140b981076900aa3720189bb2b2dc11d992e15f918e3e23f6e929de362eb2b9feebc51ebd9d550fe9c63961f0aa888d34fbecab6c68629638cbe740c2a6c16a78916183dfb037f510f61c602df085b565450d397c0c2488ac5956005372c0d3994dc73da24c23dbe5a75ee839dfc65ba135188d8c4fcef68edca50aa1a48a57314f4edfa986a36e0f6a5481bedc654c651265502ffa7fa404a365913e798040115ffa6f43aa340398b4dec450fff0821b25f4583f37c84e122e5b205dc8e502a077536b1b44cae1466d7f33d4e571b1683cec5215cccc9066f051ef8145690aaf5cf062eb3cc4da0d1c795c59a6f0194501cd4ab62accd0d5e7a4b755b28472270f3a04e3b95bdd824482830cd3d7615be9b7c293b2097a2ccf0f2b0e9d41e4142fb5c559b025f50a621a3bf81e26908dd76020318722cc84ae76c1b2b203ad68b3e57685047ce41cf8551aa34d6f78cbedde6b5b2c1fed0fdd038589074cc5c9fbeb6c2f68e6832cf897c52a3f26a9108fcd27cdf3cc7e91c807195fa4cc6a0ac9ad2dec4d9317cf289af1fad03d5192cf4a698ef28e248d71777d5a181d06666165916106158741444dcb9fae89aa5328371d1f29ff67f6158ba9aa0a12f1e573d09635b5139c838b493c526f65bba64636fb9af1c9e4c1bfad4e91a26f2b6821332f1e33d66438424c9ac545574a46552d2c74bdebd074141f846208bde5789ae113e99756cb274bb470fcf6f638647b742911ee4a5c2deed8fe2ed1e0fa5041eb404453d76057385cfaf413eff503f285e15ac2d6b0b2a46f6aeee81204cab1d14f928a889b40e2b923ec727729a8ca24a546d1b5b07757280dea0f72a1b9846ee6d55cd6560e2778b63765182657ab5b7dfb6d8cdd6d56d7cef4dcf92495d6ad8ac42302b545cb29f7c4e8310166f6751a954fe3cce3b7685c98bb3ab6e2f3522a19c5e89f1aa9d2a46ee0cd834c739ae19e858fc1e09745a13d5f8223f81a65da694204e50e54fdc4887065b327fe015ce503aba1782895eae1dcc7960bf525e0813d60d84f15406c2bf6eed43dce71632a9ed7db089ed38a14468569aa40c470d7a9c0848452d96f84538ad90b6df2214ab2e568fa836c1139e1f996b0b7e68f6ddbd090caac21ade39f8249373d94010d10e33d51a828dd405d1d9f51f454701e1e9ce3cd2c00c810df02580598fb88795e5a5e83e59a0fd670e59e39e2ce085fa1af38f5f9da35e1c270cd8a70460298dfd703251d528653794a2d550d70b52d216396408892cfec1a6d86fcf5f6de11e7ef8663bc8cdbaac8959ab44b6cfa1e123300c538d10ca9073405a3c15fae5638b3f77c1e2e5babbba6977e37e0ca498409bcba775d6fe0640992b2c54233cd36c196ad166e5d6855db6f7dd42bedaa791b7bca121a8fba1f2e5966555eb4d31062ed4ac6939b8448fd5436a260d3693f25181f566972399df1d891e15ee499d610b7990ffb84799744704ddb0428d75e4e69f443c0be819e9ca0dde7b3818137c0914f78fbb24f53caeb6b6b6db234e4751c809d42ee2397a864f47e21c92d09ee10f8ecb163d0cec47bf2e6abe51fcf2a82a937559606cca9491aad0bdff6a9fedc26cdf80806c2bdc10e76b18a556f3f2e3c8118479a436e4e1fdaeeca7703d1163baff280b7ff1e3838cd45886999832f691ddf794e22f13e64d9f1b2ccd4c3aa57ed46bc1b1ca9ed8a12a7350b2d8fc11ef4d466c1c4e2fe42d9b4db38d66277129145514cda899e695f4f0656cfeb0662d60e32469a564166f2efc13c8d45fe32336fb24bf4d6104db880787abcb07c971d6a027c51cb49c8d183fe59f90005b065f7a7d2bbc0e9f3f6bbc7279ebb1f0b97d484f4df4b6b6e4e38ea2c8300c7928a2da19b4935a79503c835bfe1100fa690e426a93e2707badcce97510bbf7dba53285635a80053a5b9eef872ee8e7363d25c35b65ba7d0e8e508f6970538250515498e77ff635a01003d79bbc739c989477bdba7890bf5ffa277bf9b39ad91d6655f58a5b8e2bf42744b0de913e79f423c78025fba5724d03356bee7c4f70615042db5ea33c12a2033e150547b0cb8a43123277f8be9345ed1143f14e230b4df717b28df0cf1370bb28ee2fc9b6da2ffa460316cb96185945f3e61ee46564fc3eeb2b8fadb340a8dd3ec0dd4708e0a36043f18ba7ffa7ad2ad67d6b12db32d9ac57915bd22e94a81a89bcd8262b5bb7d0ed4d80bdc4e73af352988fde835693579f53cd9d04fc8409a3ce26347fecad9ac19e8c1c9a39bfdf4b79b4521cf5bd53a2b686fa6935eaa1ab038d77724dfd323c662f426819134039d88ce82a527835f56d6cdfbcbf4abec0edf54e56f2c69c5d4ca2d149f4041b481beb07b58894184facb2e717576606c55aca310552d2f195382f04d1cd63e633d7817d724e08cf49f49d02435490a7b19768e1146a13d6a9a3381937ddbd82c13d8f9525832869c392aea3c4df8aa0f5b6aaf54106c36f8b8166b4d5a1112fa7d06e5ceb2a851f12518308bf19953d9e7a7fa7176c06da26700daeb1999e47e86b9e1971ae5f87dc05a35646c848c79e2720340efd2226f2b3bdaa0212c243583d3a3e4d9c74cc36020b2947bb7d2ff3c8058e9ef973f43ac3bd62f11b5bb2f5c7970a84631fe495f65dc98daf1547d6c3157f69e66793f3ca7ba3af05b2f2d180931d77dd544cacb981eb5107588f0cac4278aa2b1be57e34bb518673943e4d63b6255ac01b69767701462bc344309e940a0c18aff1925aaa40956792f532e04a7b8638e0f815770882bf0a0c18f2d5cb067a54b88b2e82a56a478f51d2f1372b07bc6374cb787f91232e5ee7fdb15a6ce9f331ce17a0178e0b4f5314c9b22cff7a35de5e7d196515dce4e0d9c865d08661acd6df4e5c9f484d288afc1cca998ce6bf2788bc49a5851349c163accc5cfda34ee4fbe161ba540e61e98cb55a0b9f75533f5cf449d970b47cbd72cdfb217806f1187d96cadf4cdda131a0f1710602ac6af38b286f1fca6170b3a9f89a83d30e9feb27d353d621ae4d712ac9fbc541d5f0b23392bf255facaa4847103cafa9b6ce792fae418a3d6746d28bfabb279c8ac5df3d72bb494bd1b04e1a7d47fc73a82611f86aed07f2939b8feba29faa52f626f1c6039458d194b9cb523490367db1edc42613347ba65afad82d5c52db52a330dcdcee708bef7526f6da00a3df2c796eaf3a0118b512627d22530335dd45749f7bd5d6575cca752296c92b9f1ce7208f88a1501251841abea244b00c3d61f3e3eadfae88512c4a907d1ba3de51f26e0b193b6f55ecddae5b277ee67e09dc92d8c21d65b50468f7c341643dab10b694b66a02bc7fdb40358a1ddea275cb9fd4e21bad8ca91c62558ccac6de9feb85b9c3c6fa555edf2d79231a41f1e0f611fc803e3abfaf698977e515c9e26812e575e4edd45a8572d2f9aebd0a8a7879e9e8046aedfbd4439566bf024fbbfe832d1b19cf4331bd7ef6bed2cba9cd730f837e2c8921ecf0d365cc114a95338952cfc2500d5959f76ed48543bf7e451620d99b39cb2862cfedfd81abf220ac590f1ddb5d5bf8b25ca53740fb9a9b085e178551c43ecaa3779fb6689e306693a1d9e7418d4f7d7831019d6fecc58bfc0bd9886d596080c6c71ae43324cacb4795c733ec589c760e213dbb73d9e2501cdb0969bed17fd4a3def7100bfd33153040dae3dfc496e9bd7d331fa85ae80b165a9a9aec6314d71c1185b8251663e63482fc3d3cbbc169fa2be1698ae078d791682cd234d15c73340ad3f2773a86c71e4edea960d18c2fac6a0367fb5171cb23fdf79838b531d22e3406275fb7218af5bbe070eb0071f1b8cb211136985ff3c0b1f13f981e94e7a24177e077627cc43451461e2369546c85c32281a33d3c0480f8cb38b0849390188f570b8ecd9adfbaf4cfd7a804696969fcfd55445437fcebc3e589e3aa8acea3fba886e79f0607e304c1bfbb63cca9a7bb6a2351e889e3064df4d00e43534311c112a6472b3f0a2c32899b76318f83c5326d65df1b42271e22e87a64b9257ae68a10a2e27ab3f303ec0772d86e1b80fd68f1598d2e50465b0d864f835b9a7d311a47a8423f14039a2341cb1a751464f96da59066d76b23e271e4f021279b6ff24b483bfa080c2cb5f36a9aed5e0cbbd920e8725d9ea97d35182b617222eee1d4a0c2fb3b3cc5af7644a48c4e92b7ee41f9743bb17d95c400c15bc56306adfeaac52d86adf16f2e93bc47aaf35f08fa36817ef10381b47ea52a63329e61a4040bff4c9a66c8f71e7ca3ee411d9e68ee258b6240ba3bc8254824eeb7dc02f2554dad82541446a3e3eb6ef10093b2fdbc8c22f25759b338d38ae2984fec4495a9aa8b1126449c8dbd6c690dc7301b9cad4a70a597fa06a974104d1c14c53159e253b33fff11d14bfe701d30c3c7b0a1e7d79bc151ae7d05bc512b7169370728bef88d2f59f7cd94e3e824e4d7ccd2c902ae42b7a78507cb101f73bbaf248", 0x1000}, {0xffffffffffffffff}, {&(0x7f0000000100)="1e8b53192b2b9b9a5d148bd9d99912006cc05ec6818f7cf6d196c6d32b08ad030e46f90a3d9be000bfb26190cac6f17c06b561347ebfa10df80ff6379c40fc7a1a9521553c", 0x45}, {&(0x7f0000000180)}, {&(0x7f0000001440)="e3413a1c2e936c9ef7bf50f32357777ee30297c29ce12cfd6fee7344f9f46c0964dc6a6b002aa6a26d21f3bdbf9f613d87331a5681870bd49463c3bfd2fa00c9462d4f17828c063439ef3f14b6bda890bbb6ddd8cd174c5078dead8e545f7030c65f1410a9274a187fa6fb0f09ac9ae3dc2709677642f9d9fc79f3cfe08c0564cbf604e056cca6b92ee10ed9791e82822d1217ce516fb7e452ca798039f1d4d44bd1ab95773800", 0xa7}, {&(0x7f0000001500)="db2a478bf5ca4b1d1409ee236602dba1e79479800c71b73f86161b52ccae73db996b3763ad75c1f0b88d5d76c6c29880fdb5952c77162ad4b5b8b88f52dc02f1cf42f94350eb7cd605b7958e3057c3822346ebdc4633a96627e4d989bf23005d8de0665fbdb3c56001fe50371563c7630977668793ca036d6c", 0x79}], 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x270}, 0x40)
socket(0x40000000015, 0x5, 0x0)

26.468848736s ago: executing program 3 (id=558):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2040400)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2e0, 0x0, 0xffffffff, 0xc2, 0x0, r3}, 0x0, &(0x7f0000000200)=<r5=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)

25.498328558s ago: executing program 3 (id=559):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={<r1=>0x0, 0x3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000240)=0x8)
unshare(0x60040100)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)

25.376226438s ago: executing program 3 (id=560):
r0 = memfd_create(0x0, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="f9ffffff08000200020000001400010000000000000000000000000000000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000040)={0x0, 0x200, [0x8, 0x31180, 0x9, 0xb, 0x81, 0x7fffffff]})
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x3ff, 0x1ff, 0x9})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"})
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e00340064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8010607190780062c22e4edec1ab0400a799f053cb7d29ae7fc87ad209879ff88ee28f300cb53e5a44c8942ed2467496a2696a02e3d212ccf8371b080d73230f8733669f2a71017e7535135985f2b8cb0df4c2e7fe1f55df178fe5b9f2d138163b4617"], 0x0)

22.282290048s ago: executing program 3 (id=561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000900)={@private2, @empty, 0x10, 0xd}})
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000037000/0x1000)=nil, 0x1000, 0x8)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
read(r3, &(0x7f0000000000)=""/8, 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000200)=""/13, 0xd, 0xc9100120, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f0000001440)={{0x2, 0x0, 0x80, {0xffffffffffffffff, 0x80a0000, 0x3}}, "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", "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"})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

22.281791649s ago: executing program 4 (id=562):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x21}, 0x8)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r1, 0xa, 0x21)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0)
mlock(&(0x7f0000646000/0x3000)=nil, 0x3000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0)
r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0)
r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x3, 0x0})
io_uring_enter(r6, 0x47ba, 0x98f1, 0x20, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0)

22.277742468s ago: executing program 2 (id=571):
prctl$PR_SCHED_CORE(0x38, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x800, 0x0, 0xffffffff}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d03, &(0x7f0000000000))
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000)
shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r4 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000300000000000000"], 0x48)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000009)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x0)
getsockopt$inet_mreqn(r6, 0x11, 0x66, 0x0, &(0x7f0000000d00))
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',audit,\x00'])
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x1, 0x0)

19.110188522s ago: executing program 3 (id=563):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8)
setsockopt(r1, 0x84, 0x82, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r5}}, 0x48)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000000000fe80000000957800000000000000000000aafe805cba0000000000000023000000aa"], 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e746572000000000000"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

19.109651307s ago: executing program 4 (id=564):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xb6c})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x16, 0x4, 0xff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xc000, 0xdddd1000, 0x0, 0x0, 0xff, 0x6, 0xa, 0x5, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x4, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x70000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x0, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xddde0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2b, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x8500, 0x0, [0x0, 0x0, 0x1, 0x400000000]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x12, 0x1, 0xde})

19.091206721s ago: executing program 2 (id=574):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]})
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000700)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000140)=@arm64={0x5, 0xae, 0x0, '\x00', 0x7fffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="1c18000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x60, '\x00', 0x0, @fallback=0x37}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={<r8=>r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r8, 0x6}, 0x8)
fsync(0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000a00)='cdg', 0x3)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x484, 0x2c4, 0x1e4, 0x2c4, 0x3a4, 0x3a4, 0x3a4, 0x4, &(0x7f0000000040), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, 0xffffffff, 0xffffffff, 0xf, 0x5, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0x40, 0x9, 0x2, 0x8001, 0x4, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x151}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:audit_spool_t:s0\x00'}}}, {{@arp={@loopback, @multicast1, 0xff, 0xff000000, 0x2, 0xa, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x7, 0x7fff, 0x52de, 0x8, 0x7, 'tunl0\x00', 'caif0\x00', {}, {0xff}, 0x0, 0x200}, 0xbc, 0xe0}, @unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4d0)

18.603903774s ago: executing program 4 (id=565):
socket$nl_generic(0x10, 0x3, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x0, 0x0, 0x288}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0)

17.881152955s ago: executing program 2 (id=566):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x129740, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
r1 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002380)={'bridge0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x88}})
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000a40)=""/38, 0x26}], 0x5, 0x10000, 0xfffffff9)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

17.708007629s ago: executing program 3 (id=567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x121000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x2, 0x0, 0xfff, {0x4, 0x401}, 0x4, 0x97})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x23, 0x0, &(0x7f0000001240))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x600200, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

17.432363754s ago: executing program 4 (id=568):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55)
close(r0)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r3 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000080)={0x7, {0x3, 0x8, 0x9, 0x200}})
socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}})
r6 = epoll_create(0x1fa4)
r7 = socket$packet(0x11, 0x2, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)={0x10000005})
ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x1)
syz_genetlink_get_family_id$team(&(0x7f0000002a40), 0xffffffffffffffff)
syz_emit_ethernet(0x3b3, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x0, 0x4, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1f, 0x1, "000000050000000026000400"}, {0x1, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x4, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5fe0000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00')
read$FUSE(r8, &(0x7f00000037c0)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

16.49887621s ago: executing program 32 (id=546):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x129740, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
r1 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002380)={'bridge0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x88}})
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000a40)=""/38, 0x26}], 0x5, 0x10000, 0xfffffff9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

16.493646747s ago: executing program 4 (id=570):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x28, 0xa, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x5, 0x0, 0x5, 0x3}]}, 0x8)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x27c, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x1}}, @common=@inet=@socket1={{0x24}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x2d8)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32=r4, @ANYBLOB="011000000000000000000000000000ba48327e00", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x40001}, 0xffffffffffffff6f)
sendto$inet6(r7, &(0x7f0000001300)="90", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0xfffffffd}, 0xfffffffffffffcb7)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c4)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xfffe, 0x2}, 0x8)

15.455141521s ago: executing program 33 (id=547):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0xffffff97, 0x0, 0x3, 0x1}, 0x8)

15.448363409s ago: executing program 4 (id=573):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x6a040000)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0xffffc8b7, 0x200100)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
preadv2(r4, 0x0, 0x0, 0x2, 0x5, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x3000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0xeeee0000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=<r7=>0x0, &(0x7f0000002d00)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0xfffffffffffffff0}], 0x1}, 0x0, 0x24004890})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)

2.0739172s ago: executing program 34 (id=566):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x129740, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
r1 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002380)={'bridge0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x88}})
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000a40)=""/38, 0x26}], 0x5, 0x10000, 0xfffffff9)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.04312626s ago: executing program 35 (id=567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x121000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x2, 0x0, 0xfff, {0x4, 0x401}, 0x4, 0x97})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x23, 0x0, &(0x7f0000001240))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x600200, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 36 (id=573):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x6a040000)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0xffffc8b7, 0x200100)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
preadv2(r4, 0x0, 0x0, 0x2, 0x5, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x3000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0xeeee0000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=<r7=>0x0, &(0x7f0000002d00)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0xfffffffffffffff0}], 0x1}, 0x0, 0x24004890})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  128.386417][ T6159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.402880][ T6159] usb 1-1: Product: syz
[  128.411098][ T6159] usb 1-1: Manufacturer: syz
[  128.415842][ T6159] usb 1-1: SerialNumber: syz
[  128.448489][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[  128.838918][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.851208][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.884765][ T6228] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  129.267746][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  129.571244][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  129.580709][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  129.906670][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  130.051062][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout
[  130.971028][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'.
[  131.051543][ T6240] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET)
[  131.095896][ T6226] delete_channel: no stack
[  131.138424][ T6159] kalmia 1-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22
[  131.139145][ T6159] kalmia 1-1:1.65: probe with driver kalmia failed with error -22
[  131.159820][ T6159] usb 1-1: USB disconnect, device number 4
[  131.171064][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  131.331109][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  131.333194][ T5902] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  131.333230][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.353696][ T5902] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  131.353720][ T5902] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  131.353735][ T5902] usb 2-1: Manufacturer: syz
[  131.356706][ T5902] usb 2-1: config 0 descriptor??
[  131.588519][ T5902] rc_core: IR keymap rc-hauppauge not found
[  131.588552][ T5902] Registered IR keymap rc-empty
[  131.607706][ T5902] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  131.671461][ T5902] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  131.676139][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  131.681021][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  131.681031][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  131.962308][ T5924] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  131.971123][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  132.151134][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout
[  132.168347][ T6254] random: crng reseeded on system resumption
[  132.301578][ T5902] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  132.456287][ T5902] usb 3-1: config 0 has no interfaces?
[  132.459910][ T5902] usb 3-1: New USB device found, idVendor=0af0, idProduct=6500, bcdDevice=a8.46
[  132.459981][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.460004][ T5902] usb 3-1: Product: syz
[  132.460019][ T5902] usb 3-1: Manufacturer: syz
[  132.460035][ T5902] usb 3-1: SerialNumber: syz
[  132.465446][ T5902] usb 3-1: config 0 descriptor??
[  132.535875][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  132.686634][ T5917] usb 4-1: config index 0 descriptor too short (expected 32804, got 36)
[  132.686666][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.686748][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  132.686903][ T5917] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[  132.686927][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.696661][ T5917] usb 4-1: config 0 descriptor??
[  132.708325][ T5917] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  132.719795][ T5902] usb 3-1: USB disconnect, device number 4
[  133.619630][ T6261] kAFS: unable to lookup cell '(,c¾Ì'
[  133.762534][ T6263] netlink: 'syz.4.71': attribute type 2 has an invalid length.
[  133.770327][ T6263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.71'.
[  133.866748][ T5902] usb 2-1: USB disconnect, device number 3
[  134.444399][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  134.660421][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  134.675475][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  134.705133][ T5924] usb 1-1: device descriptor read/all, error -71
[  134.746120][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  134.764002][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.176104][   T10] usb 4-1: USB disconnect, device number 5
[  135.273539][ T5917] usb 3-1: config 0 descriptor??
[  136.881123][ T6031] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  137.143327][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'.
[  137.401065][ T6031] usb 2-1: Using ep0 maxpacket: 16
[  137.413889][ T6031] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.439824][ T6031] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.459137][ T6031] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  137.490541][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.527533][ T6031] usb 2-1: config 0 descriptor??
[  137.804007][ T5916] usb 3-1: USB disconnect, device number 5
[  138.052390][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.058871][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.095158][ T6031] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  138.678301][ T6301] syzkaller0: entered promiscuous mode
[  138.726174][ T6301] syzkaller0: entered allmulticast mode
[  139.001649][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  139.222177][ T5917] usb 4-1: Using ep0 maxpacket: 8
[  139.243797][ T5917] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  140.041310][ T5917] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  140.050465][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.155106][ T5917] usb 2-1: USB disconnect, device number 4
[  140.673985][ T6326] netlink: 'syz.3.81': attribute type 10 has an invalid length.
[  140.681839][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.81'.
[  141.199694][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'.
[  142.803199][ T6348] netlink: 'syz.0.87': attribute type 10 has an invalid length.
[  144.382642][ T6326] team0: entered promiscuous mode
[  144.387747][ T6326] team_slave_0: entered promiscuous mode
[  144.395050][ T6326] team_slave_1: entered promiscuous mode
[  144.400869][ T6326] team0: entered allmulticast mode
[  144.409133][ T6326] team_slave_0: entered allmulticast mode
[  144.415786][ T6326] team_slave_1: entered allmulticast mode
[  144.425259][ T6326] bridge0: port 3(team0) entered blocking state
[  144.435143][ T6326] bridge0: port 3(team0) entered disabled state
[  144.445242][ T6326] bridge0: port 3(team0) entered blocking state
[  144.451846][ T6326] bridge0: port 3(team0) entered forwarding state
[  144.467850][ T6347] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  144.625035][ T6348] dummy0: entered promiscuous mode
[  144.673027][ T6348] dummy0: entered allmulticast mode
[  144.702173][ T6348] team0: Port device dummy0 added
[  145.044457][ T6356] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.048721][ T6356] netlink: 188 bytes leftover after parsing attributes in process `syz.2.89'.
[  145.154523][ T5917] usb 4-1: USB disconnect, device number 6
[  145.354511][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'.
[  145.651026][ T6372] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.654390][ T6372] netlink: 188 bytes leftover after parsing attributes in process `syz.1.93'.
[  145.919167][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[  146.188357][ T6381] Option '                                                                                      ÜÛPu©ª¡´iÃ	' to dns_resolver key: bad/missing value
[  146.465915][ T6371] bridge0: port 3(team0) entered disabled state
[  146.473006][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.481351][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.505015][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'.
[  146.632384][ T6384] netlink: 72 bytes leftover after parsing attributes in process `syz.4.94'.
[  147.640231][ T6388] fuse: Bad value for 'fd'
[  148.640438][ T6402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  149.389236][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'.
[  149.462949][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'.
[  149.531798][ T6420] netlink: 104 bytes leftover after parsing attributes in process `syz.3.101'.
[  149.598040][ T6420] netlink: 104 bytes leftover after parsing attributes in process `syz.3.101'.
[  149.979514][ T6433] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  150.360695][ T6440] dummy0: left promiscuous mode
[  150.387658][ T6440] dummy0: left allmulticast mode
[  150.433382][ T6440] team0: Port device dummy0 removed
[  150.476935][ T6440] batman_adv: batadv0: Adding interface: dummy0
[  150.508433][ T6440] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.564196][ T6440] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  150.802187][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'.
[  150.908612][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[  150.999284][ T5902] IPVS: starting estimator thread 0...
[  151.101150][ T6450] IPVS: using max 38 ests per chain, 91200 per kthread
[  151.482532][ T6462] Option '                                                                                      ÜÛPu©ª¡´iÃ	' to dns_resolver key: bad/missing value
[  151.499434][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.506936][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.239271][ T6466] pim6reg: entered allmulticast mode
[  152.256871][ T6466] pim6reg: left allmulticast mode
[  152.457890][   T13] IPVS: stop unused estimator thread 0...
[  152.598776][ T6493] xt_CT: You must specify a L4 protocol and not use inversions on it
[  152.601279][ T6493] netlink: 188 bytes leftover after parsing attributes in process `syz.3.113'.
[  153.213820][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'.
[  153.227890][ T6511] netlink: 72 bytes leftover after parsing attributes in process `syz.2.116'.
[  154.519154][ T6521] netlink: 'syz.1.120': attribute type 3 has an invalid length.
[  154.941707][ T5902] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  155.102895][ T5902] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  155.171193][ T5902] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  155.232968][ T5902] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  155.297574][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.313917][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.433719][ T5902] usb 5-1: Product: syz
[  155.437961][ T5902] usb 5-1: Manufacturer: syz
[  155.473412][ T5902] usb 5-1: SerialNumber: syz
[  155.528750][ T5902] cdc_mbim 5-1:1.0: skipping garbage
[  155.556911][ T5902] cdc_mbim 5-1:1.0: skipping garbage
[  155.589808][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  155.589825][   T30] audit: type=1326 audit(1766922876.707:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  155.642157][   T30] audit: type=1326 audit(1766922876.747:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf707d539 code=0x7ffc0000
[  155.683578][   T30] audit: type=1326 audit(1766922876.747:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  155.731982][ T6523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  155.751343][ T6523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  155.761139][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  155.810508][   T30] audit: type=1326 audit(1766922876.747:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  155.848179][   T30] audit: type=1326 audit(1766922876.747:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000
[  155.873052][   T30] audit: type=1326 audit(1766922876.747:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  155.931533][ T5909] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  155.951063][ T5917] usb 1-1: Using ep0 maxpacket: 32
[  155.963186][ T5917] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  155.985093][ T5917] usb 1-1: config 0 has no interface number 0
[  155.998343][ T5917] usb 1-1: config 0 interface 12 has no altsetting 0
[  156.013771][   T30] audit: type=1326 audit(1766922876.747:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  156.071726][   T30] audit: type=1326 audit(1766922876.747:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000
[  156.101327][ T5917] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  156.121252][ T5909] usb 2-1: device descriptor read/64, error -71
[  156.138409][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.156768][ T5917] usb 1-1: Product: syz
[  156.166917][ T5917] usb 1-1: Manufacturer: syz
[  156.175823][   T30] audit: type=1326 audit(1766922876.747:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  156.201186][ T5917] usb 1-1: SerialNumber: syz
[  156.220872][ T5917] usb 1-1: config 0 descriptor??
[  156.230746][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.255966][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.264712][   T30] audit: type=1326 audit(1766922876.747:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  156.368985][ T5909] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  156.511126][ T5909] usb 2-1: device descriptor read/64, error -71
[  156.563638][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.572713][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.602345][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'.
[  156.661380][ T5909] usb usb2-port1: attempt power cycle
[  156.681373][ T5902] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[  156.687711][ T5902] cdc_mbim 5-1:1.0: bind() failure
[  156.709850][ T5902] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  156.733015][ T5902] cdc_ncm 5-1:1.1: bind() failure
[  156.755741][ T5902] usb 5-1: USB disconnect, device number 3
[  156.790296][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.129'.
[  157.031072][ T5909] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  157.056183][ T5909] usb 2-1: device descriptor read/8, error -71
[  157.309044][ T6535] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  157.326320][ T5909] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  157.363773][ T5909] usb 2-1: device descriptor read/8, error -71
[  157.374185][ T5917] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  157.392045][ T5917] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  157.399833][ T5917] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  157.409376][ T5917] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  157.440736][ T5917] usb 1-1: USB disconnect, device number 7
[  157.493699][ T5909] usb usb2-port1: unable to enumerate USB device
[  157.663945][ T5909] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  157.713486][ T5955] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  157.831037][ T5909] usb 5-1: Using ep0 maxpacket: 16
[  157.838977][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short
[  157.849918][ T5909] usb 5-1: config 1 interface 0 has no altsetting 0
[  157.868030][ T5909] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40
[  157.878151][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.886525][ T5955] usb 3-1: Using ep0 maxpacket: 8
[  157.894900][ T5909] usb 5-1: Product: syz
[  157.899766][ T5909] usb 5-1: Manufacturer: syz
[  157.906711][ T5955] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  157.935551][ T5955] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  157.950568][ T5909] usb 5-1: SerialNumber: syz
[  157.957815][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.594796][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'.
[  158.607420][ T6592] netlink: 72 bytes leftover after parsing attributes in process `syz.0.133'.
[  158.751732][ T6593] netlink: 'syz.2.131': attribute type 10 has an invalid length.
[  158.769631][ T6593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.131'.
[  158.811104][ T6593] team0: entered promiscuous mode
[  158.818484][ T6593] team_slave_0: entered promiscuous mode
[  158.886529][ T6593] team_slave_1: entered promiscuous mode
[  158.886566][ T5909] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10
[  158.921549][ T6593] team0: entered allmulticast mode
[  158.970761][ T6593] team_slave_0: entered allmulticast mode
[  158.979520][ T6593] team_slave_1: entered allmulticast mode
[  158.986172][ T6593] bridge0: port 3(team0) entered blocking state
[  159.028608][ T5187] bcm5974 5-1:1.0: could not read from device
[  159.073986][ T6593] bridge0: port 3(team0) entered disabled state
[  159.085533][ T5187] bcm5974 5-1:1.0: could not read from device
[  159.102850][ T5909] usb 5-1: USB disconnect, device number 4
[  159.112571][ T5187] bcm5974 5-1:1.0: could not read from device
[  159.243760][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'.
[  159.265270][ T5950] udevd[5950]: Error opening device "/dev/input/event4": No such file or directory
[  159.285480][ T5950] udevd[5950]: Unable to EVIOCGABS device "/dev/input/event4"
[  159.301207][ T5950] udevd[5950]: Unable to EVIOCGABS device "/dev/input/event4"
[  159.315051][ T5950] udevd[5950]: Unable to EVIOCGABS device "/dev/input/event4"
[  159.333095][ T5950] udevd[5950]: Unable to EVIOCGABS device "/dev/input/event4"
[  160.041175][ T6159] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  160.202905][ T6159] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[  160.217474][ T6159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  160.245355][ T6159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  160.266235][ T6159] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  160.288663][ T6159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.299401][ T6159] usb 4-1: Product: syz
[  160.308940][ T6159] usb 4-1: Manufacturer: syz
[  160.320986][ T6159] usb 4-1: SerialNumber: syz
[  160.347888][ T6159] usb 4-1: config 0 descriptor??
[  160.693536][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.705423][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.722565][ T6159] powermate: unknown product id 0240
[  160.735906][ T6159] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  160.755102][ T6159] powermate 4-1:0.0: probe with driver powermate failed with error -5
[  160.789805][ T6159] usb 4-1: USB disconnect, device number 7
[  160.823331][ T5955] usb 3-1: USB disconnect, device number 6
[  161.083481][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[  161.311560][ T5955] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  161.471072][ T5955] usb 3-1: Using ep0 maxpacket: 8
[  161.482234][ T5955] usb 3-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  161.501067][ T5955] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  161.512304][ T5955] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  161.535435][ T5955] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  161.544830][ T5909] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  161.623832][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.669062][ T5955] usb 3-1: Product: syz
[  161.680827][ T5955] usb 3-1: Manufacturer: syz
[  161.700498][ T5955] usb 3-1: SerialNumber: syz
[  161.741178][ T5909] usb 2-1: device descriptor read/64, error -71
[  161.944881][ T5955] usb 3-1: USB disconnect, device number 7
[  161.992408][ T5909] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  162.043434][ T6626] fuse: Unknown parameter '0x0000000000000004'
[  162.131225][ T5909] usb 2-1: device descriptor read/64, error -71
[  162.241942][ T5909] usb usb2-port1: attempt power cycle
[  162.601204][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  162.654557][ T5909] usb 2-1: device descriptor read/8, error -71
[  162.903566][ T5909] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  162.951236][ T5909] usb 2-1: device descriptor read/8, error -71
[  163.101458][ T5909] usb usb2-port1: unable to enumerate USB device
[  163.114609][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'.
[  163.377912][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[  163.383240][ T6654] netlink: 72 bytes leftover after parsing attributes in process `syz.0.152'.
[  165.872395][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  166.053101][ T5902] usb 4-1: too many configurations: 17, using maximum allowed: 8
[  166.124850][ T5902] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  166.136247][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.144645][ T5902] usb 4-1: Product: syz
[  166.168342][ T5902] usb 4-1: Manufacturer: syz
[  166.258617][ T5902] usb 4-1: SerialNumber: syz
[  166.279267][ T5902] usb 4-1: config 0 descriptor??
[  166.362518][ T5902] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  166.443402][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  166.548031][ T5902] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  166.566423][ T6678] dvb-usb: bulk message failed: -22 (7/0)
[  166.581049][ T5902] usb 4-1: media controller created
[  166.685946][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.843346][ T5902] DVB: Unable to find symbol mt352_attach()
[  166.944890][ T5902] DVB: Unable to find symbol nxt6000_attach()
[  166.953391][ T5902] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  167.027357][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13
[  167.066560][ T5902] dvb-usb: schedule remote query interval to 1000 msecs.
[  167.133894][ T5902] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  167.190460][ T5902] dvb-usb: bulk message failed: -22 (7/0)
[  167.211749][ T5902] dvb-usb: bulk message failed: -22 (7/0)
[  167.324290][ T5902] usb 4-1: USB disconnect, device number 8
[  167.684319][ T5902] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  168.589677][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'.
[  168.815934][ T6723] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  168.865201][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  168.866506][   T30] audit: type=1326 audit(1766922889.977:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.0.173" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x0
[  168.913655][ T6734] FAULT_INJECTION: forcing a failure.
[  168.913655][ T6734] name failslab, interval 1, probability 0, space 0, times 1
[  168.981474][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) 
[  168.981495][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  168.981510][ T6734] Call Trace:
[  168.981517][ T6734]  <TASK>
[  168.981524][ T6734]  dump_stack_lvl+0xe8/0x150
[  168.981556][ T6734]  should_fail_ex+0x414/0x560
[  168.981584][ T6734]  should_failslab+0xa8/0x100
[  168.981604][ T6734]  __kmalloc_cache_noprof+0x84/0x700
[  168.981621][ T6734]  ? io_getxattr_prep+0x1de/0x340
[  168.981640][ T6734]  io_getxattr_prep+0x1de/0x340
[  168.981660][ T6734]  io_submit_sqes+0xad3/0x2140
[  168.981708][ T6734]  __se_sys_io_uring_enter+0x2e0/0x2b60
[  168.981740][ T6734]  ? ksys_write+0x1cb/0x250
[  168.981757][ T6734]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  168.981774][ T6734]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  168.981791][ T6734]  ? __pfx_vfs_write+0x10/0x10
[  168.981807][ T6734]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  168.981826][ T6734]  ? __fget_files+0x3a0/0x420
[  168.981850][ T6734]  ? fput+0xa0/0xd0
[  168.981870][ T6734]  ? ksys_write+0x22a/0x250
[  168.981885][ T6734]  ? __pfx_ksys_write+0x10/0x10
[  168.981903][ T6734]  ? __ia32_sys_io_uring_enter+0x21/0xf0
[  168.981924][ T6734]  __do_fast_syscall_32+0x1dc/0x560
[  168.981941][ T6734]  ? lockdep_hardirqs_on+0x7b/0x110
[  168.981955][ T6734]  ? do_fast_syscall_32+0x34/0x80
[  168.981971][ T6734]  ? irqentry_exit+0x10f/0x660
[  168.981989][ T6734]  do_fast_syscall_32+0x34/0x80
[  168.982006][ T6734]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  168.982024][ T6734] RIP: 0023:0xf70ad539
[  168.982040][ T6734] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  168.982052][ T6734] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa
[  168.982071][ T6734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc
[  168.982081][ T6734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  168.982089][ T6734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  168.982097][ T6734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  168.982106][ T6734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  168.982127][ T6734]  </TASK>
[  168.986425][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'.
[  169.549203][ T6731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.174'.
[  170.210768][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'.
[  171.046124][ T6755] syzkaller0: entered promiscuous mode
[  171.057731][ T6755] syzkaller0: entered allmulticast mode
[  171.174699][ T6755] tipc: Started in network mode
[  171.203729][ T6755] tipc: Node identity 62d29f75babe, cluster identity 4711
[  171.303142][ T6755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.563571][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  171.901000][ T5909] usb 1-1: Using ep0 maxpacket: 32
[  171.908137][ T5909] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  171.917433][ T5909] usb 1-1: config 0 has no interface number 0
[  171.931082][ T5909] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  171.975837][ T5909] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  171.991872][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.031636][ T5909] usb 1-1: Product: syz
[  172.066423][ T5909] usb 1-1: Manufacturer: syz
[  172.086667][ T5909] usb 1-1: SerialNumber: syz
[  172.121132][ T5909] usb 1-1: config 0 descriptor??
[  172.160647][ T5909] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  172.209076][ T5909] em28xx 1-1:0.132: Video interface 132 found:
[  172.271037][ T5924] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  172.312969][ T5902] tipc: Node number set to 3630997365
[  172.431119][ T5924] usb 2-1: Using ep0 maxpacket: 32
[  172.438945][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  172.513031][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  172.560857][ T5909] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  172.581231][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  172.601107][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  172.632992][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  172.664246][ T5924] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  172.687112][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.697204][ T5924] usb 2-1: Product: syz
[  172.709239][ T5924] usb 2-1: Manufacturer: syz
[  172.721045][ T5924] usb 2-1: SerialNumber: syz
[  172.738728][ T5924] usb 2-1: config 0 descriptor??
[  172.744556][ T6771] FAULT_INJECTION: forcing a failure.
[  172.744556][ T6771] name failslab, interval 1, probability 0, space 0, times 0
[  172.765588][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) 
[  172.765625][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  172.765638][ T6771] Call Trace:
[  172.765647][ T6771]  <TASK>
[  172.765657][ T6771]  dump_stack_lvl+0xe8/0x150
[  172.765691][ T6771]  should_fail_ex+0x414/0x560
[  172.765730][ T6771]  should_failslab+0xa8/0x100
[  172.765773][ T6771]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  172.765808][ T6771]  ? __alloc_skb+0x198/0x3a0
[  172.765830][ T6771]  ? __alloc_skb+0x1dc/0x3a0
[  172.765850][ T6771]  ? __local_bh_enable_ip+0xd0/0x130
[  172.765873][ T6771]  ? __alloc_skb+0x198/0x3a0
[  172.765896][ T6771]  __alloc_skb+0x1dc/0x3a0
[  172.765922][ T6771]  netlink_sendmsg+0x5c6/0xb30
[  172.765962][ T6771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.765994][ T6771]  ? __import_iovec+0x5d4/0x7f0
[  172.766017][ T6771]  ? aa_sock_msg_perm+0xf1/0x1b0
[  172.766047][ T6771]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  172.766067][ T6771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.766097][ T6771]  __sock_sendmsg+0x21c/0x270
[  172.766132][ T6771]  ____sys_sendmsg+0x505/0x820
[  172.766164][ T6771]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.766193][ T6771]  ? kstrtouint+0x6e/0xe0
[  172.766235][ T6771]  ___sys_sendmsg+0x21f/0x2a0
[  172.766264][ T6771]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.766288][ T6771]  ? get_pid_task+0x20/0x1f0
[  172.766315][ T6771]  ? get_pid_task+0x20/0x1f0
[  172.766340][ T6771]  ? get_pid_task+0x20/0x1f0
[  172.766398][ T6771]  ? __fget_files+0x2a/0x420
[  172.766425][ T6771]  ? __fget_files+0x3a0/0x420
[  172.766462][ T6771]  __sys_sendmsg+0x164/0x220
[  172.766490][ T6771]  ? __pfx___sys_sendmsg+0x10/0x10
[  172.766526][ T6771]  ? __pfx_ksys_write+0x10/0x10
[  172.766559][ T6771]  __do_fast_syscall_32+0x1dc/0x560
[  172.766584][ T6771]  ? lockdep_hardirqs_on+0x7b/0x110
[  172.766610][ T6771]  ? do_fast_syscall_32+0x34/0x80
[  172.766633][ T6771]  ? irqentry_exit+0x10f/0x660
[  172.766659][ T6771]  do_fast_syscall_32+0x34/0x80
[  172.766684][ T6771]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  172.766711][ T6771] RIP: 0023:0xf70dd539
[  172.766729][ T6771] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  172.766747][ T6771] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  172.766769][ T6771] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  172.766784][ T6771] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[  172.766796][ T6771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  172.766809][ T6771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  172.766821][ T6771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  172.766851][ T6771]  </TASK>
[  173.067919][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'.
[  173.225529][ T6777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.252084][ T5909] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  173.276586][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  173.283390][ T6767] veth1_to_bond: entered allmulticast mode
[  173.290196][ T5909] em28xx 1-1:0.132: board has no eeprom
[  173.302354][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  173.361278][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  173.369652][ T6779] netlink: 'syz.3.193': attribute type 1 has an invalid length.
[  173.391282][ T6779] netlink: 'syz.3.193': attribute type 2 has an invalid length.
[  173.400465][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'.
[  173.409469][ T5909] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  173.424587][ T5909] em28xx 1-1:0.132: analog set to bulk mode.
[  173.433990][ T5955] em28xx 1-1:0.132: Registering V4L2 extension
[  173.501477][ T5917] usb 5-1: device descriptor read/64, error -71
[  173.542301][ T5909] usb 1-1: USB disconnect, device number 8
[  173.633828][ T5909] em28xx 1-1:0.132: Disconnecting em28xx
[  173.706984][ T6753] tipc: Resetting bearer <eth:syzkaller0>
[  173.751122][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  173.789710][ T6753] tipc: Disabling bearer <eth:syzkaller0>
[  173.902826][ T5917] usb 5-1: device descriptor read/64, error -71
[  173.916142][ T5955] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  173.924736][ T5955] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  173.939307][ T5955] em28xx 1-1:0.132: No AC97 audio processor
[  173.961605][ T5955] usb 1-1: Decoder not found
[  173.968994][ T5955] em28xx 1-1:0.132: failed to create media graph
[  173.985562][ T5955] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  174.003854][ T5955] em28xx 1-1:0.132: Remote control support is not available for this card.
[  174.017814][ T5909] em28xx 1-1:0.132: Closing input extension
[  174.031873][ T5917] usb usb5-port1: attempt power cycle
[  174.060187][ T5909] em28xx 1-1:0.132: Freeing device
[  174.381234][ T5917] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  174.391883][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -110
[  174.409561][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.432641][ T5917] usb 5-1: device descriptor read/8, error -71
[  174.439939][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.464322][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.475607][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.496426][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.517118][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.565158][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.583965][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.619716][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.636963][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.652991][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.669016][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.681091][ T5917] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  174.691347][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.718409][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.724727][ T5917] usb 5-1: device descriptor read/8, error -71
[  174.731825][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.740587][ T5924] iforce 2-1:0.0: usb_submit_urb failed: -32
[  174.752050][ T5924] input input14: Timeout waiting for response from device.
[  174.781160][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'.
[  174.844890][ T5917] usb usb5-port1: unable to enumerate USB device
[  175.063401][ T6781] veth1_to_bond: left allmulticast mode
[  175.116392][ T5917] usb 2-1: USB disconnect, device number 13
[  175.414748][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'.
[  175.426772][ T6811] netlink: 72 bytes leftover after parsing attributes in process `syz.1.200'.
[  176.525360][ T6815] fuse: Unknown parameter 'fd0x0000000000000004'
[  176.651132][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  176.792587][ T5902] usb 5-1: device descriptor read/64, error -71
[  177.041057][ T5902] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  177.149739][ T6833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.206'.
[  177.171318][ T5902] usb 5-1: device descriptor read/64, error -71
[  177.283505][ T5902] usb usb5-port1: attempt power cycle
[  177.342429][ T6031] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  177.571060][ T5924] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  177.642512][ T5902] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  177.659524][ T6031] usb 4-1: config index 0 descriptor too short (expected 72, got 10)
[  177.669158][ T5902] usb 5-1: device descriptor read/8, error -71
[  177.681988][ T6031] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[  177.689629][ T6031] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  177.760360][ T5924] usb 1-1: config 160 has an invalid interface number: 200 but max is 0
[  177.770028][ T5924] usb 1-1: config 160 has no interface number 0
[  177.781607][ T5924] usb 1-1: config 160 interface 200 has no altsetting 0
[  177.791347][ T6831] futex_wake_op: syz.3.204 tries to shift op by 144; fix this program
[  177.820199][ T5924] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  177.829771][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.850183][ T5924] usb 1-1: Product: syz
[  177.854963][ T5924] usb 1-1: Manufacturer: syz
[  177.859638][ T5924] usb 1-1: SerialNumber: syz
[  177.913401][ T5902] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  177.943678][ T5902] usb 5-1: device descriptor read/8, error -71
[  178.051860][ T5902] usb usb5-port1: unable to enumerate USB device
[  179.244872][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  179.268842][ T5924] usb 1-1: MIDIStreaming interface descriptor not found
[  179.608748][ T5924] usb 1-1: USB disconnect, device number 9
[  179.757892][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.134008][ T6031] usb 4-1: string descriptor 0 read error: -71
[  180.146991][ T6031] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  180.169751][ T6031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.221039][ T6031] usb 4-1: can't set config #1, error -71
[  180.263693][ T6031] usb 4-1: USB disconnect, device number 9
[  180.661475][ T6860] fuse: Unknown parameter 'fd0x0000000000000004'
[  181.001125][ T5902] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  181.191374][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'.
[  181.205204][ T6883] netlink: 72 bytes leftover after parsing attributes in process `syz.4.219'.
[  181.411069][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.479392][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.495327][ T5902] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  181.510956][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.541072][ T5902] usb 1-1: config 0 descriptor??
[  182.215059][ T5902] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  182.226954][ T5902] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  182.242746][ T5902] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  182.254534][ T5902] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  182.291601][ T5902] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  182.311524][ T5902] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  182.318391][ T5902] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[  182.337945][ T5902] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  182.777121][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'.
[  183.152532][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.218'.
[  184.388045][ T5902] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device
[  184.398388][ T5902] pyra 0003:1E7D:2CF6.0004: couldn't install mouse
[  184.423265][ T5902] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71
[  184.496249][ T5902] usb 1-1: USB disconnect, device number 10
[  184.523210][ T6923] fuse: Bad value for 'fd'
[  184.941084][ T5902] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  185.067003][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'.
[  185.101119][ T5902] usb 1-1: Using ep0 maxpacket: 8
[  185.118434][ T5902] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21
[  185.151085][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.169946][ T5902] usb 1-1: Product: syz
[  185.177940][ T5902] usb 1-1: Manufacturer: syz
[  185.194194][ T5902] usb 1-1: SerialNumber: syz
[  185.217497][ T5902] usb 1-1: config 0 descriptor??
[  185.240307][ T5902] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32
[  185.435594][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[  185.462133][ T6947] netlink: 'syz.1.239': attribute type 12 has an invalid length.
[  185.472845][ T6947] netlink: 'syz.1.239': attribute type 29 has an invalid length.
[  185.484244][ T6947] netlink: 148 bytes leftover after parsing attributes in process `syz.1.239'.
[  185.683879][ T6934] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  185.692611][ T6934] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  185.699034][ T6934] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  185.715923][ T6934] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  185.745080][ T6934] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  185.905843][ T5902] usb 1-1: USB disconnect, device number 11
[  186.015428][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'.
[  186.028215][ T6964] netlink: 72 bytes leftover after parsing attributes in process `syz.3.241'.
[  186.521226][ T6968] raw_sendmsg: syz.1.243 forgot to set AF_INET. Fix it!
[  187.091241][ T6031] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  187.411040][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  187.440110][ T6031] usb 5-1: device descriptor read/64, error -71
[  187.715604][ T6031] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  187.731502][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[  187.740394][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout
[  187.748369][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  187.811097][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout
[  187.877087][ T6031] usb 5-1: device descriptor read/64, error -71
[  188.011701][ T6031] usb usb5-port1: attempt power cycle
[  188.200260][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[  188.381050][ T6031] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  188.431953][ T6031] usb 5-1: device descriptor read/8, error -71
[  188.461141][ T5917] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  188.623526][ T5917] usb 1-1: device descriptor read/64, error -71
[  188.671058][ T6031] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  188.724291][ T6031] usb 5-1: device descriptor read/8, error -71
[  188.841503][ T6031] usb usb5-port1: unable to enumerate USB device
[  188.871082][ T5917] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  189.051064][ T5917] usb 1-1: device descriptor read/64, error -71
[  189.172148][ T5917] usb usb1-port1: attempt power cycle
[  189.381039][ T6031] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  189.511081][ T5917] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  189.542783][ T5917] usb 1-1: device descriptor read/8, error -71
[  189.550995][ T6031] usb 4-1: Using ep0 maxpacket: 16
[  189.568139][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.581301][ T6031] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[  189.591431][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.602661][ T6031] usb 4-1: config 0 descriptor??
[  189.801213][ T5917] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  189.839277][ T5917] usb 1-1: device descriptor read/8, error -71
[  189.951459][ T5917] usb usb1-port1: unable to enumerate USB device
[  190.036661][ T6031] apple 0003:05AC:026C.0005: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.3-1/input0
[  190.222950][ T6992] syz_tun: entered promiscuous mode
[  190.296747][ T6992] syz_tun: entered allmulticast mode
[  190.304063][ T6992] team0: Port device syz_tun added
[  190.313415][ T5909] usb 4-1: USB disconnect, device number 10
[  190.815160][ T7008] loop5: detected capacity change from 0 to 7
[  190.892292][ T7008] Dev loop5: unable to read RDB block 7
[  190.898251][ T7008]  loop5: AHDI p1 p2 p3
[  190.902661][ T7008] loop5: partition table partially beyond EOD, truncated
[  190.911661][ T7008] loop5: p1 start 1601398130 is beyond EOD, truncated
[  190.918513][ T7008] loop5: p2 start 1702059890 is beyond EOD, truncated
[  191.657892][ T6031] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  191.891378][ T6031] usb 4-1: Using ep0 maxpacket: 16
[  191.932563][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.974693][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.035778][ T6031] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  192.051877][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.094876][ T6031] usb 4-1: config 0 descriptor??
[  192.584943][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.641240][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.808165][ T7015] FAULT_INJECTION: forcing a failure.
[  192.808165][ T7015] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  192.875909][ T7015] CPU: 0 UID: 0 PID: 7015 Comm: syz.0.258 Not tainted syzkaller #0 PREEMPT(full) 
[  192.875938][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.875951][ T7015] Call Trace:
[  192.875959][ T7015]  <TASK>
[  192.875972][ T7015]  dump_stack_lvl+0xe8/0x150
[  192.876005][ T7015]  should_fail_ex+0x414/0x560
[  192.876044][ T7015]  _copy_from_user+0x2d/0xb0
[  192.876071][ T7015]  get_old_timespec32+0x88/0x130
[  192.876097][ T7015]  ? __pfx_get_old_timespec32+0x10/0x10
[  192.876132][ T7015]  __se_sys_clock_nanosleep_time32+0x1b3/0x390
[  192.876166][ T7015]  ? __pfx___se_sys_clock_nanosleep_time32+0x10/0x10
[  192.876201][ T7015]  ? asm_int80_emulation+0x1a/0x20
[  192.876224][ T7015]  ? asm_int80_emulation+0x1a/0x20
[  192.876244][ T7015]  do_int80_emulation+0x11b/0x420
[  192.876270][ T7015]  ? clear_bhb_loop+0x60/0xb0
[  192.876290][ T7015]  ? clear_bhb_loop+0x60/0xb0
[  192.876316][ T7015]  asm_int80_emulation+0x1a/0x20
[  192.876336][ T7015] RIP: 0023:0xf70dd539
[  192.876354][ T7015] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  192.876372][ T7015] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 000000000000010b
[  192.876394][ T7015] RAX: ffffffffffffffda RBX: 00000000fffffff2 RCX: 0000000000ca9a3b
[  192.876409][ T7015] RDX: 0000000080000000 RSI: 0000000099999999 RDI: 0000000000000000
[  192.876430][ T7015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  192.876442][ T7015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  192.876454][ T7015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  192.876484][ T7015]  </TASK>
[  193.203765][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'.
[  193.218702][ T7029] netlink: 72 bytes leftover after parsing attributes in process `syz.4.262'.
[  193.771600][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'.
[  194.392514][ T6031] usbhid 4-1:0.0: can't add hid device: -71
[  194.398589][ T6031] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  194.412426][ T6031] usb 4-1: USB disconnect, device number 11
[  195.535296][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'.
[  195.621258][ T6031] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  195.811855][ T6031] usb 2-1: Using ep0 maxpacket: 8
[  195.823025][ T6031] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  195.867223][ T6031] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.893632][ T6031] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  195.929484][ T6031] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 22816, setting to 1024
[  195.990855][ T6031] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  196.026395][ T6031] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.068639][ T6031] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  196.088090][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.641347][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  197.151024][   T10] usb 5-1: Using ep0 maxpacket: 32
[  197.163416][   T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  197.222108][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.230150][   T10] usb 5-1: Product: syz
[  197.389458][   T10] usb 5-1: Manufacturer: syz
[  197.394507][   T10] usb 5-1: SerialNumber: syz
[  197.402968][   T10] usb 5-1: config 0 descriptor??
[  197.880478][ T7089] capability: warning: `syz.2.281' uses deprecated v2 capabilities in a way that may be insecure
[  197.918364][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.936182][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.997215][   T10] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  198.151159][   T10] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  198.277073][ T7091] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[  198.339799][ T7092] IPv6: NLM_F_CREATE should be specified when creating new route
[  198.348040][ T7092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.355566][ T7092] IPv6: NLM_F_CREATE should be set when creating new route
[  198.554017][   T10] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[  198.576503][   T10] usb 5-1: USB disconnect, device number 17
[  198.597508][ T6031] usb 2-1: usb_control_msg returned -71
[  198.623563][ T6031] usbtmc 2-1:16.0: can't read capabilities
[  198.698925][ T6031] usb 2-1: USB disconnect, device number 14
[  199.291309][ T5917] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  199.415300][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.421768][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  199.451374][ T5917] usb 5-1: Using ep0 maxpacket: 8
[  199.458722][ T5917] usb 5-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  199.481031][ T5917] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  199.518427][ T5917] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  199.583147][ T5917] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  199.621125][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.642015][ T5917] usb 5-1: Product: syz
[  199.646261][ T5917] usb 5-1: Manufacturer: syz
[  199.681029][ T5917] usb 5-1: SerialNumber: syz
[  199.950058][ T7095] netlink: 'syz.4.283': attribute type 10 has an invalid length.
[  199.961613][ T7095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.283'.
[  200.005465][ T5917] usb 5-1: USB disconnect, device number 18
[  200.279738][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'.
[  200.291960][ T7113] netlink: 72 bytes leftover after parsing attributes in process `syz.1.288'.
[  201.428214][ T7109] GUP no longer grows the stack in syz.2.287 (7109): 80009000-8000a000 (80008000)
[  201.471357][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(full) 
[  201.471386][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  201.471399][ T7109] Call Trace:
[  201.471408][ T7109]  <TASK>
[  201.471417][ T7109]  dump_stack_lvl+0xe8/0x150
[  201.471449][ T7109]  __get_user_pages+0x2465/0x29f0
[  201.471500][ T7109]  ? __gup_longterm_locked+0xc63/0x1660
[  201.471528][ T7109]  ? down_read_killable+0x1bc/0x350
[  201.471559][ T7109]  __gup_longterm_locked+0xde4/0x1660
[  201.471623][ T7109]  gup_fast_fallback+0x1d26/0x2290
[  201.471654][ T7109]  ? __lock_acquire+0x6b6/0x2cf0
[  201.471703][ T7109]  ? __pfx_gup_fast_fallback+0x10/0x10
[  201.471730][ T7109]  ? __lock_acquire+0x6b6/0x2cf0
[  201.471751][ T7109]  ? is_valid_gup_args+0x11f/0x200
[  201.471781][ T7109]  ? get_user_pages_fast+0x4d/0xb0
[  201.471838][ T7109]  __iov_iter_get_pages_alloc+0x39f/0xb40
[  201.471879][ T7109]  iov_iter_get_pages2+0x5e/0xa0
[  201.471908][ T7109]  fuse_copy_fill+0x541/0xb10
[  201.471937][ T7109]  ? rcu_is_watching+0x15/0xb0
[  201.471965][ T7109]  ? trace_sched_exit_tp+0x36/0xf0
[  201.471999][ T7109]  ? __pfx_fuse_copy_fill+0x10/0x10
[  201.472030][ T7109]  ? do_raw_spin_lock+0x121/0x290
[  201.472068][ T7109]  fuse_copy_one+0x90/0x120
[  201.472097][ T7109]  fuse_dev_do_read+0xc29/0x1240
[  201.472145][ T7109]  ? __pfx_fuse_dev_do_read+0x10/0x10
[  201.472170][ T7109]  ? preempt_schedule_common+0x83/0xd0
[  201.472190][ T7109]  ? __pfx_aa_file_perm+0x10/0x10
[  201.472218][ T7109]  ? preempt_schedule_thunk+0x16/0x30
[  201.472252][ T7109]  fuse_dev_read+0x14c/0x1d0
[  201.472280][ T7109]  ? __pfx_fuse_dev_read+0x10/0x10
[  201.472314][ T7109]  ? bpf_lsm_file_permission+0x9/0x20
[  201.472336][ T7109]  ? security_file_permission+0x75/0x290
[  201.472366][ T7109]  vfs_read+0x55a/0xa30
[  201.472396][ T7109]  ? __pfx_vfs_read+0x10/0x10
[  201.472427][ T7109]  ? __fget_files+0x2a/0x420
[  201.472463][ T7109]  ksys_read+0x145/0x250
[  201.472487][ T7109]  ? __pfx_ksys_read+0x10/0x10
[  201.472520][ T7109]  __do_fast_syscall_32+0x1dc/0x560
[  201.472543][ T7109]  ? lockdep_hardirqs_on+0x7b/0x110
[  201.472592][ T7109]  ? do_fast_syscall_32+0x34/0x80
[  201.472616][ T7109]  ? irqentry_exit+0x10f/0x660
[  201.472647][ T7109]  do_fast_syscall_32+0x34/0x80
[  201.472664][ T7109]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  201.472682][ T7109] RIP: 0023:0xf70ad539
[  201.472695][ T7109] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  201.472708][ T7109] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  201.472724][ T7109] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080008340
[  201.472735][ T7109] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000
[  201.472743][ T7109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  201.472752][ T7109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  201.472761][ T7109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  201.472782][ T7109]  </TASK>
[  202.040028][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'.
[  202.049753][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'.
[  202.404045][ T7131] fuse: Unknown parameter '0xffffffffffffffff'
[  202.901088][ T5924] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  203.148565][ T5924] usb 5-1: Using ep0 maxpacket: 8
[  203.171876][ T5924] usb 5-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  203.183113][ T5924] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  203.212133][ T5924] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  203.250090][ T5924] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  203.266459][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.289077][ T5924] usb 5-1: Product: syz
[  203.304866][ T5924] usb 5-1: Manufacturer: syz
[  203.331203][ T5924] usb 5-1: SerialNumber: syz
[  203.568466][ T7141] netlink: 'syz.4.299': attribute type 10 has an invalid length.
[  203.581363][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.299'.
[  203.636208][ T5924] usb 5-1: USB disconnect, device number 19
[  203.805061][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[  203.869979][ T7150] warning: `syz.2.298' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  203.933075][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'.
[  203.967364][ T7156] bridge0: port 3(team0) entered blocking state
[  203.973806][ T7156] bridge0: port 3(team0) entered listening state
[  203.980375][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.987599][ T7156] bridge0: port 2(bridge_slave_1) entered listening state
[  203.994965][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.002218][ T7156] bridge0: port 1(bridge_slave_0) entered listening state
[  204.025865][ T7156] batman_adv: batadv0: Interface activated: dummy0
[  204.034783][ T7156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.072907][ T6159] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  204.231132][ T6159] usb 2-1: Using ep0 maxpacket: 8
[  204.240832][ T6159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  204.257419][ T6159] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  204.295254][ T6159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.328355][ T6159] usb 2-1: config 0 descriptor??
[  204.530444][ T5839] Bluetooth: hci4: unexpected event for opcode 0x204e
[  204.547335][ T7170] input: syz1 as /devices/virtual/input/input15
[  204.569020][ T6159] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  204.797213][ T5924] usb 2-1: USB disconnect, device number 15
[  204.803251][    C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  204.982602][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  205.410203][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'.
[  205.421831][ T7186] netlink: 72 bytes leftover after parsing attributes in process `syz.3.311'.
[  205.715496][ T7192] netlink: 'syz.2.312': attribute type 30 has an invalid length.
[  206.723813][ T7199] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[  206.787943][ T7200] IPv6: NLM_F_CREATE should be specified when creating new route
[  206.796374][ T7200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.803668][ T7200] IPv6: NLM_F_CREATE should be set when creating new route
[  207.391119][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  207.541090][   T10] usb 2-1: Using ep0 maxpacket: 8
[  207.550320][   T10] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  207.559400][   T10] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  207.576426][   T10] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  207.599201][   T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  207.631221][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.639294][   T10] usb 2-1: Product: syz
[  207.695862][   T10] usb 2-1: Manufacturer: syz
[  207.700548][   T10] usb 2-1: SerialNumber: syz
[  208.012020][ T7202] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[  208.019991][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'.
[  208.218028][   T10] usb 2-1: USB disconnect, device number 16
[  208.256173][ T7209] veth1_macvtap: left promiscuous mode
[  209.058307][ T7222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  209.184918][ T5902] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  209.413655][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.459129][ T5902] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  209.481054][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.489224][ T5902] usb 4-1: Product: syz
[  209.533338][ T5902] usb 4-1: Manufacturer: syz
[  209.538460][ T5902] usb 4-1: SerialNumber: syz
[  209.562752][ T5902] usb 4-1: config 0 descriptor??
[  209.623441][ T5902] ims_pcu 4-1:0.0: Missing CDC union descriptor
[  209.629815][ T5902] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[  209.690387][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[  209.845379][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'.
[  209.855292][ T6031] usb 4-1: USB disconnect, device number 12
[  209.986311][ T7241] netlink: 72 bytes leftover after parsing attributes in process `syz.1.328'.
[  211.461154][ T5917] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  211.711073][ T5917] usb 4-1: Using ep0 maxpacket: 8
[  211.720399][ T5917] usb 4-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  211.744132][ T5917] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  211.796171][ T5917] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  211.824196][ T5917] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  211.850370][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.874321][ T5917] usb 4-1: Product: syz
[  211.892132][ T5917] usb 4-1: Manufacturer: syz
[  211.907645][ T5917] usb 4-1: SerialNumber: syz
[  212.141300][ T7259] netlink: 'syz.3.334': attribute type 10 has an invalid length.
[  212.163354][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.334'.
[  212.201828][ T5917] usb 4-1: USB disconnect, device number 13
[  212.522006][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'.
[  213.184595][ T7292] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  217.023689][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'.
[  217.035426][ T7336] netlink: 72 bytes leftover after parsing attributes in process `syz.0.353'.
[  217.191271][ T5955] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  217.285468][ T7339] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  217.432133][ T5955] usb 5-1: Using ep0 maxpacket: 8
[  217.584236][ T5955] usb 5-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  217.606142][ T5955] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  217.657369][ T5955] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  217.686001][ T5955] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  217.722727][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.730839][ T5955] usb 5-1: Product: syz
[  217.739725][ T5955] usb 5-1: Manufacturer: syz
[  217.748956][ T5955] usb 5-1: SerialNumber: syz
[  218.012639][ T7331] netlink: 'syz.4.354': attribute type 10 has an invalid length.
[  218.029791][ T7331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.354'.
[  218.110175][ T5955] usb 5-1: USB disconnect, device number 20
[  218.296317][ T7346] netlink: 'syz.3.356': attribute type 1 has an invalid length.
[  218.370150][ T7349] IPv6: NLM_F_CREATE should be specified when creating new route
[  218.378797][ T7349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.386116][ T7349] IPv6: NLM_F_CREATE should be set when creating new route
[  218.743457][ T5955] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  218.921095][ T5955] usb 3-1: Using ep0 maxpacket: 8
[  218.927913][ T5955] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  218.938990][ T5955] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  218.984544][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.396084][ T7366] netlink: 'syz.3.361': attribute type 16 has an invalid length.
[  219.415719][ T7366] netlink: 'syz.3.361': attribute type 17 has an invalid length.
[  219.568530][ T7368] netlink: 'syz.2.358': attribute type 10 has an invalid length.
[  219.580764][ T7368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.358'.
[  219.733194][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'.
[  221.440386][ T7394] netlink: 'syz.3.370': attribute type 2 has an invalid length.
[  221.476735][ T7394] : entered promiscuous mode
[  221.533971][ T5955] usb 3-1: USB disconnect, device number 8
[  221.673658][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  221.851163][   T10] usb 1-1: Using ep0 maxpacket: 16
[  221.860310][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  221.879812][   T10] usb 1-1: config 1 has no interface number 1
[  221.888233][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.913723][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  221.923144][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.932795][   T10] usb 1-1: Product: syz
[  221.937256][   T10] usb 1-1: Manufacturer: syz
[  221.942377][   T10] usb 1-1: SerialNumber: syz
[  222.291254][ T5955] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  222.451153][ T5955] usb 2-1: Using ep0 maxpacket: 8
[  222.458476][ T5955] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  222.470444][ T5955] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  222.502218][ T5955] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  222.529219][ T5955] usb 2-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  222.540614][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.549055][ T5955] usb 2-1: Product: syz
[  222.553712][ T5955] usb 2-1: Manufacturer: syz
[  222.561109][ T5955] usb 2-1: SerialNumber: syz
[  222.796280][ T7409] netlink: 'syz.1.377': attribute type 10 has an invalid length.
[  222.832748][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'.
[  222.879540][ T5955] usb 2-1: USB disconnect, device number 17
[  223.203812][    C1] sd 0:0:1:0: [sda] tag#1627 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  223.214418][    C1] sd 0:0:1:0: [sda] tag#1627 CDB: Write(6) 0a 00 4e 20 00 00 00 09 00 00 00 00
[  223.285723][ T7425] netlink: 'syz.4.378': attribute type 16 has an invalid length.
[  223.295912][ T7425] netlink: 'syz.4.378': attribute type 17 has an invalid length.
[  223.307641][ T7425] lo: left promiscuous mode
[  223.313919][ T7425] lo: left allmulticast mode
[  223.339939][ T7425] tunl0: left promiscuous mode
[  223.345703][ T7425] tunl0: left allmulticast mode
[  223.376332][ T7425] gre0: left promiscuous mode
[  223.383217][ T7425] gre0: left allmulticast mode
[  223.404162][ T7425] gretap0: left promiscuous mode
[  223.410976][ T7425] gretap0: left allmulticast mode
[  223.430618][ T7425] erspan0: left promiscuous mode
[  223.437204][ T7425] erspan0: left allmulticast mode
[  223.458691][ T7425] ip_vti0: left promiscuous mode
[  223.465350][ T7425] ip_vti0: left allmulticast mode
[  223.490174][ T7425] ip6_vti0: left promiscuous mode
[  223.497418][ T7425] ip6_vti0: left allmulticast mode
[  223.521658][ T7425] sit0: left promiscuous mode
[  223.528194][ T7425] sit0: left allmulticast mode
[  223.542471][ T7425] ip6tnl0: left promiscuous mode
[  223.549123][ T7425] ip6tnl0: left allmulticast mode
[  223.583634][ T7425] ip6gre0: left promiscuous mode
[  223.591004][ T7425] ip6gre0: left allmulticast mode
[  223.619656][ T7425] syz_tun: left promiscuous mode
[  223.643914][ T7425] ip6gretap0: left promiscuous mode
[  223.650857][ T7425] ip6gretap0: left allmulticast mode
[  223.680417][ T7425] bridge0: left promiscuous mode
[  223.685769][ T7425] bridge0: left allmulticast mode
[  224.491078][ T6159] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  224.755511][ T6159] usb 3-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config
[  224.802395][ T6159] usb 3-1: config 0 interface 0 has no altsetting 0
[  224.858715][ T6159] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  224.874594][ T6159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.899939][ T6159] usb 3-1: Product: syz
[  224.913250][ T6159] usb 3-1: Manufacturer: syz
[  224.929408][ T6159] usb 3-1: SerialNumber: syz
[  224.958169][ T6159] usb 3-1: config 0 descriptor??
[  224.980056][ T6159] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  225.182043][ T5917] usb 3-1: USB disconnect, device number 9
[  225.654081][   T10] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  225.671059][   T10] usb 1-1: 2:1 : sample bitwidth 189 in over sample bytes 4
[  225.678945][   T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  225.792808][   T10] usb 1-1: USB disconnect, device number 16
[  225.958292][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.075657][ T7458] FAULT_INJECTION: forcing a failure.
[  226.075657][ T7458] name failslab, interval 1, probability 0, space 0, times 0
[  226.156993][ T7458] CPU: 0 UID: 0 PID: 7458 Comm: syz.4.391 Not tainted syzkaller #0 PREEMPT(full) 
[  226.157021][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  226.157034][ T7458] Call Trace:
[  226.157042][ T7458]  <TASK>
[  226.157051][ T7458]  dump_stack_lvl+0xe8/0x150
[  226.157083][ T7458]  should_fail_ex+0x414/0x560
[  226.157121][ T7458]  should_failslab+0xa8/0x100
[  226.157148][ T7458]  __kvmalloc_node_noprof+0x175/0x920
[  226.157173][ T7458]  ? traverse+0xde/0x580
[  226.157198][ T7458]  traverse+0xde/0x580
[  226.157232][ T7458]  seq_read_iter+0xd08/0xe20
[  226.157257][ T7458]  ? kstrtoull+0x12f/0x1d0
[  226.157300][ T7458]  do_iter_readv_writev+0x623/0x8c0
[  226.157329][ T7458]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  226.157348][ T7458]  ? common_file_perm+0x1b5/0x220
[  226.157384][ T7458]  ? rw_verify_area+0x2a6/0x4d0
[  226.157420][ T7458]  vfs_readv+0x253/0x850
[  226.157451][ T7458]  ? __pfx_vfs_readv+0x10/0x10
[  226.157500][ T7458]  ? __fget_files+0x2a/0x420
[  226.157531][ T7458]  ? __fget_files+0x3a0/0x420
[  226.157555][ T7458]  ? __fget_files+0x2a/0x420
[  226.157590][ T7458]  __ia32_compat_sys_preadv+0x1bf/0x2c0
[  226.157617][ T7458]  ? __pfx___ia32_compat_sys_preadv+0x10/0x10
[  226.157654][ T7458]  __do_fast_syscall_32+0x1dc/0x560
[  226.157678][ T7458]  ? lockdep_hardirqs_on+0x7b/0x110
[  226.157696][ T7458]  ? do_fast_syscall_32+0x34/0x80
[  226.157718][ T7458]  ? irqentry_exit+0x10f/0x660
[  226.157742][ T7458]  do_fast_syscall_32+0x34/0x80
[  226.157767][ T7458]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  226.157792][ T7458] RIP: 0023:0xf70dd539
[  226.157809][ T7458] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  226.157826][ T7458] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 000000000000014d
[  226.157846][ T7458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003240
[  226.157860][ T7458] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000
[  226.157872][ T7458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  226.157884][ T7458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  226.157896][ T7458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  226.157926][ T7458]  </TASK>
[  226.860309][ T6159] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  227.371032][ T6159] usb 1-1: Using ep0 maxpacket: 8
[  227.391858][ T7474] netlink: 'syz.2.395': attribute type 16 has an invalid length.
[  227.399711][ T7474] netlink: 'syz.2.395': attribute type 17 has an invalid length.
[  227.581554][ T6159] usb 1-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  227.592767][ T6159] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  227.618367][ T6159] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  227.993810][ T6159] usb 1-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  228.003466][ T6159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.011874][ T6159] usb 1-1: Product: syz
[  228.054792][ T6159] usb 1-1: Manufacturer: syz
[  228.062500][ T6159] usb 1-1: SerialNumber: syz
[  228.329621][ T7462] netlink: 'syz.0.393': attribute type 10 has an invalid length.
[  228.337568][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.393'.
[  228.376699][ T6159] usb 1-1: USB disconnect, device number 17
[  228.913341][ T7486] netlink: 'syz.2.398': attribute type 1 has an invalid length.
[  228.921360][ T7486] netlink: 'syz.2.398': attribute type 1 has an invalid length.
[  228.936726][ T7486] netlink: 'syz.2.398': attribute type 1 has an invalid length.
[  229.994738][ T7504] netlink: 1528 bytes leftover after parsing attributes in process `syz.4.406'.
[  232.261325][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  232.419848][ T7529] netlink: 'syz.1.409': attribute type 16 has an invalid length.
[  232.431261][ T7529] netlink: 'syz.1.409': attribute type 17 has an invalid length.
[  232.479692][   T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  232.495012][   T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  232.602530][   T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  232.642195][   T10] usb 4-1: config 220 has no interface number 2
[  232.649920][   T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  232.690033][   T10] usb 4-1: config 220 interface 0 has no altsetting 0
[  232.740155][   T10] usb 4-1: config 220 interface 76 has no altsetting 0
[  232.748109][   T10] usb 4-1: config 220 interface 1 has no altsetting 0
[  233.447378][   T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  233.460996][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.484207][   T10] usb 4-1: Product: syz
[  233.488422][   T10] usb 4-1: Manufacturer: syz
[  233.509088][   T10] usb 4-1: SerialNumber: syz
[  233.737459][   T10] usb 4-1: selecting invalid altsetting 0
[  233.761493][   T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  233.799474][   T10] uvcvideo 4-1:220.0: No valid video chain found.
[  233.812404][ T5984] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  233.845504][   T10] usb 4-1: selecting invalid altsetting 0
[  233.858309][   T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  233.884506][   T10] usb 4-1: USB disconnect, device number 14
[  233.971100][ T5984] usb 5-1: Using ep0 maxpacket: 32
[  233.986895][ T5984] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  234.063210][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.073639][ T5984] usb 5-1: Product: syz
[  234.080321][ T5984] usb 5-1: Manufacturer: syz
[  234.087956][ T5984] usb 5-1: SerialNumber: syz
[  234.095966][ T5984] usb 5-1: config 0 descriptor??
[  234.106681][ T5984] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  234.149307][ T5984] dvb-usb: bulk message failed: -22 (2/0)
[  234.169896][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'.
[  234.612662][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  234.620992][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  234.628305][    C1] bridge0: port 3(team0) entered learning state
[  234.647293][ T5984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  234.662099][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.682595][ T5984] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  234.686967][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.713658][ T5984] usb 5-1: media controller created
[  234.744960][ T7537] binder_alloc: 7535: binder_alloc_buf, no vma
[  234.767604][ T7537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.780132][ T7537] dvb-usb: bulk message failed: -22 (3/0)
[  235.402766][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  235.466710][ T5984] usb 5-1: selecting invalid altsetting 7
[  235.486464][ T5984] cxusb: set interface failed
[  235.492201][ T5984] dvb-usb: bulk message failed: -22 (1/0)
[  235.705655][ T5984] DVB: Unable to find symbol lgdt330x_attach()
[  235.712059][ T5984] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  236.390999][ T5984] rc_core: IR keymap rc-dvico-portable not found
[  236.397411][ T5984] Registered IR keymap rc-empty
[  236.427937][ T5984] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  236.456553][ T5984] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input16
[  236.526561][ T5984] dvb-usb: schedule remote query interval to 100 msecs.
[  236.576175][ T5984] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  236.642772][ T5984] usb 5-1: USB disconnect, device number 21
[  236.771990][ T5984] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  238.103655][ T5917] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  238.427086][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  238.482321][ T5917] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  238.495418][ T5917] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  238.513264][ T5917] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  238.524950][ T5917] usb 2-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  238.534416][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.551033][ T5917] usb 2-1: Product: syz
[  238.602104][ T5917] usb 2-1: Manufacturer: syz
[  238.606776][ T5917] usb 2-1: SerialNumber: syz
[  238.711737][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'.
[  238.771447][ T7591] netlink: 72 bytes leftover after parsing attributes in process `syz.2.427'.
[  239.180815][ T7579] netlink: 'syz.1.425': attribute type 10 has an invalid length.
[  239.302043][ T7579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.425'.
[  239.512559][ T5917] usb 2-1: USB disconnect, device number 18
[  240.645577][ T5984] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  240.881126][ T5984] usb 5-1: Using ep0 maxpacket: 32
[  240.895242][ T5984] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  240.904481][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.915081][ T5984] usb 5-1: Product: syz
[  240.934602][ T5984] usb 5-1: Manufacturer: syz
[  240.951166][ T5984] usb 5-1: SerialNumber: syz
[  241.012455][ T5984] usb 5-1: config 0 descriptor??
[  241.034201][ T5984] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  241.070842][ T5984] dvb-usb: bulk message failed: -22 (2/0)
[  241.085557][ T5984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  241.098791][ T5984] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  241.142314][ T5984] usb 5-1: media controller created
[  241.213304][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  241.228639][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.256885][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.311683][ T7605] binder_alloc: 7604: binder_alloc_buf, no vma
[  241.329132][ T5984] usb 5-1: selecting invalid altsetting 7
[  241.329157][ T5984] cxusb: set interface failed
[  241.329171][ T5984] dvb-usb: bulk message failed: -22 (1/0)
[  241.442471][ T7616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.443699][ T7616] dvb-usb: bulk message failed: -22 (3/0)
[  241.912398][ T5984] DVB: Unable to find symbol lgdt330x_attach()
[  241.912419][ T5984] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  242.181068][ T5984] rc_core: IR keymap rc-dvico-portable not found
[  242.187522][ T5984] Registered IR keymap rc-empty
[  242.192612][ T5918] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  242.202363][ T5984] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  242.267150][ T5984] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input17
[  242.284392][ T5984] dvb-usb: schedule remote query interval to 100 msecs.
[  242.301881][ T5984] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  242.334820][ T5984] usb 5-1: USB disconnect, device number 22
[  242.361187][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  242.375642][ T5918] usb 4-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  242.392051][ T5918] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  242.432675][ T5918] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  242.450274][ T5984] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  242.465626][ T5918] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  242.491064][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.504669][ T5918] usb 4-1: Product: syz
[  242.509314][ T5918] usb 4-1: Manufacturer: syz
[  242.593136][ T5918] usb 4-1: SerialNumber: syz
[  242.881343][ T7620] netlink: 'syz.3.435': attribute type 10 has an invalid length.
[  242.889703][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.435'.
[  242.922262][ T5918] usb 4-1: USB disconnect, device number 15
[  244.084061][ T5955] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  244.282576][ T5955] usb 4-1: Using ep0 maxpacket: 8
[  244.293777][ T5955] usb 4-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  244.302720][ T5955] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  244.319128][ T5955] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  244.628408][ T5955] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  244.711030][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.775328][ T5955] usb 4-1: Product: syz
[  244.779680][ T5955] usb 4-1: Manufacturer: syz
[  244.800693][ T5955] usb 4-1: SerialNumber: syz
[  245.284874][ T7648] netlink: 'syz.3.442': attribute type 10 has an invalid length.
[  245.311029][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'.
[  245.375411][ T5955] usb 4-1: USB disconnect, device number 16
[  245.843814][ T7663] trusted_key: encrypted_key: insufficient parameters specified
[  245.956962][ T7427] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  246.163792][ T7427] usb 2-1: Using ep0 maxpacket: 8
[  246.171436][ T7427] usb 2-1: unable to get BOS descriptor or descriptor too short
[  246.202505][ T7427] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  246.229690][ T7427] usb 2-1: config 0 has no interface number 0
[  246.250366][ T7427] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  246.262323][ T7427] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  246.273092][ T7427] usb 2-1: config 0 interface 88 has no altsetting 0
[  246.312817][ T7427] usb 2-1: string descriptor 0 read error: -22
[  246.326258][ T7427] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  246.343137][ T7427] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  246.423828][ T7427] usb 2-1: config 0 descriptor??
[  246.471544][ T7427] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input18
[  246.636996][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.692700][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.762641][ T7427] usb 2-1: USB disconnect, device number 19
[  246.868947][ T5950] udevd[5950]: Error opening device "/dev/input/event4": No such device
[  246.906165][ T5950] udevd[5950]: Unable to EVIOCGABS device "/dev/input/event4"
[  246.925850][ T5950] udevd[5950]: Unable to EVIOCGABS device "/dev/input/event4"
[  246.959990][ T5950] udevd[5950]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[  247.010242][ T5202] udevd[5202]: worker [5950] terminated by signal 6 (Aborted)
[  247.046242][ T5202] udevd[5202]: worker [5950] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input18/event4'
[  248.242458][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.454'.
[  249.073490][ T7708] FAULT_INJECTION: forcing a failure.
[  249.073490][ T7708] name failslab, interval 1, probability 0, space 0, times 0
[  249.099099][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(full) 
[  249.099130][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  249.099157][ T7708] Call Trace:
[  249.099167][ T7708]  <TASK>
[  249.099176][ T7708]  dump_stack_lvl+0xe8/0x150
[  249.099220][ T7708]  should_fail_ex+0x414/0x560
[  249.099262][ T7708]  should_failslab+0xa8/0x100
[  249.099289][ T7708]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  249.099322][ T7708]  ? __alloc_skb+0x1dc/0x3a0
[  249.099341][ T7708]  ? __local_bh_enable_ip+0xd0/0x130
[  249.099366][ T7708]  ? __alloc_skb+0x198/0x3a0
[  249.099387][ T7708]  __alloc_skb+0x1dc/0x3a0
[  249.099411][ T7708]  sctp_packet_transmit+0xedc/0x2ac0
[  249.099458][ T7708]  ? sctp_outq_flush+0xbef/0x3190
[  249.099481][ T7708]  ? sctp_outq_flush+0xbef/0x3190
[  249.099504][ T7708]  sctp_outq_flush+0xecb/0x3190
[  249.099527][ T7708]  ? sctp_outq_flush+0xbef/0x3190
[  249.099550][ T7708]  ? sctp_make_heartbeat+0x389/0x470
[  249.099585][ T7708]  ? __pfx_sctp_make_heartbeat+0x10/0x10
[  249.099617][ T7708]  ? __pfx_sctp_outq_flush+0x10/0x10
[  249.099647][ T7708]  ? sctp_outq_tail+0x612/0x920
[  249.099669][ T7708]  ? sctp_do_8_2_transport_strike+0x5c2/0x8d0
[  249.099696][ T7708]  ? sctp_outq_uncork+0x4d/0xa0
[  249.099740][ T7708]  sctp_do_sm+0x5472/0x5c40
[  249.099768][ T7708]  ? arch_stack_walk+0xfc/0x150
[  249.099804][ T7708]  ? __pfx_sctp_do_sm+0x10/0x10
[  249.099828][ T7708]  ? stack_trace_save+0x9c/0xe0
[  249.099859][ T7708]  ? __pfx_stack_trace_save+0x10/0x10
[  249.099941][ T7708]  sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0
[  249.099969][ T7708]  sctp_apply_peer_addr_params+0xdf/0x1880
[  249.100011][ T7708]  sctp_setsockopt_peer_addr_params+0x678/0x940
[  249.100055][ T7708]  sctp_setsockopt+0x752/0x12c0
[  249.100073][ T7708]  ? sock_common_setsockopt+0x36/0xc0
[  249.100103][ T7708]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  249.100135][ T7708]  do_sock_setsockopt+0x17c/0x1b0
[  249.100162][ T7708]  __ia32_sys_setsockopt+0x13f/0x1b0
[  249.100191][ T7708]  __do_fast_syscall_32+0x1dc/0x560
[  249.100213][ T7708]  ? lockdep_hardirqs_on+0x7b/0x110
[  249.100239][ T7708]  ? do_fast_syscall_32+0x34/0x80
[  249.100260][ T7708]  ? irqentry_exit+0x10f/0x660
[  249.100284][ T7708]  do_fast_syscall_32+0x34/0x80
[  249.100306][ T7708]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  249.100330][ T7708] RIP: 0023:0xf70ad539
[  249.100347][ T7708] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  249.100364][ T7708] RSP: 002b:00000000f547c55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  249.100384][ T7708] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000084
[  249.100397][ T7708] RDX: 0000000000000009 RSI: 00000000800001c0 RDI: 000000000000009c
[  249.100409][ T7708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  249.100420][ T7708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  249.100431][ T7708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  249.100459][ T7708]  </TASK>
[  251.820056][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[  251.832833][ T7734] netlink: 72 bytes leftover after parsing attributes in process `syz.2.460'.
[  252.491179][ T6159] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  252.722535][ T6159] usb 5-1: Using ep0 maxpacket: 8
[  252.729270][ T6159] usb 5-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  252.751002][ T6159] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  252.786840][ T6159] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  252.828411][ T6159] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  252.838877][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.861013][ T6159] usb 5-1: Product: syz
[  252.865251][ T6159] usb 5-1: Manufacturer: syz
[  252.931235][ T6159] usb 5-1: SerialNumber: syz
[  253.165509][ T7736] netlink: 'syz.4.462': attribute type 10 has an invalid length.
[  253.175214][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.462'.
[  253.208768][ T6159] usb 5-1: USB disconnect, device number 23
[  253.352871][ T7747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.465'.
[  253.541047][ T7753] input: syz1 as /devices/virtual/input/input19
[  254.071215][ T7590] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  254.240737][ T7590] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  254.249243][ T7590] usb 1-1: config 0 has no interface number 0
[  254.264343][ T7590] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  254.280999][ T7590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.331807][ T7590] usb 1-1: config 0 descriptor??
[  254.354398][ T7590] usb 1-1: selecting invalid altsetting 1
[  254.360742][ T7590] dvb_ttusb_budget: ttusb_init_controller: error
[  254.367926][ T7590] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  254.552314][ T7590] DVB: Unable to find symbol cx22700_attach()
[  254.851639][ T7590] DVB: Unable to find symbol tda10046_attach()
[  254.864404][ T7590] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  254.910283][ T7590] usb 1-1: USB disconnect, device number 18
[  257.678014][ T7810] netlink: 48 bytes leftover after parsing attributes in process `syz.4.479'.
[  258.031122][ T5955] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  258.201090][ T5955] usb 4-1: Using ep0 maxpacket: 8
[  258.221668][ T5955] usb 4-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  258.250481][ T5955] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  258.277990][ T5955] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  258.384630][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'.
[  258.399536][ T7824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.483'.
[  258.689727][ T5955] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  258.790857][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.821046][ T5955] usb 4-1: Product: syz
[  258.878798][ T5955] usb 4-1: Manufacturer: syz
[  258.896096][ T5955] usb 4-1: SerialNumber: syz
[  258.922458][ T5902] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  259.135799][ T7813] netlink: 'syz.3.481': attribute type 10 has an invalid length.
[  259.181099][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.481'.
[  259.207296][ T5955] usb 4-1: USB disconnect, device number 17
[  259.221026][ T5902] usb 2-1: Using ep0 maxpacket: 8
[  259.228149][ T5902] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  259.253075][ T5902] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  259.280997][ T5902] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  259.323614][ T5902] usb 2-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  259.386337][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.411277][ T5902] usb 2-1: Product: syz
[  259.436792][ T5902] usb 2-1: Manufacturer: syz
[  259.448273][ T5902] usb 2-1: SerialNumber: syz
[  259.474413][ T7826] input: syz1 as /devices/virtual/input/input20
[  259.707693][ T7823] netlink: 'syz.1.484': attribute type 10 has an invalid length.
[  259.941560][  T130] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  259.950701][ T7823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'.
[  260.036704][ T5902] usb 2-1: USB disconnect, device number 20
[  260.144650][  T130] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  260.152887][  T130] usb 5-1: config 0 has no interface number 0
[  260.165032][  T130] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  260.191787][  T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.242113][  T130] usb 5-1: config 0 descriptor??
[  260.276841][  T130] usb 5-1: selecting invalid altsetting 1
[  260.300733][  T130] dvb_ttusb_budget: ttusb_init_controller: error
[  260.318484][  T130] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  260.510487][ T7839] program syz.3.488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.543039][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'.
[  260.728821][  T130] DVB: Unable to find symbol cx22700_attach()
[  260.861491][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  260.867805][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  261.140330][  T130] DVB: Unable to find symbol tda10046_attach()
[  261.156825][  T130] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  261.192877][  T130] usb 5-1: USB disconnect, device number 24
[  261.777513][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'.
[  261.790018][ T7851] netlink: 72 bytes leftover after parsing attributes in process `syz.1.500'.
[  262.955411][ T7846] fuse: Bad value for 'rootmode'
[  263.120976][ T5918] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  263.341284][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  263.371310][ T5918] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  263.393303][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  263.425259][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.261035][ T7590] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  264.344170][ T7874] netlink: 'syz.3.493': attribute type 10 has an invalid length.
[  264.352231][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.493'.
[  264.426766][ T7590] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  264.439651][ T7590] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  264.452415][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'.
[  264.465111][ T7590] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  264.485584][ T7590] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  264.656699][ T7590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.682213][ T7870] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  264.691247][    C1] bridge0: port 3(team0) entered forwarding state
[  264.697757][    C1] bridge0: topology change detected, propagating
[  264.704555][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.711909][    C1] bridge0: topology change detected, propagating
[  264.718430][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.725718][    C1] bridge0: topology change detected, propagating
[  265.427340][ T7880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.497'.
[  265.444008][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'.
[  265.661023][ T5916] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  265.824130][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  265.845558][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  265.863130][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  265.873943][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  265.887578][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  265.911012][  T130] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  265.932491][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.944742][ T5916] usb 5-1: config 0 descriptor??
[  266.027117][ T5917] usb 4-1: USB disconnect, device number 18
[  266.071617][  T130] usb 3-1: Using ep0 maxpacket: 8
[  266.078776][  T130] usb 3-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  266.139230][  T130] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  266.214001][  T130] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  266.272059][  T130] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  266.282123][  T130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.290371][  T130] usb 3-1: Product: syz
[  266.491074][ T5916] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max
[  266.536766][ T5916] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  266.553477][  T130] usb 3-1: Manufacturer: syz
[  266.558229][  T130] usb 3-1: SerialNumber: syz
[  266.705640][ T7590] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  266.729993][ T7590] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input21
[  266.802650][ T7884] netlink: 'syz.2.498': attribute type 10 has an invalid length.
[  266.810484][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.498'.
[  266.872116][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  266.880344][ T7590] usb 1-1: USB disconnect, device number 19
[  266.980840][  T130] usb 3-1: USB disconnect, device number 10
[  267.465136][ T7590] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  267.681218][ T7590] usb 1-1: Using ep0 maxpacket: 8
[  267.688260][ T7590] usb 1-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  267.708236][ T7590] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  267.734671][ T7590] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  267.755446][ T7590] usb 1-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  267.895774][ T7914] program syz.2.505 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.931591][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[  267.974050][ T7590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.001833][ T7590] usb 1-1: Product: syz
[  268.006103][ T7590] usb 1-1: Manufacturer: syz
[  268.010717][ T7590] usb 1-1: SerialNumber: syz
[  268.108653][ T5918] usb 5-1: reset high-speed USB device number 25 using dummy_hcd
[  268.250485][ T7896] netlink: 'syz.0.502': attribute type 10 has an invalid length.
[  268.271036][ T5918] usb 5-1: device descriptor read/64, error -32
[  268.301158][ T7896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.502'.
[  268.410627][ T7590] usb 1-1: USB disconnect, device number 20
[  268.561070][ T5918] usb 5-1: reset high-speed USB device number 25 using dummy_hcd
[  269.300800][ T7927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.568113][ T5917] usb 5-1: USB disconnect, device number 25
[  269.721338][ T7590] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  269.903092][ T7590] usb 1-1: Using ep0 maxpacket: 8
[  269.917945][ T7590] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  269.931373][ T7590] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  270.102904][ T7590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.876055][ T7941] netlink: 'syz.0.510': attribute type 10 has an invalid length.
[  270.885950][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'.
[  270.992442][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'.
[  271.003241][  T796] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  271.300753][  T796] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  271.329763][  T796] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  271.348529][  T796] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  271.411839][  T796] usb 3-1: config 220 has no interface number 2
[  271.418434][  T796] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  271.473325][  T796] usb 3-1: config 220 interface 0 has no altsetting 0
[  271.502933][  T796] usb 3-1: config 220 interface 76 has no altsetting 0
[  271.523833][  T796] usb 3-1: config 220 interface 1 has no altsetting 0
[  271.546812][  T796] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  271.557495][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.567585][  T796] usb 3-1: Product: syz
[  271.580385][  T796] usb 3-1: Manufacturer: syz
[  271.590765][  T796] usb 3-1: SerialNumber: syz
[  271.849662][  T796] usb 3-1: selecting invalid altsetting 0
[  271.887436][  T796] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  271.924910][  T796] uvcvideo 3-1:220.0: No valid video chain found.
[  271.958143][  T796] usb 3-1: selecting invalid altsetting 0
[  271.973229][  T796] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  272.017629][  T796] usb 3-1: USB disconnect, device number 11
[  272.164936][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'.
[  272.441223][  T796] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  272.597408][  T796] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  272.622397][  T130] usb 1-1: USB disconnect, device number 21
[  272.640037][  T796] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  272.784852][ T6031] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  272.802714][  T796] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  272.900969][  T796] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  272.931068][  T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.987206][ T7947] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  272.994562][ T6031] usb 2-1: Using ep0 maxpacket: 8
[  273.002453][ T6031] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  273.062992][ T6031] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  273.109297][ T6031] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  273.129225][ T6031] usb 2-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  273.139690][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.149304][ T6031] usb 2-1: Product: syz
[  273.156215][ T6031] usb 2-1: Manufacturer: syz
[  273.163308][ T6031] usb 2-1: SerialNumber: syz
[  273.410456][ T7954] netlink: 'syz.1.516': attribute type 10 has an invalid length.
[  273.420341][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.516'.
[  273.521055][ T6031] usb 2-1: USB disconnect, device number 21
[  273.965782][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'.
[  274.561003][ T5955] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  274.631371][ T5917] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  274.720972][ T5955] usb 2-1: Using ep0 maxpacket: 8
[  274.728854][ T5955] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  274.757500][ T5955] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  274.779747][ T5955] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  274.788939][ T5917] usb 3-1: Using ep0 maxpacket: 8
[  274.802733][ T5917] usb 3-1: config 16 contains an unexpected descriptor of type 0x1, skipping
[  274.817810][ T5917] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  274.835229][ T5917] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  274.887768][ T7989] syzkaller0: entered promiscuous mode
[  274.893504][ T7989] syzkaller0: entered allmulticast mode
[  274.920928][ T5955] usb 2-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  274.949878][ T5917] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  274.963355][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.984288][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.992462][ T5955] usb 2-1: Product: syz
[  274.996665][ T5955] usb 2-1: Manufacturer: syz
[  275.001349][ T5917] usb 3-1: Product: syz
[  275.005545][ T5955] usb 2-1: SerialNumber: syz
[  275.013249][ T5917] usb 3-1: Manufacturer: syz
[  275.023316][ T5917] usb 3-1: SerialNumber: syz
[  275.243119][ T7979] netlink: 'syz.1.533': attribute type 10 has an invalid length.
[  275.268903][ T7979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.533'.
[  275.293572][ T7983] netlink: 'syz.2.523': attribute type 10 has an invalid length.
[  275.301874][ T7983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'.
[  275.459346][ T5955] usb 2-1: USB disconnect, device number 22
[  275.473363][ T5917] usb 3-1: USB disconnect, device number 12
[  275.944578][  T796] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  275.955032][  T796] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input22
[  276.293329][  T796] usb 4-1: USB disconnect, device number 19
[  276.299315][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  276.474182][ T5940] udevd[5940]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  276.574861][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'.
[  276.960538][ T8014] bridge0: port 3(team0) entered blocking state
[  276.967098][ T8014] bridge0: port 3(team0) entered listening state
[  276.973805][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.981005][ T8014] bridge0: port 2(bridge_slave_1) entered listening state
[  276.988431][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.995661][ T8014] bridge0: port 1(bridge_slave_0) entered listening state
[  277.075152][ T6159] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  277.098050][ T8014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.151109][ T5955] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  277.292081][ T6159] usb 2-1: Using ep0 maxpacket: 8
[  277.303294][ T6159] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  277.316856][ T6159] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  277.340990][ T6159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.357020][ T5955] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  277.370379][ T5955] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  277.400550][ T5955] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  277.454886][ T5955] usb 1-1: config 220 has no interface number 2
[  277.470995][ T5955] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  277.498026][ T5955] usb 1-1: config 220 interface 0 has no altsetting 0
[  277.516004][ T5955] usb 1-1: config 220 interface 76 has no altsetting 0
[  277.550963][ T5955] usb 1-1: config 220 interface 1 has no altsetting 0
[  277.618385][ T5955] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  277.629079][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.705988][ T5955] usb 1-1: Product: syz
[  277.710318][ T5955] usb 1-1: Manufacturer: syz
[  277.738180][ T5955] usb 1-1: SerialNumber: syz
[  277.927324][ T8020] netlink: 'syz.1.531': attribute type 10 has an invalid length.
[  277.935395][ T8020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.531'.
[  277.944704][ T8020] team0: entered promiscuous mode
[  277.949966][ T8020] team_slave_0: entered promiscuous mode
[  277.956515][ T8020] team_slave_1: entered promiscuous mode
[  277.962730][ T8020] team0: entered allmulticast mode
[  277.968598][ T8020] team_slave_0: entered allmulticast mode
[  278.027140][ T5955] usb 1-1: selecting invalid altsetting 0
[  278.038839][ T5955] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  278.055362][ T8020] team_slave_1: entered allmulticast mode
[  278.064870][ T5955] uvcvideo 1-1:220.0: No valid video chain found.
[  278.072690][ T8020] bridge0: port 3(team0) entered blocking state
[  278.090667][ T8020] bridge0: port 3(team0) entered disabled state
[  278.124007][ T5955] usb 1-1: selecting invalid altsetting 0
[  278.130311][ T5955] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  278.168751][ T5955] usb 1-1: USB disconnect, device number 22
[  278.307208][ T8020] bridge0: port 3(team0) entered blocking state
[  278.313651][ T8020] bridge0: port 3(team0) entered forwarding state
[  278.480085][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[  279.895130][ T6159] usb 2-1: USB disconnect, device number 23
[  279.972949][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'.
[  280.455875][ T5917] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  280.521306][ T5918] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  280.630973][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  280.638150][ T5917] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  280.761008][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  280.773801][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  280.791750][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.800226][ T5918] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  280.813722][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.823401][ T5918] usb 5-1: Product: syz
[  280.832981][ T5918] usb 5-1: Manufacturer: syz
[  280.838193][ T5918] usb 5-1: SerialNumber: syz
[  280.853988][ T5918] usb 5-1: config 0 descriptor??
[  281.123786][ T8049] lo: entered promiscuous mode
[  281.141064][ T8049] lo: entered allmulticast mode
[  281.147450][ T8049] tunl0: entered promiscuous mode
[  281.152591][ T8049] tunl0: entered allmulticast mode
[  281.159442][ T8049] gre0: entered promiscuous mode
[  281.187575][ T8049] gre0: entered allmulticast mode
[  281.206405][ T8049] gretap0: entered promiscuous mode
[  281.221164][ T8049] gretap0: entered allmulticast mode
[  281.236856][ T8051] netlink: 'syz.1.537': attribute type 10 has an invalid length.
[  281.245513][ T8049] erspan0: entered promiscuous mode
[  281.265628][ T8049] erspan0: entered allmulticast mode
[  281.278159][ T8049] ip_vti0: entered promiscuous mode
[  281.283837][ T8049] ip_vti0: entered allmulticast mode
[  281.311224][ T8053] netlink: 'syz.1.537': attribute type 10 has an invalid length.
[  281.323188][ T8049] ip6_vti0: entered promiscuous mode
[  281.339567][ T8049] ip6_vti0: entered allmulticast mode
[  281.352502][ T8049] sit0: entered promiscuous mode
[  281.357798][ T8049] sit0: entered allmulticast mode
[  281.380555][ T8049] ip6tnl0: entered promiscuous mode
[  281.386313][ T8049] ip6tnl0: entered allmulticast mode
[  281.399994][ T8049] ip6gre0: entered promiscuous mode
[  281.407481][ T8057] netlink: 'syz.0.544': attribute type 10 has an invalid length.
[  281.415038][ T8049] ip6gre0: entered allmulticast mode
[  281.424426][ T8057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'.
[  281.603847][ T8051] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  281.685084][ T8051] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  281.743317][ T8051] team0: Port device netdevsim0 added
[  281.755035][ T8053] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  281.789160][ T8053] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  281.872063][ T8053] team0: Port device netdevsim0 removed
[  281.873739][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'.
[  281.898228][ T8053] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  281.906205][ T5918] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110
[  281.948458][ T5918] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  283.454882][ T6159] usb 1-1: USB disconnect, device number 23
[  283.687308][ T5918] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  283.719764][  T796] usb 5-1: USB disconnect, device number 26
[  283.900087][ T5918] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  283.980980][ T5918] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  284.007092][ T5918] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  284.063799][ T5918] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  284.075033][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.097213][ T8080] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  284.645254][ T8092] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  284.652034][ T8092] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  284.669326][ T8092] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  284.687699][ T8092] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  284.714833][ T8092] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  284.778396][ T8092] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  284.831595][ T8092] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  284.837578][ T8092] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  284.853987][ T8092] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  284.860103][ T8092] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  285.032719][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'.
[  285.378244][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'.
[  285.387342][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'.
[  286.700043][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'.
[  286.840967][ T5984] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  286.906809][ T5918] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  286.918740][ T5918] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input23
[  287.018679][ T5918] usb 3-1: USB disconnect, device number 13
[  287.024908][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  287.033990][ T5984] usb 5-1: Using ep0 maxpacket: 8
[  287.051337][ T5984] usb 5-1: unable to get BOS descriptor or descriptor too short
[  287.065251][ T5984] usb 5-1: config 1 has an invalid interface number: 65 but max is 0
[  287.085404][ T5984] usb 5-1: config 1 has no interface number 0
[  287.098687][ T5984] usb 5-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30
[  287.120199][ T5984] usb 5-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128
[  287.207562][ T5984] usb 5-1: config 1 interface 65 has no altsetting 0
[  287.216785][ T5984] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  287.228790][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.237141][ T5984] usb 5-1: Product: syz
[  287.243684][ T5984] usb 5-1: Manufacturer: syz
[  287.248332][ T5984] usb 5-1: SerialNumber: syz
[  287.919567][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.949552][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.066900][ T8125] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  288.920985][ T6159] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  289.121065][ T6159] usb 3-1: Using ep0 maxpacket: 8
[  289.128725][ T6159] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  289.144955][ T6159] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  289.158787][ T6159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.777231][ T8138] netlink: 'syz.2.557': attribute type 10 has an invalid length.
[  289.785231][ T8138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.557'.
[  289.869942][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'.
[  290.131166][ T6159] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  290.283425][ T6159] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  290.292855][ T6159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.304490][ T6159] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  290.314936][ T6159] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  290.323301][ T6159] usb 4-1: Manufacturer: syz
[  290.362871][ T8126] delete_channel: no stack
[  290.393093][ T6159] usb 4-1: config 0 descriptor??
[  290.393497][ T5984] kalmia 5-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22
[  290.408921][ T5984] kalmia 5-1:1.65: probe with driver kalmia failed with error -22
[  290.428042][ T5984] usb 5-1: USB disconnect, device number 27
[  290.491045][ T6159] rc_core: IR keymap rc-hauppauge not found
[  290.497163][ T6159] Registered IR keymap rc-empty
[  290.504831][ T6159] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  290.517752][ T6159] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24
[  290.629620][    C0] igorplugusb 4-1:0.0: Error: urb status = -32
[  291.706739][  T796] usb 3-1: USB disconnect, device number 14
[  292.851201][ T6159] usb 4-1: USB disconnect, device number 20
[  292.941736][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'.
[  293.571060][ T6159] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  293.791226][ T6159] usb 4-1: Using ep0 maxpacket: 8
[  293.885055][ T6159] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  293.897242][ T6159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.905783][ T6159] usb 4-1: Product: syz
[  293.909986][ T6159] usb 4-1: Manufacturer: syz
[  293.915891][ T6159] usb 4-1: SerialNumber: syz
[  293.922725][ T6159] usb 4-1: config 0 descriptor??
[  295.021365][ T6159] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110
[  295.028883][ T6159] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  296.016918][  T796] usb 4-1: USB disconnect, device number 21
[  296.121777][ T8168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  296.297731][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'.
[  296.309307][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'.
[  297.378577][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[  299.098275][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'.
[  307.571050][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  307.578311][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  307.585575][    C0] bridge0: port 3(team0) entered learning state
[  322.295090][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  322.301947][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  337.653616][    C0] bridge0: port 3(team0) entered forwarding state
[  337.660170][    C0] bridge0: topology change detected, propagating
[  337.666894][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.674198][    C0] bridge0: topology change detected, propagating
[  337.680802][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.688139][    C0] bridge0: topology change detected, propagating
[  383.735435][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  383.741922][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  432.372282][   T31] INFO: task kworker/1:5:5917 blocked for more than 143 seconds.
[  432.380144][   T31]       Tainted: G             L      syzkaller #0
[  432.394094][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  432.403181][   T31] task:kworker/1:5     state:D stack:22944 pid:5917  tgid:5917  ppid:2      task_flags:0x4208060 flags:0x00080000
[  432.415462][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  432.422264][   T31] Call Trace:
[  432.425591][   T31]  <TASK>
[  432.428574][   T31]  __schedule+0x149b/0x4fd0
[  432.433509][   T31]  ? wq_worker_sleeping+0xfe/0x250
[  432.438677][   T31]  ? __pfx___schedule+0x10/0x10
[  432.443642][   T31]  ? schedule+0x91/0x360
[  432.447969][   T31]  schedule+0x165/0x360
[  432.456048][   T31]  schedule_preempt_disabled+0x13/0x30
[  432.462534][   T31]  __mutex_lock+0x7e6/0x1350
[  432.467216][   T31]  ? __mutex_lock+0x5bb/0x1350
[  432.472189][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  432.478481][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  432.484385][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  432.490161][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  432.497061][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  432.503248][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  432.509030][   T31]  process_scheduled_works+0xad1/0x1770
[  432.515466][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  432.521937][   T31]  ? do_raw_spin_lock+0x121/0x290
[  432.527047][   T31]  worker_thread+0x8a0/0xda0
[  432.532252][   T31]  kthread+0x711/0x8a0
[  432.536389][   T31]  ? __pfx_worker_thread+0x10/0x10
[  432.541773][   T31]  ? __pfx_kthread+0x10/0x10
[  432.546421][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  432.551856][   T31]  ? __pfx_kthread+0x10/0x10
[  432.556585][   T31]  ret_from_fork+0x510/0xa50
[  432.561564][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  432.566990][   T31]  ? __switch_to+0xc9e/0x1480
[  432.571916][   T31]  ? __pfx_kthread+0x10/0x10
[  432.576565][   T31]  ret_from_fork_asm+0x1a/0x30
[  432.583243][   T31]  </TASK>
[  432.586347][   T31] INFO: task syz.0.546:8085 blocked for more than 143 seconds.
[  432.594768][   T31]       Tainted: G             L      syzkaller #0
[  432.602299][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  432.611177][   T31] task:syz.0.546       state:D stack:24696 pid:8085  tgid:8085  ppid:5846   task_flags:0x400040 flags:0x10080002
[  432.623922][   T31] Call Trace:
[  432.627263][   T31]  <TASK>
[  432.630294][   T31]  __schedule+0x149b/0x4fd0
[  432.635040][   T31]  ? __pfx___schedule+0x10/0x10
[  432.639943][   T31]  ? schedule+0x91/0x360
[  432.644285][   T31]  schedule+0x165/0x360
[  432.648513][   T31]  schedule_preempt_disabled+0x13/0x30
[  432.654312][   T31]  __mutex_lock+0x7e6/0x1350
[  432.658958][   T31]  ? __mutex_lock+0x5bb/0x1350
[  432.663855][   T31]  ? rfkill_unregister+0xc8/0x220
[  432.668929][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  432.674442][   T31]  ? __pfx_device_del+0x10/0x10
[  432.679585][   T31]  ? enable_work+0x1e9/0x220
[  432.684341][   T31]  rfkill_unregister+0xc8/0x220
[  432.689243][   T31]  nfc_unregister_device+0x96/0x300
[  432.696640][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  432.703187][   T31]  virtual_ncidev_close+0x56/0x90
[  432.708308][   T31]  __fput+0x44c/0xa70
[  432.713437][   T31]  task_work_run+0x1d4/0x260
[  432.718111][   T31]  ? __pfx_task_work_run+0x10/0x10
[  432.723349][   T31]  exit_to_user_mode_loop+0xef/0x4e0
[  432.728739][   T31]  ? rcu_is_watching+0x15/0xb0
[  432.734393][   T31]  __do_fast_syscall_32+0x38e/0x560
[  432.739645][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[  432.744948][   T31]  ? do_fast_syscall_32+0x34/0x80
[  432.750044][   T31]  ? irqentry_exit+0x10f/0x660
[  432.755017][   T31]  do_fast_syscall_32+0x34/0x80
[  432.759915][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  432.766578][   T31] RIP: 0023:0xf70dd539
[  432.770706][   T31] RSP: 002b:00000000f75cfaec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4
[  432.781613][   T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e
[  432.789729][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  432.797836][   T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  432.807712][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  432.816576][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  432.825643][   T31]  </TASK>
[  432.828729][   T31] INFO: task syz.1.547:8092 blocked for more than 143 seconds.
[  432.836387][   T31]       Tainted: G             L      syzkaller #0
[  432.843866][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  432.852758][   T31] task:syz.1.547       state:D stack:27768 pid:8092  tgid:8091  ppid:5847   task_flags:0x400040 flags:0x10080002
[  432.864948][   T31] Call Trace:
[  432.868265][   T31]  <TASK>
[  432.871460][   T31]  __schedule+0x149b/0x4fd0
[  432.876045][   T31]  ? __pfx___schedule+0x10/0x10
[  432.881111][   T31]  ? schedule+0x91/0x360
[  432.885400][   T31]  schedule+0x165/0x360
[  432.889594][   T31]  schedule_preempt_disabled+0x13/0x30
[  432.895450][   T31]  __mutex_lock+0x7e6/0x1350
[  432.900351][   T31]  ? __mutex_lock+0x5bb/0x1350
[  432.905432][   T31]  ? nfc_dev_down+0x3b/0x290
[  432.910075][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  432.917001][   T31]  ? do_raw_spin_lock+0x121/0x290
[  432.922996][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  432.928775][   T31]  nfc_dev_down+0x3b/0x290
[  432.936895][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  432.942938][   T31]  nfc_rfkill_set_block+0x2d/0x100
[  432.948135][   T31]  rfkill_set_block+0x1d2/0x440
[  432.953801][   T31]  rfkill_fop_write+0x44b/0x570
[  432.958702][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  432.964324][   T31]  ? security_kernfs_init_security+0x260/0x290
[  432.970528][   T31]  ? rw_verify_area+0x255/0x4d0
[  432.975492][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  432.981167][   T31]  vfs_write+0x27e/0xb30
[  432.985430][   T31]  ? __pfx_vfs_write+0x10/0x10
[  432.990207][   T31]  ? __fget_files+0x2a/0x420
[  432.994880][   T31]  ? __fget_files+0x2a/0x420
[  432.999531][   T31]  ? __fget_files+0x3a0/0x420
[  433.004739][   T31]  ? __fget_files+0x2a/0x420
[  433.009358][   T31]  ksys_write+0x145/0x250
[  433.014260][   T31]  ? __pfx_ksys_write+0x10/0x10
[  433.019141][   T31]  __do_fast_syscall_32+0x1dc/0x560
[  433.024748][   T31]  ? do_fast_syscall_32+0x34/0x80
[  433.029835][   T31]  do_fast_syscall_32+0x34/0x80
[  433.034964][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  433.041532][   T31] RIP: 0023:0xf707d539
[  433.045639][   T31] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  433.054145][   T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  433.062341][   T31] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000
[  433.070406][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  433.078479][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  433.086641][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  433.094922][   T31]  </TASK>
[  433.098070][   T31] 
[  433.098070][   T31] Showing all locks held in the system:
[  433.106012][   T31] 1 lock held by khungtaskd/31:
[  433.111042][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  433.121204][   T31] 5 locks held by kworker/u8:12/3732:
[  433.126624][   T31] 1 lock held by klogd/5191:
[  433.131291][   T31] 2 locks held by getty/5587:
[  433.135997][   T31]  #0: ffff88802f6bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  433.146004][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  433.156222][   T31] 3 locks held by kworker/1:5/5917:
[  433.161586][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  433.172946][   T31]  #1: ffffc900045bfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  433.186837][   T31]  #2: ffffffff8f5fd7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  433.198292][   T31] 2 locks held by syz.0.546/8085:
[  433.203629][   T31]  #0: ffff888031e06100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300
[  433.213505][   T31]  #1: ffffffff8f5fd7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  433.223816][   T31] 2 locks held by syz.1.547/8092:
[  433.228846][   T31]  #0: ffffffff8f5fd7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  433.239048][   T31]  #1: ffff888031e06100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290
[  433.248209][   T31] 3 locks held by syz.2.566/8183:
[  433.258443][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.267138][   T31]  #1: ffff888051587100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390
[  433.276878][   T31]  #2: ffffffff8f5fd7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  433.287021][   T31] 1 lock held by syz.3.567/8189:
[  433.292048][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.300580][   T31] 1 lock held by syz.3.567/8190:
[  433.305726][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.314416][   T31] 1 lock held by syz-executor/8196:
[  433.319624][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.328389][   T31] 1 lock held by syz-executor/8203:
[  433.333761][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.342552][   T31] 1 lock held by syz.4.573/8209:
[  433.347559][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.356155][   T31] 1 lock held by syz-executor/8213:
[  433.361511][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.370009][   T31] 1 lock held by syz-executor/8214:
[  433.375294][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.384021][   T31] 1 lock held by syz-executor/8217:
[  433.389293][   T31]  #0: ffffffff8e79fb28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  433.397891][   T31] 
[  433.400239][   T31] =============================================
[  433.400239][   T31] 
[  433.409011][   T31] NMI backtrace for cpu 0
[  433.409036][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.409068][   T31] Tainted: [L]=SOFTLOCKUP
[  433.409074][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  433.409083][   T31] Call Trace:
[  433.409089][   T31]  <TASK>
[  433.409095][   T31]  dump_stack_lvl+0xe8/0x150
[  433.409117][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  433.409138][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  433.409183][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  433.409206][   T31]  sys_info+0x135/0x170
[  433.409223][   T31]  watchdog+0xf95/0xfe0
[  433.409247][   T31]  ? watchdog+0x20a/0xfe0
[  433.409271][   T31]  kthread+0x711/0x8a0
[  433.409292][   T31]  ? __pfx_watchdog+0x10/0x10
[  433.409311][   T31]  ? __pfx_kthread+0x10/0x10
[  433.409332][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  433.409354][   T31]  ? __pfx_kthread+0x10/0x10
[  433.409373][   T31]  ret_from_fork+0x510/0xa50
[  433.409389][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  433.409402][   T31]  ? __switch_to+0xc9e/0x1480
[  433.409428][   T31]  ? __pfx_kthread+0x10/0x10
[  433.409447][   T31]  ret_from_fork_asm+0x1a/0x30
[  433.409477][   T31]  </TASK>
[  433.409483][   T31] Sending NMI from CPU 0 to CPUs 1:
[  433.536105][    C1] NMI backtrace for cpu 1
[  433.536125][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.536148][    C1] Tainted: [L]=SOFTLOCKUP
[  433.536155][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  433.536165][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  433.536188][    C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  433.536204][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2
[  433.536220][    C1] RAX: 000000000045df2b RBX: ffffffff819713ee RCX: 0000000080000001
[  433.536233][    C1] RDX: 0000000000000001 RSI: ffffffff8d79201e RDI: ffffffff8bc083e0
[  433.536245][    C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db
[  433.536258][    C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270
[  433.536271][    C1] R13: 1ffff110038d8b70 R14: 0000000000000001 R15: 0000000000000001
[  433.536282][    C1] FS:  0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000
[  433.536296][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  433.536308][    C1] CR2: 000055686a191660 CR3: 000000000dd3a000 CR4: 00000000003526f0
[  433.536324][    C1] Call Trace:
[  433.536330][    C1]  <TASK>
[  433.536336][    C1]  default_idle+0x13/0x20
[  433.536358][    C1]  default_idle_call+0x73/0xb0
[  433.536379][    C1]  do_idle+0x1be/0x4d0
[  433.536397][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  433.536420][    C1]  ? __pfx_do_idle+0x10/0x10
[  433.536443][    C1]  cpu_startup_entry+0x44/0x60
[  433.536461][    C1]  start_secondary+0x101/0x110
[  433.536494][    C1]  common_startup_64+0x13e/0x147
[  433.536525][    C1]  </TASK>
[  433.711387][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  433.718285][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.729002][   T31] Tainted: [L]=SOFTLOCKUP
[  433.733334][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  433.743398][   T31] Call Trace:
[  433.746683][   T31]  <TASK>
[  433.749621][   T31]  vpanic+0x1e0/0x670
[  433.753613][   T31]  panic+0xb9/0xc0
[  433.757339][   T31]  ? __pfx_panic+0x10/0x10
[  433.761759][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  433.767164][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  433.773354][   T31]  watchdog+0xfdf/0xfe0
[  433.777528][   T31]  ? watchdog+0x20a/0xfe0
[  433.781870][   T31]  kthread+0x711/0x8a0
[  433.785944][   T31]  ? __pfx_watchdog+0x10/0x10
[  433.790624][   T31]  ? __pfx_kthread+0x10/0x10
[  433.795231][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  433.800445][   T31]  ? __pfx_kthread+0x10/0x10
[  433.805045][   T31]  ret_from_fork+0x510/0xa50
[  433.809634][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  433.814752][   T31]  ? __switch_to+0xc9e/0x1480
[  433.819481][   T31]  ? __pfx_kthread+0x10/0x10
[  433.824078][   T31]  ret_from_fork_asm+0x1a/0x30
[  433.828858][   T31]  </TASK>
[  433.832500][   T31] Kernel Offset: disabled
[  433.836832][   T31] Rebooting in 86400 seconds..