last executing test programs:

6m1.170603573s ago: executing program 1 (id=289):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {0x0, 0x0, 0x0, 0xffff}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000006480))
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x5, "", [{{0x9, 0x4, 0x0, 0xa, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0xfc, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r6, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000)
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c", 0x11, 0x4, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {0x0, 0x0, 0x0, 0xffff}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) (async)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) (async)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000006480)) (async)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x5, "", [{{0x9, 0x4, 0x0, 0xa, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0xfc, 0x1}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r6, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) (async)
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c", 0x11, 0x4, 0x0, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async)

5m59.691308719s ago: executing program 1 (id=292):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x62901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c3a0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)

5m59.557318982s ago: executing program 1 (id=294):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080)=0x4, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040))
r1 = socket(0x2b, 0x80801, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x20, 0x10000, @empty}, 0x1c)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20)

5m59.44427229s ago: executing program 1 (id=295):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r3, 0x303, 0x2, 0x25dfdbfe, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0x20e9b, 0x4)

5m59.432850098s ago: executing program 1 (id=296):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

5m59.364805932s ago: executing program 1 (id=297):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@my=0x1, 0x4001})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf250100000018000180140002006261746164765f736c6176655f310000200002801c"], 0x4c}}, 0x4000)
fcntl$setstatus(r0, 0x4, 0x44000)
chdir(&(0x7f0000000140)='./file1\x00')
r3 = gettid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
syz_open_procfs(r3, &(0x7f0000000180)='fdinfo/3\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x180)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000880)={&(0x7f0000000440)={{@host, 0x4}, {@local, 0x1ff}, 0x400, "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"}, 0x418, 0x1})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0)

5m44.277149198s ago: executing program 32 (id=297):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@my=0x1, 0x4001})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf250100000018000180140002006261746164765f736c6176655f310000200002801c"], 0x4c}}, 0x4000)
fcntl$setstatus(r0, 0x4, 0x44000)
chdir(&(0x7f0000000140)='./file1\x00')
r3 = gettid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
syz_open_procfs(r3, &(0x7f0000000180)='fdinfo/3\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x180)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000880)={&(0x7f0000000440)={{@host, 0x4}, {@local, 0x1ff}, 0x400, "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"}, 0x418, 0x1})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0)

3m1.540848052s ago: executing program 2 (id=1193):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)="890704285aef67af8dbdd2e1d571a952398b6b1b08601422cd0d5c8b8e8bebefa09c12dd1455bd67a817", 0x2a)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x0, 0x40, 0x8, 0x7, 0x7fff, 0x513, {0x0, @in6={{0xa, 0x4e23, 0xc1d, @mcast1, 0x7}}, 0x2, 0x1, 0xbfe8, 0x16, 0x6}}, &(0x7f0000000180)=0xb0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setreuid(0x0, r5)
fcntl$setstatus(r3, 0x4, 0x460c0)
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0x8, "f8f44fa604e0937938b160bc0f359ebf496ac2d64cd825060102dda9631d379f", 0x2, 0x0, 0xa324, 0x6, 0x0, 0x0, 0x0, 0x8})
sendto$inet(r1, &(0x7f00000000c0)="1b1bfbba13493432429e28cd6624a6c1932418498eba8bf13d9da38ec465785f4dffb839ef82", 0x26, 0x4080, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd7000000000008004000700"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='\b\x00`'], 0xfce)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000040)=0x7fffffff, 0x4)

3m1.364156353s ago: executing program 2 (id=1195):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40802)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000000280))
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000002fedb031d0638f41e200036917eb200000000000002640de7f70008004a8df2b83b19b3010b110000000008004bfaff0000000000000001000000b826b5b33ef15ac5f68464d3cd9d919237"], 0x30}}, 0x24000080)

3m1.21829835s ago: executing program 2 (id=1196):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000006c0)=@vmx={0x4, 0x0, 0x2080, {0x60000, 0x70000, {0x7}, 0x0, 0x1000}, {"ca0f838e7bc00608a04897deb5215086a76e7da924ef106e72245f55f15558725372e21b463acfbffa8307a3a49d2395903e5b5253bc902d3a3bcfc866198c828cc9d77817dbf77865025eb3cd7ad1219ab03e43b38ea4a3f1291adcdeb07540e1a5e9a4594cca15991dff2b9f635f5352d3e2c09026b246cfc697c314de3cf4630d71e7b38f75ba4775198f0b950629f9f175e7c1602a8c8092764ee36fd435698e6275084ddaffc5516e07ff9a25895111c25ee7ef4d6ca7927dcf475437486b931126406f85cd9f4615679af640c350af1b0ce36913672ba4c9317251f26b08909f4a845ac7a76ca903ee79d4f56cc0b79db619b81214c68868751ebff2c3dc79e0c4a7d1203082680cbaaba043d4bad64e694350f14c763b1e6067c5b7aadcc93456853768c3d72cd271d0d476c74f8e5a205847479329995bde432059afcbb5ac2f1768e88c20553a417132ff9c9c47844e8efe88bdc345c19458826840ffb137eebb8b1b960c988c76a518db63533639b2da4ff83e41d6c533c3a0035588ee7c938dfb48a9599620966be624c8bd934048da2adfbda057f0069b303f0159186699b144b9976fef892ce8f0d998a24a9c5cb21b085d4add65531be837fdbd5398496392f5a747f13beffa00e5a3c3567ae0dbf6f616563f6ebd99a419368226372d71c313aa31c937be652e889368e52f3dd78129006e721b068c334b6445b9bd73476a5bc5e84625762c6f68182b8c6e03bfc6de52311f84956606ff93fde3f94a7234d92636eef0822398cfd2bff2e20784b803b98b1346a5070c9d687a9622f39b72b5b60d226e84f5598face7aa7e17d480cb122a7826d0bf10fccaab1fd6000e950729055a2476b6a80810af7d5b5cdeccf98dbb6cee7dcbfd8a2fd636527fedaa0ef2c248796ad0e6359494e340d0501e2982e5285f86b0f869b092950c5723d1a344c0ff0bbd816c52d9b2985b192756e8abc189cc68dd5e30ba3e8ceef6a97c30a17a490805b77a3c89d1a013296f16d9c56edeb450ce37f549b1353d2e7051b03e8b70cf7a52a0cd1327f70df98e9b4f943da8181b2d3a64f222cb5a378bb180ef51dd791aa1b1bc9c760718a46294d6035765166ccb64b8d3ac3cb3ae7244937e9947861f8ca7c94f4219f0ddb4869b04caff1f63d41604d7625f3d67624b606f628e01c079fc795e20174c3babae877b3e75988c44e71d6b26c76e26e9f4b04d7a3633d17002e4b7a0f9881951ffe17e6524bb8c3c6e53e5dae4d3e194478fd1ba8eddbe5242c5d9be3056aac7343d388c1d26bd8a2a96014a4013573839aa49d82069d1b8af9405f817e39b56ac8e668a81936440eaad528aea8617a443ecf5444d007180b8c284f1783fc946a2bb7178407ccca6bad0c4774e34a124b7bf325b8e752037f300b3dcf17d17594f0f51967b766aab91a2272b8d91bf3e4733bf83c6d4010b07d3063cbe270c52930fcaccb7309503d8af7aef0e517b37583b1df49355106db0077b2a271c8fa4695be9be080420c3a6de4c76794761a0c731cdce02bd85915daa6cbd919c14e88c4bcee17d958ef3c561be18dd8b93a507746fc164ecc5fcad0048f894ca2eecc847e16cfecc9ad86f96e19b9a44fb4d2a26186c55a7de240b4013d8bcec589a98001be40133e4cbefaa3f70e023f21d7cea4a5bfba21c1719d77dabc858e7d7034cd5c1fef129e1b5794024ce17f1305ed594c1aef84a0d49fa5ccfe64664e39ed1a86132cbcc6e0be798ba44f82c7454957db9f1aa4db2db4e64a7b81e85bf4d3aa55abb142518a0a49248e949a0e9fd94cf50a139f8d7fd6b54bf87a7b91526f3f4484f2eb25f3cc212932bb5d18982358913d5bde70f4062801a0337c192101da9fca9e4244863fab9b068568de055a7e65a8d8256c190b905448373d5fdef5c6e75e61debbff64fcc3718c827c5687b9cac5b98373fb061d7c63082ee287c0bccd4d7d1b729b481ad85ac433c738046e029f31d5941a1bfd8fb8b77f882e92ff1188cb87cf528e3a37215234ea3fa0762a9e6c1ade1444dca57bc1ccfa0a4f729c0f388e7043485fd451aee41dc8750c60cf5d0612cc56c1a3aade868f112dd3bb97d3a34b9602ed540a3c7dbac736f8b363ff11d0e34e5a5c911efbf61b28d229be0af357749dd98a5bb0f56bf6a9712c5c48ccdd4ada59ca92b84a04c78631f51e40579e2854ff53e469e4cfc021b374249c1af6a21c1b48ad2f4fb7344f3adc990a163a2df04d9cf4fa45c795243793871c91b174916d6aa2d80afdcefa73d61d0f82de863b7e593d543b11d31aee0354ae729f392fd8c8b5f251bbbd4334754ddf09c0fef2a51e617acb9476499ff5f2ae83f68312fabd4a23be8a6ce6a04e82d14e0ff20ee355242ed18c0b3b7fdf3d6114ad99f95a0340f290cdaeec9e9e03f75b572420365a8e350c2d71413b98eacb88494047d7e921048db092369bdc5d88fa8d1c2a708b47fa83693172b4991605b5f3ff97306912dfb6173ac8e548c6923bc0db9735586ec030c3b4cfde81d3efdc64f4ec78861fda2e75a0b3f5911b6ed6e824eedca6bc11db4fe220c25cd492e12c2dce11edb85ab81ebcdaa7d690d152fbb52ba7cf882fe695009c2ad9f74dd543ff044ac92edd464aab3f79e354c97e2bbbbdb5ebff4ce69ac71bff7de9bc8cf2a53b8776c3b8e58d71025f73064fc4766b6a590b74031ae9df05e471d11c400dc727045541dd83eca650d95a9444e31a262eae0132a2f1c3e4db4c4926a84d571b92532b9c517eb081d222ce410c2d141286ccdb8fd37ef75568b75457976b565d31ac9952ad2783ee2e1e8915f64e23915b2032ad54dbb5b500492b0e332d14a919aa2932c782a1fc20843d64adc5187229ce61bb57b9e5b7b0e383b4e1704015a83cb12a2bca4b03376bddba52501fbd54b0da3503f7f6faad14b4ee1181a33ef692877532a0ec7db5dc6a2087de773f1b122c1a26057f45b59e1bc5a2b2464a0f8838de742601bdd2b5d8e4faa549d1c89ea68a14493cf41c6bd63c2196c8f6158858a44941ae1109010dbe315aa547a49f6bd0a888b5bf3486741f1146768276a2f62ac3ba4f3919e28d7be7567e0e14c3f94f97951900dde4607735f657ab939950e93da0c0ce58a16948a986d39299eb907fc76351cb7fd5877cb3ab5643eb5f72cdd18f2c4a89edf52361586a4902400e042e419dcd7e240127a9ecd1368c186a565bdf38ac555ecc0c5c331f138c7ede5804438ded6c0fc19e894b6f11cc3d1f644c2568d2565ef77b003894704c02caf636493b9c4ed046a942aba067953de1deb2b49a3d8689724de8aeadcdaf71da7208abd26f325ee27fe67bde1e6f8434fbd04d40383b0e54be01738ddd8f67f6f91f37dac18c5489c8c16f9a365a5eae80b899e9e0f9ad77450309cba7d2bc347a7f9933cee365e590af6d8873699257b698c73590670b1755621cfb923a362b261158badb63f3e9cb412b457258ede2c695e230587ac13929e551a215618f98adcfd877dcbdc69b25d5ac3c0f1a00af596554d4541ae2dbc7313a06c09ce6c375d8cb6e322efbbf11736f1f814d5791eb980af7fea6d8b8461ab412ffe49d4b1d482fc403e89e757449a35eb176a80b2fc6b4d550003a40ddcb9d6df5de97bce2d3437ac189aaa68ee65685d62cd565781dca2769aac7e64ce7663cfb87c7db36aa7869aa76b197a56afd47c777d8a4a1f4baa802f36fc38044fefe07ecd13f9cb5b5f4f12bbeb3362e4199261a309212c35a4b123d5a1eec18e11ceef72483b278af849705be8b98d6a648b23a6a31771b6c06e9ab4d867d7f269c939595ac8dcc181cfb2e72c0ca07b8570b2a6314af4c13069d914ce8d4709b0d1e10ff67f71fd2e64cb450fd6ac0ae57b79dca23d1ef6de980ddcb84dc708af3d0ae85e157d22b1408da9f01ed0da7cc8d638301873027f48824ac779667e17d244546a73970a10bc5d3074fee4c725fa699457688be08ee1cb551e72efb1d45e89d1727d2931870453587a6f47921e1494541659e620f8e04af8ece07d740af98162ae983b9bb87a59dbbff8029c8acc903f21e3715e314cef932bde3e88a10c4364620b8f582a80402b50e4cdba400ca34fc358bc22e984b401329c36eb2c1d538e536c86bfee689f274036187b958b22cd8f3466712dd1b10780c64377473f83414dc4a12fddb39488dcd7cf94d450c17da918ccb0c4047f97330c24d9595d673116c23d726e482f21b05ba341ad1576ccf701080f9b3dffa3b9600649c562a73c234a36b133cdce6c36c3439f8fe5d62f64c7a1f17bb7b13f1f473fa0949f6c38eb922dffb03688c0e77c8c1bd63c602381d4d1bb10986971c31354fee87c12631e3365125e5abe35077cccb272c6fe94c708d37777c9b38015ed83e8fe27e2008c74e59d031ad005e904176e6d1fcffb816718ea1aa3e7e46021a443cb891565f0f6656d9f70d6d7ea70797373b977c4175f77dcae2b84e4382c9ea3999df61f1ef18cf3ce011f5f6a20029f498feba9e5d549293688151d8b0fac7b4b4e079f81fadbed0bd43cca82d77617f4bebc0e8c6d0f4baf0cea90c1e027be74521dd57774742cffd7bf6bcb95f13d6cbb01705342f7e224921ed00f71e9b50f9c87bf071f8b01580c98e85c47cb6ad5e9084a549500f720cd82a7d30db5ad68c93e31f7408822c12d9fdd4cc0c2c51046459d83df545e69894a574d2f863cedb74c56a3f2d1ff20dcdd7847701e397a6158b5a03c2a44ab6c367682ce847bf07cae5da9442b84b70573a39fe6c8ffb0d4601319007765e58665977f50822f41b273396e187228a778d45ce344e8ca3e351d6dce7cd7f44f6ac6f549da224dd2fd8be9414091ffe00183ff5480bfbcb72df20c78051184d419fa0c40e7950d98caf29941217102a38f64d5168eab3748dc8d2983f2580d3afa6868a8c05f182437231e191bc63accef383b748f9a67ca18a2e12e33965db1b4d8f20802811e5abf4954ddd902e64ac3ba5f0628ed7e40326a16f36e90b9d2091419aea0bf12a9582b560ff5c5deabb4565e7ea2a289fd2a46e849c3f14d2640c5d2ea70991b2278775b5fc051c2a798abfab2f070335164834458ac016d3d1f7f97d84eb9e49c219d7cffd7ee5d1279d86c39c66e1461c6ac12254a36a63c694492eade865c9e1c0d4ba54700279b6d464d130b6c596ca1d5f40d3fd482c110ea97703843d04651983ba0338f364e0d9fcd71168d9414d09152f215b709c8938299ecd768bde39a2d7f815da2159fa41fe3105756022c67c67300590b8ba58b74c4f6bbd177c05d417e20e960f77d10d153d92133d3d29bfb3b7e91f7746551d4716812323305c137c0d2bb27655ed01343130aa1caad46682e292602386e60e1466eb3a439cc48d2eb10cf5b9c8e0ed396f025b8b3d16666b7c41e4174eb9544183ea56116dc1b00be5cbdeff024e5ab9068dcad05d723e8cb9d57a27654c569bb6c9ba680d0d8238b63e3ad5979d607dcdea3b98ecea56cf21100cf0e2b9520ac7aef73d6dea0f8a353ad6df7d3dc469052aca397a3e3ba902bf9a569b1e5c4937c99475910b8f878e6de3ff45e9f8932088f71bd319e063978ca783aa28484229cf6927d11c32d3a971d9a6f0e3b36217fb5d6199244ae467ff8c3889b043b9e34938797b49fa1348b7282b30479e85808de8510acddca0ffbf8ddaf6244061b2dfb6f05d15d853d7b0f90d876e95028f127ceea61f8ceafc5e340fb7e58dc532aa8173a959fdfaa4f", "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"}}) (async, rerun: 32)
mount$9p_rdma(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x2200000, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d726467612c706f72743d3078303030303030303030303030346532322c6d73697a653d3078303030303030303033363133383038342c004167d28cad7a90622e948f9dc7f2900883d5ce87a8711e18c4a4f0199897bc587df669d1afccb28831b6ec234467a1b4dff9016f81397629daa124d3165c1cbd51df8a5767d0c6000cb6961b1e8e3eb7be81100971b3edcd0296543b393ccdc6ed52d28526c41ee83c09c3d0a9dbf3af6f6d192ccc463e6590a35acc56616e93742f5b913f6ffc53585bcaa1c27401fa8ddd177f3286af6e8057ba9360ea3cc41b888f"]) (async)
r3 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000000100)='\x9bn6,\xf5\xf5iA\xf3Q}\xe26\x88\x00\xeb\x00', 0xfffffffffffffffe) (async)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
recvmsg$can_raw(r4, &(0x7f0000002800)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002640)=[{&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/216, 0xd8}, {&(0x7f0000002200)=""/147, 0xf5}, {&(0x7f00000022c0)=""/174, 0xae}, {&(0x7f0000002380)=""/172, 0xac}, {&(0x7f0000002440)=""/62, 0x3e}, {&(0x7f0000002480)=""/191, 0xbf}, {&(0x7f0000002540)=""/237, 0xed}], 0x9, &(0x7f0000002700)=""/242, 0xf2}, 0x2000)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)=')\x00', r3) (async, rerun: 32)
keyctl$search(0xa, r3, &(0x7f0000000200)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x0}, r3) (rerun: 32)

3m1.039619165s ago: executing program 2 (id=1197):
socket$inet6_sctp(0xa, 0x1, 0x84)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x4008af04, &(0x7f0000000600))
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x244001, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2m59.446492814s ago: executing program 2 (id=1202):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2m59.39898432s ago: executing program 2 (id=1203):
r0 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x100, 0x4, 0x2cf}, 0x0, 0x0, &(0x7f0000000000)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="5134568b4bab4aef0f2df54f289b92446f3bce69af9ee6f7391a576626598b7a003b10d0535babad4ed4b45528d0156326b98dde767fa5538bbfb01bd899a381b804b8af9c26c73bd0229a1745d2a98734437a0ec7c53bb5e5f106dfc0d90fc62ff2b9810903862fcbe7cadfb0d7de0dad39d650dfe49237773a2557d6d92d7a3484d8b3842d0c36ffed62936983c3ddf19666d267edf5c148", 0x99}, {&(0x7f0000000140)="5bdd7db5bbfea1b6d18af58dbe9412606407ca1f447ea790ba03c9b6461985f6f393c2", 0x23}, {&(0x7f0000000180)="4f1ea678ff0f1dd15f1ef8b55525b35fb6741748baa543d5707a9b28a836ef42d6daeebdbdbab0ac107a54feb97631dd61040fa9faeab7108be4b9f55fbe615fd4675f60b75d8cab8d81f85158a07dd2195fd7187cd37a5ff3fb56355dcaba6b3a7ea8f83b8aef45f60a78c20d12726dd32d0227acf8861a32170ee80aeca5bccb3ef97d16e03266107c8c3dcb1456d17d366cac5502ad26a2", 0x99}, {&(0x7f0000000240)="de68598fe972f83efef2193ce1b8a699acd6daeb4bb064f881baab3405a5ba9b2cb9f540cd3e6e69c57b780c754cc25c7dec55aedfcd554c52ff0b61cb8fcad23a60ca1108977d2d55aeff1aab4773a7c25441b94ce3575ab2baa939b0e1c29de2ed2835a4c4cbc3c6a7eb0d8e6ae96566f5", 0x72}, {&(0x7f00000002c0)="18c8c7ed5d605ad677a4303bcdd1511da1b075dc9897fdb3312509770239a7e551e5f5255a5787aeae1c028140e7023b1a7c6f1065142f5f35c609fbac9f584b204cf0fc2cbd030131bfdfb9f14cd71d6df00dc6301a1c4d4071ecc40e84c1114a21304a5d6071ac0a4f0b94b7d4ffdec0dcf4ae79", 0x75}], 0x5, 0x1) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r2 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)

2m44.071214958s ago: executing program 33 (id=1203):
r0 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x100, 0x4, 0x2cf}, 0x0, 0x0, &(0x7f0000000000)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="5134568b4bab4aef0f2df54f289b92446f3bce69af9ee6f7391a576626598b7a003b10d0535babad4ed4b45528d0156326b98dde767fa5538bbfb01bd899a381b804b8af9c26c73bd0229a1745d2a98734437a0ec7c53bb5e5f106dfc0d90fc62ff2b9810903862fcbe7cadfb0d7de0dad39d650dfe49237773a2557d6d92d7a3484d8b3842d0c36ffed62936983c3ddf19666d267edf5c148", 0x99}, {&(0x7f0000000140)="5bdd7db5bbfea1b6d18af58dbe9412606407ca1f447ea790ba03c9b6461985f6f393c2", 0x23}, {&(0x7f0000000180)="4f1ea678ff0f1dd15f1ef8b55525b35fb6741748baa543d5707a9b28a836ef42d6daeebdbdbab0ac107a54feb97631dd61040fa9faeab7108be4b9f55fbe615fd4675f60b75d8cab8d81f85158a07dd2195fd7187cd37a5ff3fb56355dcaba6b3a7ea8f83b8aef45f60a78c20d12726dd32d0227acf8861a32170ee80aeca5bccb3ef97d16e03266107c8c3dcb1456d17d366cac5502ad26a2", 0x99}, {&(0x7f0000000240)="de68598fe972f83efef2193ce1b8a699acd6daeb4bb064f881baab3405a5ba9b2cb9f540cd3e6e69c57b780c754cc25c7dec55aedfcd554c52ff0b61cb8fcad23a60ca1108977d2d55aeff1aab4773a7c25441b94ce3575ab2baa939b0e1c29de2ed2835a4c4cbc3c6a7eb0d8e6ae96566f5", 0x72}, {&(0x7f00000002c0)="18c8c7ed5d605ad677a4303bcdd1511da1b075dc9897fdb3312509770239a7e551e5f5255a5787aeae1c028140e7023b1a7c6f1065142f5f35c609fbac9f584b204cf0fc2cbd030131bfdfb9f14cd71d6df00dc6301a1c4d4071ecc40e84c1114a21304a5d6071ac0a4f0b94b7d4ffdec0dcf4ae79", 0x75}], 0x5, 0x1) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r2 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)

2m31.158530763s ago: executing program 5 (id=1356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="018002f6feffffffffff3800000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840)

2m31.089804182s ago: executing program 5 (id=1357):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xfe}}}}}}}]}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x0, 0x23, 0xbf, {0xbf, 0x1, "3173868b58aa2ae7b62cc44e91e8d64acb1aaaacbf294a7b486680de003ffd3807dc39706ac4b860d56f2ca7c84764400244f988c74100fab2ef01ab18e7c1cefef431eda994303f28b03e46e4cec203414c31e48dad4b2542eae0543d3298d9d351c844e120012b9cba6211532c25532827809d37ceecb7df71212fe4982516cf1af00a61f49ded66c48a7f356783cd47e4c22e2ac10b9cab59ffbfe29b88a3a7b8caa4d06b3b506eaa85b36e5e7e405f1bf3ba8b6085ed3ce7578ac6"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x40, 0x16, 0xcf, "1d695fa9d6d658274b56ecfcd32278004612cb63baf5b58501e73facb42731686d2b9e45011064204dfceb84f696f173f82ca1f2fc4c1195b66b5fce94f50b74b1459ab3891e6a39f6a54482edad773466d842983b81807f85cac2a3a70e9008379bc050d71a275150d4046797b6502612fc3910d8082c6a012267d77a01b2907cc9def268c5e0c16fbf54d969394174289f58db3a36346e23a5f1db33e82d286f9e8664e0f48bc60d3c8f2cfd8669965ad520dda8c86e0b4469d43f95a579cd06593a1777542655b3465f50bff08a"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x898a, 0x1, 0x10000, 0xfff7, 0x5, 0xac4, 0x3, 0x4, 0xa, 0x7, 0x7, 0x3}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7ff}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @typed={0x4, 0xe5}]}, 0x1c}], 0x1}, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r3, &(0x7f0000000740)={0x14, &(0x7f0000000040)={0x20, 0xa, 0x38, {0x38, 0xc, "cc6df3d5de6619e16788e3d09147d5f4af14ddea0c06b92e2424b857b854ab24dd2cc01c668ee85ea0fced022b023450d6efd400c81f"}}, &(0x7f0000000700)=ANY=[@ANYBLOB="0003040000000403f734"]}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x0, 0x15, 0x26, "95111e397f25be6dba6e5dea2b3de767d522331490c649674d24018a0a9eadc9a3f003cb4951"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x81, 0x1, "fa"}, &(0x7f0000000880)={0x20, 0x82, 0x1, '9'}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "0f44"}, &(0x7f0000000900)={0x20, 0x84, 0x2, "a170"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "92c220"}})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x3b)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x3)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xb)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7)

2m29.200178069s ago: executing program 5 (id=1365):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fcntl$dupfd(r0, 0x0, r0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 7)
write$tun(r1, &(0x7f0000001140)={@void, @val={0x0, 0x80, 0x7, 0x9, 0x6, 0x8}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2c, 0x6, 0x0, @remote, @mcast1, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x4}, 0x3, 0x4}, 0x1}}}}}}}, 0x5e)

2m28.764384804s ago: executing program 5 (id=1368):
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
r0 = getpid()
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0xfff6)

2m28.595269231s ago: executing program 5 (id=1369):
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x4008af04, 0x0)
openat$comedi(0xffffff9c, 0x0, 0x244001, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2m28.420569868s ago: executing program 5 (id=1370):
r0 = userfaultfd(0x80801)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x32)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2)
capset(&(0x7f0000000c00)={0x20071026}, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x0, 0x6, 0x8f})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff9000/0x7000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x7000, 0x3, 0x2})

2m28.004363587s ago: executing program 34 (id=1370):
r0 = userfaultfd(0x80801)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x32)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2)
capset(&(0x7f0000000c00)={0x20071026}, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x0, 0x6, 0x8f})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff9000/0x7000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x7000, 0x3, 0x2})

1m3.972142593s ago: executing program 0 (id=1974):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
kexec_load(0x3, 0x4, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0xfffffffe})

1m2.511312403s ago: executing program 0 (id=1979):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0xc, 0x6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getrusage(0xfffffffe, &(0x7f0000000340))

1m2.005497366s ago: executing program 0 (id=1980):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0xfffffffd, 0x0, &(0x7f0000000500)=""/79, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x1, 0x0, [{0x50000, 0x41, &(0x7f0000000100)=""/65}]})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)

58.932071505s ago: executing program 0 (id=1997):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9})
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fstat(r2, &(0x7f0000000040))
r3 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0x100006, {0x2, 0x0, 0x1}, 0x1}, 0x18)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)

58.842684893s ago: executing program 0 (id=1999):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, 0x0)

58.691587163s ago: executing program 0 (id=2001):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0})

43.65738503s ago: executing program 35 (id=2001):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0})

6.919202446s ago: executing program 3 (id=2248):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000003580)=""/4112, 0x1010}, {&(0x7f00000024c0)=""/170, 0xaa}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0)
r1 = gettid()
timer_create(0x9, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

6.771350349s ago: executing program 3 (id=2250):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0xc, 0x2}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_delete(r0)
syz_usb_connect(0x1, 0x24, &(0x7f0000001240)=ANY=[@ANYBLOB="120101026cc80808c21538002ec9010203010902120001ac0510090904660300528154d1002400240f0104000000fcff08000800241a04001000241301a30e4ea8d3c47f559a4093e683458d07dc95eeca977c832ed47cd45165240bbb35892ffcfc64f30734d563141d9c5304e281ea0806ea1a5c5dc1b41a29c1733e53baef95d4d59d4da2a799d0fe554e25d820b2b319b6024533d85dcd1ca396a7bf8bbd1b74569635bc3a8fe84970408cd0a17c145afd41c6bfa1902b908390f50589c7701312c0d71851d160001af5b48caf6f66d91b549dde193e8ff516a089aabc50cf1800e0e044d89b137c0d0da0e00062db8adab5f7c5e60c92d092b603d2a959c4d9fcd81bc7835b6f116a5eb4c95b6d0e19e32595ab6532e84b7fe96d4f4d9eee3c6f002414100001000024070000040000ac4b00000200002415020000240ad90805081c55befa19d54791f8224780bfd391725ef92ab8d990dc90f244cb7fbb73be7f320806427f89bd9a1c5d9a0fa6a71a7c1922956a5d4fae5e2f46f102894521477e7ccb918d326cef15a38b36287c9cc79700917b970fd56babc97c95c01cda32ec6764b6bb87d0c02c06c0d4fc"], &(0x7f0000000380)={0x36, 0x0, 0x0, 0x0, 0x3})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mount$tmpfs(0x0, &(0x7f000000b8c0)='./file3\x00', &(0x7f000000b900), 0x8001, &(0x7f000000b940)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
open_by_handle_at(r3, &(0x7f0000000140)=ANY=[], 0x8400)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000001200))
sendto$inet(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000001c0)="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", 0x1000)

6.721288444s ago: executing program 4 (id=2251):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14)

6.675627965s ago: executing program 4 (id=2252):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x40, 0x2, 0x5}}, 0x14)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8008, 0x7fffffff, 0x7fff, 0xfffffffe, 0x5, 0x800000e, 0xc, 0x100})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000003c0)={0x32b, @time={0x0, 0x4}, 0xff, {}, 0x0, 0x0, 0xfb})
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
read$nci(r0, 0x0, 0x0)

5.720161807s ago: executing program 4 (id=2253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
keyctl$join(0x1, &(0x7f0000000700)={'syz', 0x3}) (async)
r2 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) (async)
mlock2(&(0x7f0000fb4000/0x3000)=nil, 0x3000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x83}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

5.697723708s ago: executing program 4 (id=2254):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x80}, {0xffffffffffffffff, 0x484}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x10000]}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x2, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x24}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x8, 0x2, 0x0, 0x0, @adapter={0x6, 0x9403, 0x4, 0x9, 0xe08b}}]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x62a82, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r8, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
socket$kcm(0x29, 0x7, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22101, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xc644, @mcast1, 0x1, 0x4}, 0x80)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0x2d, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\xc3\xe6S\xc6jO\x7f\x03\x00\x00f\x02\xf4\xed\x16\xeb$s,\xba\xa7\x88\xdbBj*?\x9b\x97\xf0\xd7\xd7\xaf\xfb\r'}]}, 0x40}], 0x1, 0x0, 0x0, 0x20048001}, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c9", 0xc}, {&(0x7f0000000340)="448b7cff", 0x4}], 0x1000000000000020)

3.822172179s ago: executing program 6 (id=2259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
close(r1)
sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x37, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251a7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x8961637cb36cbb00}, 0x8010)

3.795491624s ago: executing program 6 (id=2260):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00'})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0)

3.72554513s ago: executing program 6 (id=2261):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000280))
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r4, 0x19, "4e0000001f83b0de38416919004000"/30}, &(0x7f0000000340)=0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, 0x0, 0x0)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)

3.725294292s ago: executing program 3 (id=2262):
r0 = socket(0x2, 0x3, 0x67)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x14)
read(r1, &(0x7f00000019c0)=""/4097, 0x1001)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0)
ioctl$LOOP_SET_FD(r2, 0xc0045003, 0xffffffffffffffff)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e)

3.531838458s ago: executing program 3 (id=2263):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x40000)

3.327288835s ago: executing program 3 (id=2264):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000002c0)={0x48})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x5, 0xa7, {0xa7, 0x6, "fb4aad1e77fe78e5dfcec40df26d6a19411be8e7bab2d71e38f99c0efb1d76d868eeead995a850c11b55615271684447737ea5af076d0c7fa88b4796bd4ee44782c0c1be7ec34f9dfb743a424b850f4adda71b1a95245526f1dd88c8a105a128ab927d800dcdd91a162c3acffec4f2af14e93e9319adf9446227cf66b116509e6533c62d5851f58891b26cb88e726f5d3ae1224cf51b3b496e2b0c4a6f07bc434be249016a"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x9c, "44f9d21e460ce2f4e348d4d631d726da69aabe3d79e2d71ab7c279b09d6cfeca9931691dbd60dca6fe2e2b1abcbab13a430c734a70f1c8fcef0d333ad19dc81897c5dbdaea1fa82adc3b9e8751ab98a4200e5c2727308663bf89252c1a87da37c66b599c2bebeeb024b8f7832837667cf86f1e3c85ce6e15a281adceb700ffbe6ac2b5847403f12377e31b8826fb3cda8c5e7e1bad0153c60b5a0af7"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x7fff, 0x3, 0x3, 0x1, 0xfff8, 0x1, 0xc, 0x1, 0x8000, 0x9, 0x401, 0x4}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}})

2.792046719s ago: executing program 6 (id=2265):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x40)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x46, 0x1000])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000000000}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xa0)
write$char_usb(r3, &(0x7f0000000200)="72f79ca8bd1c15857da0bb1d7d004f67c9d3d46ed9844b9a6ebf1b411b8043445fcf068188226a2c6ad285ef50c5bbe56c0a73232325761395ad15bcf337b4a4bce0e5f033dd8e8dc30dfc2a3bc26fec5444442e61799de59370b5472eae0afe01f1c960f102ddc23829e36b90a848da8f6535412e2e1b7f00ba7aa52e02caf52314d41987f40df08f0b7f797f25e9ab6a917d8a19751625d5f6949e52164a76f574726200e80021ed711381ad9f49f2e0edd602da3ed3bbb2eeddf7f1b760ac831a09cf2b7f8316e3f82daa1bbd1c2014be386b5236", 0xd6)
io_setup(0xbcbf, &(0x7f0000000300)=<r4=>0x0)
io_destroy(r4)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8010)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', <r7=>0x0, 0x10, 0x7800, 0x7, 0x4, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x65, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, {[@rr={0x7, 0xf, 0x77, [@local, @multicast2, @rand_addr=0x64010102]}, @timestamp={0x44, 0x18, 0x71, 0x0, 0x0, [0x2, 0xe8, 0x8, 0x6, 0x3ff]}, @noop, @timestamp_prespec={0x44, 0xc, 0xe2, 0x3, 0x8, [{@broadcast, 0x2}]}, @timestamp={0x44, 0x14, 0x7a, 0x0, 0x9, [0x1, 0x9, 0xff, 0x5]}, @ssrr={0x89, 0xf, 0xc1, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}})
getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000580)={@multicast2, @multicast2, <r8=>0x0}, &(0x7f00000005c0)=0xc)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4104}, 0x0)
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000700), &(0x7f0000000740)=0x4)
r9 = syz_usb_connect$midi(0x4, 0x8d, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x0, 0x2, 0x0, 0x10, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x12, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xa8, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x2, 0x8}, @ms_header={0x7, 0x24, 0x1, 0xfffd, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0x6}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x1, 0x6, {0x5, 0x25, 0x1, 0x1, '['}}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0xc, 0x1, 0x4, {0x10, 0x25, 0x1, 0xc, "8f085a34eb276573f4caaf7a"}}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x0, 0x0, 0x5, {0x9, 0x25, 0x1, 0x5, "518e74a361"}}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x8, 0xc, 0x7d, {0x14, 0x25, 0x1, 0x10, "5aedaf105a565a7a434aa7bf7b68621e"}}}]}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x310, 0x1, 0xe4, 0x4, 0x56dae9ed3c15223, 0x7}, 0x1c, &(0x7f0000000880)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "cb80db09195f3adc8920307bc9e4875a"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2c5d}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x180a}}, {0xa1, &(0x7f0000000940)=@string={0xa1, 0x3, "01c02db1a0f43ead21415f8dc1704695115b945d0d22eb3c5386ed538d9250f6e9d113de753a3b59a0a7c865fd7173ad3e30b24b4af12171633b5eb17004cc0ae581b5686d7c7ac9a69209ed72cc2975a2688d0475bc07dcd497cf8157944acf6e3fadb93ef3f8f3956e0200842460404e8d587129b96ae0867e426430ad5d93c56e3f1a1cd02ac89f12ff4ad70e4c9dbc16a36c3eb72224ae7119dcb5a495"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x40d}}]})
syz_usb_control_io$uac2(r9, &(0x7f0000000cc0)={0x14, &(0x7f0000000b00)={0x40, 0x1, 0x5a, {0x5a, 0x21, "f81f011f478c5b2987c0cf3aaad5f51afae985eea70ed9e69efeb0b8163273f6a540890332c7b44563ba12eb25a9bba8f4139418eabca4a62bf71f217b3dd4559ad5442e8d1bb9e58bbd66182d5f4703f63a1aff8f2d1942"}}, &(0x7f0000000b80)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "6b83e913be6d354703acd32db379c0f1f4fe9b1f50341e42c32347c7838e39a83fede661fffd008bd8fa402f399c91b22eaffe1223b5eefc74ee2ee56a20733e596e385d7b74d172a7eb38400679663211d0add7a97667ba04c123dd95a3d56ba2d9ea0a46b11112f2369f1f1803a8d82064fc724a477fa68c8e2aacd1779c89927f2f66750d49d24ec062f31ca04291c9fe9a9316fc440b97c1ca931564306e7f094d5dc3107bda89b9c0de3f395bfea72e26d077c48e276d89dd7cfbf087e1e48346a96e8de659fb9ccdb1b0461c89b5f0f1f06af9204150195555cd0bb65639e4793000fe477644a953b6864d799cbf887c15163ea74d11"}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000d00)={0x20, 0x3a, 0xa3, "598c92343b6432c5875c357a2271bf7f77296993581e4d4378434c73c10200e98ae4dc157a67929fca3ef7033cc5ae4e56941feff0bda1a0ced9a8cd9580b9fcf9cdc209e2cd3c484663f2b5bab8fe233b69f96d508c189f9918d1fd75126b3ee77bba5f5042a482e91139740b137f166d761751652842f698294c40431b9c6ca1339f83eb3adcc4d7af247d16299980f22760cbb24b447a08860d58c6dd810ad28223"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e00)={0x0, 0x8, 0x1}, &(0x7f0000000e40)={0x20, 0x81, 0x3, "7dd458"}, &(0x7f0000000e80)={0x20, 0x82, 0x2, "f94c"}, &(0x7f0000000ec0)={0x20, 0x83, 0x3, "e3ce1d"}, &(0x7f0000000f00)={0x20, 0x84, 0x4, "6f9e080b"}, &(0x7f0000000f40)={0x20, 0x85, 0x3, "facecc"}})
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
io_submit(r4, 0x1, &(0x7f0000001080)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x6, 0x8, r10, &(0x7f0000001000)="358633a83afe43b58a24c7d5acc654365861ef544a9263", 0x17, 0xf84}])
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001100)={'vxcan1\x00', <r11=>0x0})
ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000001140))
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000001180)={0x2, 'dummy0\x00', 0x1}, 0x18)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r12, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x88, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r13 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r13, &(0x7f0000002580)={&(0x7f0000001340), 0xc, &(0x7f0000002540)={&(0x7f0000001380)={0x11c0, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, {0xf, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x90, 0x1, "609f09deea1703d215154500648b519f9408574ab49153b998f9507bff891100873a116db1fe77607ba9b7336dd62336b72fee7a0f43500e12116e98a5eed239f814f6c35a4d9b3e6e405529c6323a45546938cb48de02e05b7db74c236f9b127c3d4c84b11afbf6accaea4d12b389dfb152096826591155d167f325000a86320b53ae4dc7aa20e7df6720b9"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "0a12da23d6dea8e814083ae2a8d28c66deb0070be3e478e783f0137c634c97b95ce6d3f4f062a326d95983c2b12dcae712c47ee2aeedc75628a9424829c18dce4a8889436f8c57e570db6c4a1c499d626e4f82c43a78e128ac4198ad430732c987e781ccb8f9f3a1617e041feb635fec183a0df00dc021fb942d64151530872f6cb073ea2037da683ca452b5ed"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "544e1c4fbabd3f46b6c1d66ababbad84e684ab08b6a7fae8f7fbea0c63f543b067a440635da3d2e1a89a8151e69414a6ea13982f18d7d5c40e8d5d246e1dcbd88b3252dd20f7f2e388374da8d4d80c53c5842d2afae7477e68d8ec627af792d9b9072f5fd2c24d7a950bc04b752069b4c9b32d7781d01d79a3a0b08963"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x11c0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r14 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r14, &(0x7f00000025c0)={0x1d, r11, 0x3, {0x0, 0x0, 0x2}, 0xfe}, 0x18)

1.518127887s ago: executing program 4 (id=2267):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787d", 0xd3}], 0x1}, 0x240009bd)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xee00}], {0x4, 0x5}, [], {0x10, 0x6}}, 0x2c, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

1.196383782s ago: executing program 4 (id=2271):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000001080))
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc)
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE')
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x1, 0x73b, &(0x7f0000000000)='8'})
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff)
ioctl$FS_IOC_GETVERSION(r2, 0x40015b0b, &(0x7f0000000000))
r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x31, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xdf1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x72, 0x88, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xad, 0x4, 0x6}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x3, 0x0, 0x2, 0xff, 0x7}, 0x82, &(0x7f0000000200)={0x5, 0xf, 0x82, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x1, 0xf000, 0x8, [0x3f, 0xc000, 0xff3f2e, 0xc030]}, @generic={0x39, 0x10, 0x1, "b5b502edf17c898c873cc497faad3e132c7ad15718c07f544c5ce348fb62a27156c8764364c8a2d5f3a3fe9733d5003c92a02e482470"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x7, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x7, 0xe, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0xb2, 0x2, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xf, 0x7, 0xffff}]}, 0x9, [{0x16, &(0x7f00000003c0)=@string={0x16, 0x3, "cb56bec3c599a2151c3d451644e9eeff32f3881b"}}, {0xaf, &(0x7f0000000400)=@string={0xaf, 0x3, "5b3a33fe61c3c246a896a1d6f6d4fcd905b5ac26a14698f537f2d7c8949eaeca68f5d253a57354eb7d43117db863ff4a5dc2174af858abaec9dea59a9d20bbb54f02041bd0aca6c526d5a985dafd47512042bba74a0eeed0d93727dc68e3fd7a1285f855949c856b4b11294cf5954dc935291187e085eb028879cf10c7a69810c15d3ff9bfbb704894c302aa3370ac9bcae3aa7151d374ba7e5576cecbda43bfa0346a463fad56f4898e6bed77"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2809}}, {0xdb, &(0x7f0000000500)=@string={0xdb, 0x3, "7a1cb806862d7f43c48e9acc71ad39a6460885534434d24b7c4ebb62dabfd71671dfe4a80e7e773f6871c12e4bd53fcbd8b2e2a625456871ae97ef26f47187f63f4e6fe13505a42769be09deb8a5fa8c2f0bdf93d98c3c85a101516d31500c5f75bfe00be122deb8513f3208ec99bb9dc7439116a98bd05b133c3713af586c2dae00f9adaa5ae3275cf2a02cba1d7ae121600902a795bbf8f7f7c91676b727d856f8c811dc30ad3d37305962e7395e6875909006ae1f5caf466cea1de4d7074151f9b63833ba19a435a144882823bcaf2a8538696c1fb4d1b3"}}, {0x40, &(0x7f0000000600)=@string={0x40, 0x3, "7243316f16b44321b75f365e9d18537031ad156b6e68bd69a2499d315c7f2089b7a223f552562b00c1b5ed52aa46b08cc59a7755adf1b84318cdae8be8fe"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44d}}, {0x8, &(0x7f0000000680)=@string={0x8, 0x3, "3f0c5bcdae20"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc49}}]})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
write$cgroup_int(r6, &(0x7f00000004c0)=0xffffffffffffff07, 0x12)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000f80)={'sit0\x00', &(0x7f0000000f40)={@local, @local, 0x20, 0x16}})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x300, 0xfffe, 0x101, 0x400}})
syz_usb_control_io(r5, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x40, 0x10, 0x27, {0x27, 0x9, "9459fc533acafb82a46c6d566da57a967cc7a1e93343c6106b3bdac3406f2ae91b1367fa87"}}, &(0x7f0000000840)={0x0, 0x3, 0x45, @string={0x45, 0x3, "1cb7c7adc8efa4cdb4fccbedeedc7af2c45c4d471421264f7a57b7716ff3853d782fe643ff0768e15353921e72cd8fce5331fc15d87aea1eff8e69e7d205aa163ce606"}}, &(0x7f00000008c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x5, 0x7}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x4, 0x4, "7fe0d3fa", "e545a590"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe8, 0x0, 0x2, 0xa3, 0x2, 0xc1, 0xa173}}}, &(0x7f0000000e00)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x5e, "3f77207115178e37c000ce3cde98c75007d40c5db9caa7739cd6bf866ced890ade3ceb464530b01103d9684a3e4633073ac71adf20dc854df42d6815118dbaf73d9d0047415afbf7100806eee8d601484b029dec93c857b05a221156608a"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b00)={0x20, 0x0, 0x8, {0x120, 0x1, [0xf0f0]}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "ddb7"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000c40)={0x40, 0x13, 0x6}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "029e"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000d40)={0x40, 0x1c, 0x1}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0xd7}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0x7}})

1.100361049s ago: executing program 7 (id=2272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x2, 0x1, 0x1, 0xd, 0xa, 0x64f}, 0x20)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x9, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ftruncate(r4, 0x7)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_clone(0x5102200, &(0x7f0000000400)="cbeb669013230202757b45dc22a20fecd0ddac7847bde62b74b4235ce9892cc0a312fb4b5dccb4496a6721b918fb03e32be02b083bcc9b2eca61af709d780751610d5e5730a804b2c815089ce0b88e84f7485b0a4abed66cacf723f3ec18dfd4b8697fb410992479047417bfd1ea8736aeb9f0aa131d837f763e58b03202fd3763f6e3b8a6846e97ac17e1d33b9bf088b066f6abde99c8f280b05e5dcdfc99e5e743a7ca9e7e81bf50d9348a4d49", 0xae, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580)="ace791721b2f73d81b0c440b9b59f63f3741abae7b49242fbacd2f29b6a80a0dc3b49bda")
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0)
syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="2e660f6563000f3566b96906000066b80000000066ba008000000f30b8fa000f00d00f01cf0f20e06635100000000f22e0e100ba2100ed3ecf0f72d7ed", 0x3d}], 0x1, 0x11, &(0x7f00000002c0)=[@cr4={0x1, 0x408}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.049173013s ago: executing program 7 (id=2273):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 8)

975.022447ms ago: executing program 6 (id=2274):
unshare(0x22020600)
r0 = socket$tipc(0x1e, 0x2, 0x0)
fremovexattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002700)={{{@in6=@empty, @in6=@remote, 0x4e22, 0xfffb, 0x4e21, 0x1, 0xa, 0x20, 0x0, 0x62}, {0x1, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xffb, 0x70}, {0x8, 0x3, 0xa, 0x2cc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x0, 0xf8, 0x6, 0x6, 0xaec3}}, 0xe8) (async)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) (async, rerun: 64)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x9803, 0xd5) (rerun: 64)
fcntl$setlease(r3, 0x400, 0x0) (async, rerun: 64)
close_range(0xffffffffffffffff, r3, 0x2) (async, rerun: 64)
fcntl$getflags(r2, 0x401)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000100)=0x84) (async)
shutdown(r2, 0x0)

860.451216ms ago: executing program 7 (id=2275):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xffffffff891e7e01)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xfffffff9}}, './file0\x00'})
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0x1)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0xf, 0x10000, 0x4, 0xe, 0x0, 0xb, 0x7, 0xa, 0x101, 0x5, 0x8, 0x2, 0x7fe, 0xfffffffe, 0x0, 0xfffffffe, 0x5, 0x6, 0xfffff801, 0x89, 0x8, 0x1ff, 0x0, 0xb, 0xe6b, 0x68a1588b, 0x8, 0x65c, 0x2, 0xfffff8e9]})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x5, 0x25f4f6ea, 0x1})

760.052862ms ago: executing program 7 (id=2276):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x3, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x7800, 0x0, 0x80000000, 0x285}})
r1 = syz_usb_connect(0x6, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140410080020c0001800800014000000000080006400000170005000500020000000500010006"], 0x70}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

239.671492ms ago: executing program 3 (id=2277):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000001ac0)={[{}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000008780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0xf0, 0x9, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x90}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xc, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfd, 0xc, 0xb1, {0x8, 0x25, 0x1, 0x2, 0xc, 0x4, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1c, 0x5, {0x8, 0x25, 0x1, 0x0, 0x3, 0xa0, 0x4}}}}}}}}]}}, 0x0)

99.858504ms ago: executing program 7 (id=2278):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00'})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0)

14.789702ms ago: executing program 6 (id=2279):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x1a1882, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0xf, 0x10000, 0x4, 0xe, 0x0, 0xb, 0x7, 0xa, 0x101, 0x5, 0x8, 0x2, 0x7fe, 0xfffffffe, 0x0, 0xfffffffe, 0x5, 0x6, 0xfffff801, 0x89, 0x8, 0x1ff, 0x0, 0xb, 0xe6b, 0x68a1589b, 0x8, 0x65c, 0x2, 0xfffff8e9]}) (fail_nth: 8)

0s ago: executing program 7 (id=2280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x79}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="58f3ff14deb6bb3c000000000000", @ANYRES16=r8, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$COMEDI_CMD(r9, 0x80506409, &(0x7f0000000400)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0})
pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r10 = syz_open_dev$vim2m(&(0x7f0000001680), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x33524742}})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)
r11 = fsopen(&(0x7f0000000300)='befs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0)
r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r12, &(0x7f0000000080)='7', 0x1)

kernel console output (not intermixed with test programs):

usb usb1-port1: unable to enumerate USB device
[  410.706503][T11601] erspan0: entered promiscuous mode
[  410.918145][T11601] CIFS: iocharset name too long
[  411.658800][   T29] kauditd_printk_skb: 12387 callbacks suppressed
[  411.658822][   T29] audit: type=1326 audit(1775158408.560:12412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.691388][   T29] audit: type=1326 audit(1775158408.560:12413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.691438][   T29] audit: type=1326 audit(1775158408.580:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.691481][   T29] audit: type=1326 audit(1775158408.580:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.691524][   T29] audit: type=1326 audit(1775158408.580:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.691570][   T29] audit: type=1326 audit(1775158408.580:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.691613][   T29] audit: type=1326 audit(1775158408.580:12418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff76a15d04e code=0x7ffc0000
[  411.737525][T11623] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  411.751069][   T29] audit: type=1326 audit(1775158408.650:12419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.865508][   T29] audit: type=1326 audit(1775158408.650:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.889313][   T29] audit: type=1326 audit(1775158408.760:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ff76a19c819 code=0x7ffc0000
[  411.917949][ T5908] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  412.067927][ T5908] usb 1-1: Using ep0 maxpacket: 16
[  412.074773][ T5908] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  412.086529][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  412.102422][ T5908] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  412.112687][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.120756][ T5908] usb 1-1: Product: syz
[  412.124913][ T5908] usb 1-1: Manufacturer: syz
[  412.130133][ T5908] usb 1-1: SerialNumber: syz
[  412.138117][ T5908] usb 1-1: config 0 descriptor??
[  412.149203][ T5908] appledisplay 1-1:0.0: Could not find int-in endpoint
[  412.157360][ T5908] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  412.198418][   T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  412.347606][T11615] syzkaller1: entered promiscuous mode
[  412.353163][T11615] syzkaller1: entered allmulticast mode
[  412.362126][   T10] usb 7-1: config 2 has an invalid interface number: 43 but max is 0
[  412.363715][ T5959] usb 1-1: USB disconnect, device number 17
[  412.383137][   T10] usb 7-1: config 2 has no interface number 0
[  412.396579][   T10] usb 7-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  412.407755][   T10] usb 7-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[  412.419930][   T10] usb 7-1: config 2 interface 43 has no altsetting 0
[  412.429150][   T10] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  412.438538][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.446578][   T10] usb 7-1: Product: syz
[  412.452157][   T10] usb 7-1: Manufacturer: syz
[  412.456819][   T10] usb 7-1: SerialNumber: syz
[  412.464883][T11625] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  412.472470][T11625] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  412.691981][T11625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.706534][T11625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.723962][   T10] ums-usbat 7-1:2.43: USB Mass Storage device detected
[  412.752299][   T10] ums-usbat 7-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  412.838207][   T10] ums-usbat 7-1:2.43: probe with driver ums-usbat failed with error -5
[  412.853323][   T10] usb 7-1: USB disconnect, device number 20
[  413.528070][ T5908] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  413.678045][ T5908] usb 1-1: Using ep0 maxpacket: 8
[  413.685018][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  413.700995][ T5908] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  413.710147][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.718251][ T5908] usb 1-1: Product: syz
[  413.722447][ T5908] usb 1-1: Manufacturer: syz
[  413.727049][ T5908] usb 1-1: SerialNumber: syz
[  413.734827][ T5908] usb 1-1: config 0 descriptor??
[  413.803751][ T5908] msi2500 1-1:0.0: Registered as swradio24
[  413.810294][ T5908] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  413.949504][   T10] usb 1-1: USB disconnect, device number 18
[  414.159176][ T5908] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  414.189396][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1762'.
[  414.268233][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1763'.
[  414.305165][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1763'.
[  414.323955][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.333937][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  414.347018][ T5908] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  414.356964][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.376333][ T5908] usb 4-1: config 0 descriptor??
[  414.396416][ T5908] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  414.688276][ T5959] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  414.837958][ T5959] usb 7-1: Using ep0 maxpacket: 16
[  414.844818][ T5959] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  414.855384][ T5959] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  414.871583][ T5959] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  414.880778][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.889036][ T5959] usb 7-1: Product: syz
[  414.893244][ T5959] usb 7-1: Manufacturer: syz
[  414.897964][ T5959] usb 7-1: SerialNumber: syz
[  414.905611][ T5959] usb 7-1: config 0 descriptor??
[  414.913387][ T5959] appledisplay 7-1:0.0: Could not find int-in endpoint
[  414.921040][ T5959] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  414.998972][T11669] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1768'.
[  415.114329][T11659] syzkaller1: entered promiscuous mode
[  415.119930][T11659] syzkaller1: entered allmulticast mode
[  415.128730][   T24] usb 7-1: USB disconnect, device number 21
[  415.550290][T11676] CIFS: VFS: UNC: missing share name
[  415.555798][T11676] CIFS: VFS: Malformed UNC in devname
[  416.933663][ T5908] usb 4-1: USB disconnect, device number 23
[  417.049749][T11702] netlink: 'syz.3.1780': attribute type 10 has an invalid length.
[  417.063456][T11702] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  417.237320][T11710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.317559][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'.
[  417.587609][T11723] FAULT_INJECTION: forcing a failure.
[  417.587609][T11723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.602487][T11723] CPU: 1 UID: 0 PID: 11723 Comm: syz.3.1788 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  417.602528][T11723] Tainted: [L]=SOFTLOCKUP
[  417.602536][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  417.602549][T11723] Call Trace:
[  417.602558][T11723]  <TASK>
[  417.602567][T11723]  dump_stack_lvl+0xe8/0x150
[  417.602602][T11723]  should_fail_ex+0x412/0x560
[  417.602636][T11723]  _copy_to_iter+0x1e4/0x17d0
[  417.602682][T11723]  ? __pfx__copy_to_iter+0x10/0x10
[  417.602710][T11723]  ? __pfx_woken_wake_function+0x10/0x10
[  417.602741][T11723]  ? ldsem_down_read+0x12/0x40
[  417.602783][T11723]  tty_read+0x2ee/0x6f0
[  417.602815][T11723]  ? __pfx_tty_read+0x10/0x10
[  417.602848][T11723]  ? bpf_lsm_file_permission+0x9/0x20
[  417.602869][T11723]  ? security_file_permission+0x75/0x260
[  417.602907][T11723]  vfs_read+0x582/0xa70
[  417.602949][T11723]  ? __pfx_vfs_read+0x10/0x10
[  417.602991][T11723]  ? __fget_files+0x2a/0x420
[  417.603027][T11723]  ksys_read+0x150/0x270
[  417.603051][T11723]  ? __pfx_ksys_read+0x10/0x10
[  417.603079][T11723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.603102][T11723]  do_syscall_64+0x15f/0xf80
[  417.603128][T11723]  ? trace_irq_disable+0x3b/0x140
[  417.603152][T11723]  ? clear_bhb_loop+0x40/0x90
[  417.603179][T11723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.603209][T11723] RIP: 0033:0x7f181a59c819
[  417.603229][T11723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.603246][T11723] RSP: 002b:00007f181b42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  417.603270][T11723] RAX: ffffffffffffffda RBX: 00007f181a816090 RCX: 00007f181a59c819
[  417.603284][T11723] RDX: 0000000000001627 RSI: 0000200000002f40 RDI: 0000000000000003
[  417.603297][T11723] RBP: 00007f181b42f090 R08: 0000000000000000 R09: 0000000000000000
[  417.603309][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.603322][T11723] R13: 00007f181a816128 R14: 00007f181a816090 R15: 00007ffcfc9b6bf8
[  417.603357][T11723]  </TASK>
[  418.094995][T11733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.237908][   T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  418.410486][   T24] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  418.432261][   T24] usb 7-1: config 1 has no interface number 0
[  418.453525][   T24] usb 7-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  418.483744][   T24] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  418.506350][   T24] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  418.526009][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.538955][   T24] usb 7-1: Product: syz
[  418.548387][   T24] usb 7-1: Manufacturer: syz
[  418.557916][   T24] usb 7-1: SerialNumber: syz
[  418.567936][ T5959] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  418.568712][T11746] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  418.581552][T11729] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  418.598043][T11729] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  418.628002][T11746] overlayfs: failed to set xattr on upper
[  418.637731][   T24] usb 7-1: Expected 3 endpoints, found: 2
[  418.642498][T11746] overlayfs: ...falling back to redirect_dir=nofollow.
[  418.671607][T11746] overlayfs: ...falling back to metacopy=off.
[  418.682987][T11746] overlayfs: ...falling back to index=off.
[  418.690335][T11746] overlayfs: ...falling back to uuid=null.
[  418.720299][ T5959] usb 1-1: device descriptor read/64, error -71
[  418.815656][T11754] binder_alloc: 11753: binder_alloc_buf, no vma
[  418.834574][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.854671][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.967995][ T5959] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  419.117959][ T5959] usb 1-1: device descriptor read/64, error -71
[  419.240316][ T5959] usb usb1-port1: attempt power cycle
[  419.544706][T11775] binder_alloc: 11774: binder_alloc_buf, no vma
[  419.593301][ T5959] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  419.633052][ T5959] usb 1-1: device descriptor read/8, error -71
[  419.890852][ T5959] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  419.918835][ T5959] usb 1-1: device descriptor read/8, error -71
[  419.997978][ T5908] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  420.028829][ T5959] usb usb1-port1: unable to enumerate USB device
[  420.182633][ T5908] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 253, using maximum allowed: 30
[  420.194265][ T5908] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  420.207540][ T5908] usb 4-1: config 1 interface 0 has no altsetting 0
[  420.217451][ T5908] usb 4-1: string descriptor 0 read error: -22
[  420.223929][ T5908] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40
[  420.233051][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.696632][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.704602][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.712565][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.721729][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.729676][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.736656][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.744623][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.751702][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.758747][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.765818][ T5908] waltop 0003:172F:0038.0026: unknown main item tag 0x0
[  420.810707][ T5908] waltop 0003:172F:0038.0026: hidraw0: USB HID vff.7f Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0
[  420.857580][ T5908] usb 4-1: USB disconnect, device number 24
[  421.013871][   T10] usb 7-1: USB disconnect, device number 22
[  421.406722][T11810] FAULT_INJECTION: forcing a failure.
[  421.406722][T11810] name failslab, interval 1, probability 0, space 0, times 0
[  421.420750][T11810] CPU: 1 UID: 0 PID: 11810 Comm: syz.6.1808 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  421.420781][T11810] Tainted: [L]=SOFTLOCKUP
[  421.420789][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  421.420801][T11810] Call Trace:
[  421.420810][T11810]  <TASK>
[  421.420818][T11810]  dump_stack_lvl+0xe8/0x150
[  421.420855][T11810]  should_fail_ex+0x412/0x560
[  421.420887][T11810]  should_failslab+0xa8/0x100
[  421.420910][T11810]  __kmalloc_cache_noprof+0x88/0x660
[  421.420945][T11810]  ? __request_region+0x9c/0x1a0
[  421.420967][T11810]  ? request_threaded_irq+0x1eb/0x3a0
[  421.420996][T11810]  ? __pfx_das16m1_interrupt+0x10/0x10
[  421.421024][T11810]  request_threaded_irq+0x1eb/0x3a0
[  421.421049][T11810]  ? __pfx_das16m1_interrupt+0x10/0x10
[  421.421076][T11810]  das16m1_attach+0x1b5/0xae0
[  421.421107][T11810]  comedi_device_attach+0x51f/0x720
[  421.421144][T11810]  comedi_unlocked_ioctl+0x8ef/0x1af0
[  421.421185][T11810]  ? kasan_quarantine_put+0xbb/0x1f0
[  421.421214][T11810]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  421.421256][T11810]  ? do_vfs_ioctl+0x1166/0x1530
[  421.421281][T11810]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  421.421315][T11810]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  421.421363][T11810]  ? __fget_files+0x2a/0x420
[  421.421390][T11810]  ? __fget_files+0x2a/0x420
[  421.421414][T11810]  ? __fget_files+0x3a0/0x420
[  421.421445][T11810]  ? __fget_files+0x2a/0x420
[  421.421473][T11810]  ? bpf_lsm_file_ioctl+0x9/0x20
[  421.421494][T11810]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  421.421521][T11810]  __se_sys_ioctl+0xfc/0x170
[  421.421542][T11810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.421565][T11810]  do_syscall_64+0x15f/0xf80
[  421.421590][T11810]  ? trace_irq_disable+0x3b/0x140
[  421.421614][T11810]  ? clear_bhb_loop+0x40/0x90
[  421.421640][T11810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.421660][T11810] RIP: 0033:0x7ff76a19c819
[  421.421680][T11810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  421.421697][T11810] RSP: 002b:00007ff76b08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  421.421720][T11810] RAX: ffffffffffffffda RBX: 00007ff76a415fa0 RCX: 00007ff76a19c819
[  421.421735][T11810] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  421.421748][T11810] RBP: 00007ff76b08c090 R08: 0000000000000000 R09: 0000000000000000
[  421.421761][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.421773][T11810] R13: 00007ff76a416038 R14: 00007ff76a415fa0 R15: 00007ffff1624d58
[  421.421807][T11810]  </TASK>
[  421.810266][T11819] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1812'.
[  421.915698][T11826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1815'.
[  421.925919][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1815'.
[  421.939847][T11826] syzkaller1: left promiscuous mode
[  421.945182][T11826] syzkaller1: left allmulticast mode
[  421.990677][ T5908] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  422.116042][T11838] netlink: 'syz.3.1819': attribute type 1 has an invalid length.
[  422.124244][T11838] netlink: 476 bytes leftover after parsing attributes in process `syz.3.1819'.
[  422.135118][T11838] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1819'.
[  422.159999][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.182914][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.195805][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.209015][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  422.218367][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.222006][ T5908] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  422.241265][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.253898][ T5908] usb 1-1: config 0 descriptor??
[  422.417901][ T5870] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  422.571958][ T5870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  422.587890][ T5870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  422.610603][ T5870] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  422.620214][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  422.628407][ T5870] usb 7-1: SerialNumber: syz
[  422.644194][ T5870] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  422.656033][ T5870] usb-storage 7-1:1.0: USB Mass Storage device detected
[  422.667540][ T5908] usbhid 1-1:0.0: can't add hid device: -71
[  422.678525][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  422.687201][ T5870] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  422.690273][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'.
[  422.707129][ T5870] scsi host1: usb-storage 7-1:1.0
[  422.717335][ T5908] usb 1-1: USB disconnect, device number 23
[  422.801609][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'.
[  422.842842][   T10] usb 7-1: USB disconnect, device number 23
[  423.324843][T11872] netlink: 'syz.3.1831': attribute type 16 has an invalid length.
[  423.339613][T11872] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1831'.
[  423.475667][T11878] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1832'.
[  423.498098][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1832'.
[  423.616364][T11886] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001
[  423.648267][   T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  423.820429][   T10] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  423.841359][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  423.860691][   T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  423.870716][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.880166][   T10] usb 4-1: Product: syz
[  423.884404][   T10] usb 4-1: Manufacturer: syz
[  423.889742][   T10] usb 4-1: SerialNumber: syz
[  424.037916][   T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  424.137340][   T10] rtl8150 4-1:1.0: couldn't find required endpoints
[  424.144752][   T10] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  424.163552][   T10] usb 4-1: USB disconnect, device number 25
[  424.222556][   T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  424.252702][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.266712][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  424.277005][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  424.293902][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  424.303725][   T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  424.323428][   T24] usb 1-1: Manufacturer: syz
[  424.340732][   T24] usb 1-1: config 0 descriptor??
[  424.563543][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.582086][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.796106][   T24] usbhid 1-1:0.0: can't add hid device: -71
[  424.803004][   T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  424.813927][   T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  424.850854][   T24] usb 1-1: USB disconnect, device number 24
[  424.963662][T11928] 8021q: VLANs not supported on syzkaller1
[  424.995723][   T10] usb 7-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice= 0.40
[  425.005851][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.015427][   T10] usb 7-1: Product: ь
[  425.020245][   T10] usb 7-1: Manufacturer: 讁讣鞾딱쐦䵀蘭뢸氉示虁맘㇐緼డ獭鵶醫堓듻瞅㧻涘㴛᪆矴
[  425.033491][   T10] usb 7-1: SerialNumber: 횜鉅墘Ⱞ扨䖚톔૭ꃀ愊獚攄蛍眸돧飳㍍腹钒㾝프㼠桱荘䅮簢
[  425.073637][    T9] libceph: connect (1)[c::]:6789 error -22
[  425.080527][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  425.090541][    T9] libceph: connect (1)[c::]:6789 error -22
[  425.096585][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  425.272204][   T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  425.279732][   T10] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  425.286028][   T10] usb 7-1: 2:1 : invalid channels 0
[  425.347056][   T10] usb 7-1: USB disconnect, device number 24
[  425.362429][ T5908] libceph: connect (1)[c::]:6789 error -22
[  425.381574][ T5908] libceph: mon0 (1)[c::]:6789 connect error
[  425.460993][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  425.570253][T11946] FAULT_INJECTION: forcing a failure.
[  425.570253][T11946] name failslab, interval 1, probability 0, space 0, times 0
[  425.585583][T11946] CPU: 1 UID: 0 PID: 11946 Comm: syz.0.1859 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.585606][T11946] Tainted: [L]=SOFTLOCKUP
[  425.585610][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  425.585618][T11946] Call Trace:
[  425.585624][T11946]  <TASK>
[  425.585629][T11946]  dump_stack_lvl+0xe8/0x150
[  425.585653][T11946]  should_fail_ex+0x412/0x560
[  425.585673][T11946]  should_failslab+0xa8/0x100
[  425.585686][T11946]  ? skb_clone+0x212/0x3a0
[  425.585701][T11946]  kmem_cache_alloc_noprof+0x87/0x650
[  425.585718][T11946]  ? __netlink_lookup+0xc6/0x8b0
[  425.585734][T11946]  skb_clone+0x212/0x3a0
[  425.585751][T11946]  __netlink_deliver_tap+0x404/0x850
[  425.585770][T11946]  ? netlink_deliver_tap+0x2e/0x1b0
[  425.585783][T11946]  netlink_deliver_tap+0x19c/0x1b0
[  425.585796][T11946]  netlink_unicast+0x7e3/0x9b0
[  425.585818][T11946]  ? __pfx_netlink_unicast+0x10/0x10
[  425.585836][T11946]  ? netlink_sendmsg+0x650/0xb40
[  425.585848][T11946]  ? skb_put+0x11b/0x210
[  425.585863][T11946]  netlink_sendmsg+0x813/0xb40
[  425.585887][T11946]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.585911][T11946]  ? aa_sock_msg_perm+0xf1/0x1b0
[  425.585933][T11946]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  425.585966][T11946]  ____sys_sendmsg+0x972/0x9f0
[  425.585982][T11946]  ? __might_fault+0xaf/0x130
[  425.586002][T11946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.586022][T11946]  ? import_iovec+0x73/0xa0
[  425.586042][T11946]  ___sys_sendmsg+0x2a5/0x360
[  425.586056][T11946]  ? __lock_acquire+0x6b5/0x2cf0
[  425.586075][T11946]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.586110][T11946]  ? __fget_files+0x2a/0x420
[  425.586125][T11946]  ? __fget_files+0x3a0/0x420
[  425.586147][T11946]  __x64_sys_sendmsg+0x1bd/0x2a0
[  425.586163][T11946]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.586183][T11946]  ? __pfx_ksys_write+0x10/0x10
[  425.586206][T11946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.586219][T11946]  do_syscall_64+0x15f/0xf80
[  425.586234][T11946]  ? trace_irq_disable+0x3b/0x140
[  425.586248][T11946]  ? clear_bhb_loop+0x40/0x90
[  425.586262][T11946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.586274][T11946] RIP: 0033:0x7fb44f79c819
[  425.586287][T11946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.586297][T11946] RSP: 002b:00007fb4505f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.586311][T11946] RAX: ffffffffffffffda RBX: 00007fb44fa15fa0 RCX: 00007fb44f79c819
[  425.586320][T11946] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003
[  425.586328][T11946] RBP: 00007fb4505f0090 R08: 0000000000000000 R09: 0000000000000000
[  425.586335][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.586342][T11946] R13: 00007fb44fa16038 R14: 00007fb44fa15fa0 R15: 00007ffd03c46928
[  425.586360][T11946]  </TASK>
[  425.930000][   T10] libceph: connect (1)[c::]:6789 error -22
[  425.940063][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  426.031793][T11931] ceph: No mds server is up or the cluster is laggy
[  426.184146][T11954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer.
[  427.008876][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  427.248217][ T5908] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  427.408017][ T5908] usb 7-1: Using ep0 maxpacket: 8
[  427.421787][ T5908] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  427.424916][T11995] binder: BINDER_SET_CONTEXT_MGR already set
[  427.433378][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.445721][T11995] binder: 11994:11995 ioctl 4018620d 200000000300 returned -16
[  427.446226][ T5908] usb 7-1: Product: syz
[  427.458804][ T5908] usb 7-1: Manufacturer: syz
[  427.464467][ T5908] usb 7-1: SerialNumber: syz
[  427.473407][ T5908] usb 7-1: config 0 descriptor??
[  427.492853][ T5908] gspca_main: se401-2.14.0 probing 047d:5003
[  427.507971][ T5870] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  427.586411][T11999] binder: 11998:11999 ioctl c0306201 0 returned -14
[  427.659489][ T5870] usb 1-1: device descriptor read/64, error -71
[  427.716056][T12004] __nla_validate_parse: 4 callbacks suppressed
[  427.716070][T12004] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1879'.
[  427.824967][T12009] netlink: 'syz.4.1881': attribute type 10 has an invalid length.
[  427.851622][T12009] syz_tun: entered promiscuous mode
[  427.874812][T12009] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  427.907947][ T5870] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  428.057995][ T5870] usb 1-1: device descriptor read/64, error -71
[  428.100176][T12024] overlayfs: failed to resolve './cgroup.cpu/cgroup.procs/file0': -20
[  428.113638][T12024] overlay: Unknown parameter 'obj_user'
[  428.180745][ T5870] usb usb1-port1: attempt power cycle
[  428.398487][    T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  428.502417][ T5908] gspca_se401: read req failed req 0x06 error -19
[  428.540023][ T5870] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  428.550964][ T5908] usb 7-1: USB disconnect, device number 25
[  428.567347][    T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  428.579187][ T5870] usb 1-1: device descriptor read/8, error -71
[  428.591909][    T9] usb 4-1: config 0 has no interface number 0
[  428.606677][    T9] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  428.624763][    T9] usb 4-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  428.638942][    T9] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  428.648408][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.670065][    T9] usb 4-1: config 0 descriptor??
[  428.676353][T12028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  428.847958][ T5870] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  428.879554][ T5870] usb 1-1: device descriptor read/8, error -71
[  429.008600][ T5870] usb usb1-port1: unable to enumerate USB device
[  429.021116][    T9] usb 4-1: string descriptor 0 read error: -71
[  429.041045][    T9] usbhid 4-1:0.128: can't add hid device: -71
[  429.047369][    T9] usbhid 4-1:0.128: probe with driver usbhid failed with error -71
[  429.062031][    T9] usb 4-1: USB disconnect, device number 26
[  429.091419][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout
[  429.209020][ T5908] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  429.258229][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout
[  429.338026][ T5908] usb 7-1: device descriptor read/64, error -71
[  429.581248][ T5908] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  429.727946][ T5908] usb 7-1: device descriptor read/64, error -71
[  429.848036][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  429.856110][ T5908] usb usb7-port1: attempt power cycle
[  430.010189][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  430.021104][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.031348][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  430.042575][    T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  430.055446][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.063563][    T9] usb 4-1: Product: syz
[  430.067773][    T9] usb 4-1: Manufacturer: syz
[  430.072479][    T9] usb 4-1: SerialNumber: syz
[  430.086016][    T9] usb 4-1: 0:1 : does not exist
[  430.090973][    T9] usb 4-1: unit 1 not found!
[  430.207973][ T5908] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  430.239746][ T5908] usb 7-1: device descriptor read/8, error -71
[  430.358651][    T9] usb 4-1: USB disconnect, device number 27
[  430.401143][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  430.485669][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1902'.
[  430.494878][ T5908] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  430.529919][ T5908] usb 7-1: device descriptor read/8, error -71
[  430.668457][ T5908] usb usb7-port1: unable to enumerate USB device
[  430.688084][   T10] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[  430.737677][T12075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.848437][   T10] usb 1-1: Invalid ep0 maxpacket: 32
[  430.987959][   T10] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[  431.158586][   T10] usb 1-1: Invalid ep0 maxpacket: 32
[  431.176162][   T10] usb usb1-port1: attempt power cycle
[  431.328272][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[  431.427988][ T5908] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  431.548433][   T10] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[  431.569725][ T5908] usb 4-1: device descriptor read/64, error -71
[  431.578591][   T10] usb 1-1: Invalid ep0 maxpacket: 32
[  431.618883][T12101] netlink: 'syz.4.1915': attribute type 27 has an invalid length.
[  431.707914][   T10] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[  431.730064][   T10] usb 1-1: Invalid ep0 maxpacket: 32
[  431.735745][   T10] usb usb1-port1: unable to enumerate USB device
[  431.817927][ T5908] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  431.958018][ T5908] usb 4-1: device descriptor read/64, error -71
[  432.068693][ T5908] usb usb4-port1: attempt power cycle
[  432.101831][T12111] FAULT_INJECTION: forcing a failure.
[  432.101831][T12111] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  432.134553][T12111] CPU: 1 UID: 0 PID: 12111 Comm: syz.6.1918 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  432.134577][T12111] Tainted: [L]=SOFTLOCKUP
[  432.134582][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  432.134590][T12111] Call Trace:
[  432.134595][T12111]  <TASK>
[  432.134601][T12111]  dump_stack_lvl+0xe8/0x150
[  432.134624][T12111]  should_fail_ex+0x412/0x560
[  432.134644][T12111]  prepare_alloc_pages+0x22a/0x650
[  432.134662][T12111]  __alloc_frozen_pages_noprof+0x12f/0x380
[  432.134678][T12111]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  432.134693][T12111]  ? __pfx_policy_nodemask+0x10/0x10
[  432.134708][T12111]  ? __lock_acquire+0x6b5/0x2cf0
[  432.134727][T12111]  alloc_pages_mpol+0x235/0x490
[  432.134744][T12111]  folio_alloc_mpol_noprof+0x39/0x160
[  432.134758][T12111]  vma_alloc_folio_noprof+0xe1/0x1e0
[  432.134773][T12111]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  432.134786][T12111]  ? __pte_offset_map+0x29/0x240
[  432.134803][T12111]  ? __pte_offset_map+0x29/0x240
[  432.134820][T12111]  do_pte_missing+0x159d/0x33f0
[  432.134839][T12111]  ? handle_mm_fault+0xee/0x3170
[  432.134857][T12111]  handle_mm_fault+0x1bd7/0x3170
[  432.134882][T12111]  ? handle_mm_fault+0xee/0x3170
[  432.134901][T12111]  ? __pfx_handle_mm_fault+0x10/0x10
[  432.134916][T12111]  ? lock_vma_under_rcu+0x45a/0x500
[  432.134932][T12111]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  432.134963][T12111]  do_user_addr_fault+0xa73/0x1340
[  432.134984][T12111]  ? rcu_is_watching+0x15/0xb0
[  432.135002][T12111]  ? trace_page_fault_user+0x84/0x1e0
[  432.135020][T12111]  exc_page_fault+0x6a/0xc0
[  432.135036][T12111]  asm_exc_page_fault+0x26/0x30
[  432.135047][T12111] RIP: 0033:0x7ff76a05adaa
[  432.135061][T12111] Code: 48 83 c4 08 5b 5d e9 c5 fa ff ff 0f 1f 44 00 00 41 57 45 31 ff 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 38 1b 00 00 <48> 89 bc 24 a8 00 00 00 4c 8d ac 24 20 07 00 00 48 89 b4 24 a0 00
[  432.135071][T12111] RSP: 002b:00007ff76b0694b0 EFLAGS: 00010202
[  432.135084][T12111] RAX: 00007ff76a05ad90 RBX: 00007ff76a416090 RCX: 0000200000000100
[  432.135092][T12111] RDX: 0000200000003000 RSI: 0000000000000007 RDI: 0000000000000004
[  432.135101][T12111] RBP: 00007ff76b06b090 R08: 0000000000000001 R09: 0000000000000051
[  432.135109][T12111] R10: 0000000000000004 R11: 0000200000003000 R12: 00000000fec00000
[  432.135116][T12111] R13: 00007ff76a416128 R14: 00007ff76a416090 R15: 0000000000000000
[  432.135135][T12111]  </TASK>
[  432.135300][T12111] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  432.440925][ T5908] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  432.470253][ T5908] usb 4-1: device descriptor read/8, error -71
[  432.638277][ T5858] Bluetooth: hci4: unexpected event for opcode 0x202f
[  432.652703][T12116] cgroup: none used incorrectly
[  432.663205][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  432.728021][ T5908] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  432.758637][ T5908] usb 4-1: device descriptor read/8, error -71
[  432.869494][ T5908] usb usb4-port1: unable to enumerate USB device
[  433.046008][T12129] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1925'.
[  433.465513][ T5858] Bluetooth: hci1: unexpected event for opcode 0x202f
[  433.493266][T12142] cgroup: none used incorrectly
[  433.514553][ T5858] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  434.389644][ T5858] Bluetooth: hci4: unexpected event for opcode 0x202f
[  434.404123][T12164] cgroup: none used incorrectly
[  434.412479][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  434.700777][ T3488] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  435.737974][ T5959] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  435.887933][ T5959] usb 4-1: device descriptor read/64, error -71
[  436.131713][ T5959] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  436.272242][ T5959] usb 4-1: device descriptor read/64, error -71
[  436.411146][ T5959] usb usb4-port1: attempt power cycle
[  436.763193][ T5959] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  436.788814][ T5959] usb 4-1: device descriptor read/8, error -71
[  437.038302][ T5959] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  437.090038][ T5959] usb 4-1: device descriptor read/8, error -71
[  437.175277][ T5870] kernel write not supported for file /dsp (pid: 5870 comm: kworker/1:3)
[  437.201402][T12181] dvmrp1: entered allmulticast mode
[  437.213987][ T5959] usb usb4-port1: unable to enumerate USB device
[  437.293959][ T5858] Bluetooth: hci4: unexpected event for opcode 0x202f
[  437.310033][T12187] cgroup: none used incorrectly
[  437.318446][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  437.367969][   T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  437.429627][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1951'.
[  437.456811][T12197] fuse: Bad value for 'user_id'
[  437.465464][T12197] fuse: Bad value for 'user_id'
[  437.551423][   T10] usb 1-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice= 0.40
[  437.561557][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.587858][   T10] usb 1-1: Product: syz
[  437.592161][   T10] usb 1-1: SerialNumber: syz
[  437.630281][T12206] Invalid ELF header len 16
[  437.826101][   T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  437.833361][   T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  437.839772][   T10] usb 1-1: 2:1 : invalid channels 0
[  437.872438][   T10] usb 1-1: USB disconnect, device number 33
[  437.915573][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  438.207124][ T5858] Bluetooth: hci4: unexpected event for opcode 0x202f
[  438.210714][T12210] cgroup: none used incorrectly
[  438.222614][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  438.314557][T12215] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1959'.
[  438.632708][T12220] loop8: detected capacity change from 0 to 7
[  438.646919][T12220] Dev loop8: unable to read RDB block 7
[  438.652779][T12220]  loop8: AHDI p1 p2
[  438.656762][T12220] loop8: partition table partially beyond EOD, truncated
[  438.665052][T12220] loop8: p1 start 1702000233 is beyond EOD, truncated
[  438.708051][ T5959] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  438.931701][   T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  439.097899][   T10] usb 4-1: Using ep0 maxpacket: 16
[  439.115405][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  439.158850][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  439.161376][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  439.185154][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  439.197257][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  439.201129][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  439.216847][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  439.226408][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  439.228189][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.281318][   T10] usb 4-1: Product: syz
[  439.293417][   T10] usb 4-1: Manufacturer: syz
[  439.306441][ T5848] Bluetooth: hci1: unexpected event for opcode 0x202f
[  439.307741][   T10] usb 4-1: SerialNumber: syz
[  439.328633][T12234] cgroup: none used incorrectly
[  439.342805][ T5848] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  439.352725][   T10] usb 4-1: config 0 descriptor??
[  439.385945][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  439.418799][   T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  439.668897][T12241] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1968'.
[  439.681651][T12241] afs: Unknown parameter 'audit'
[  439.703177][ T7885] bond0: (slave syz_tun): Releasing backup interface
[  439.788212][T12231] chnl_net:caif_netlink_parms(): no params data found
[  439.812995][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  439.820831][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  439.838695][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  439.846202][   T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  439.855894][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.866839][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.900289][   T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  439.921797][   T10] em28xx 4-1:0.0: No AC97 audio processor
[  439.942009][T12231] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.949568][T12231] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.957563][T12231] bridge_slave_0: entered allmulticast mode
[  439.965186][   T10] usb 4-1: USB disconnect, device number 36
[  439.968532][T12231] bridge_slave_0: entered promiscuous mode
[  439.983625][T12231] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.991169][T12231] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.995163][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  439.998708][T12231] bridge_slave_1: entered allmulticast mode
[  440.000710][T12231] bridge_slave_1: entered promiscuous mode
[  440.062469][   T10] em28xx 4-1:0.0: Freeing device
[  440.066283][T12231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.096685][T12231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.161253][T12231] team0: Port device team_slave_0 added
[  440.173380][T12231] team0: Port device team_slave_1 added
[  440.208466][T12231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.215487][T12231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.241823][T12231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.255271][T12231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.262644][T12231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.288830][T12231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.351170][T12231] hsr_slave_0: entered promiscuous mode
[  440.357536][T12231] hsr_slave_1: entered promiscuous mode
[  440.364277][T12231] debugfs: 'hsr0' already exists in 'hsr'
[  440.370082][T12231] Cannot create hsr debugfs directory
[  440.539873][T12259] netlink: 'syz.0.1972': attribute type 2 has an invalid length.
[  440.696799][T12231] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.755069][T12265] cgroup: none used incorrectly
[  440.777961][ T5959] usb 4-1: new low-speed USB device number 37 using dummy_hcd
[  440.923176][T12231] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.948098][ T5959] usb 4-1: Invalid ep0 maxpacket: 64
[  441.088378][ T5959] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  441.101249][T12231] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.119888][T12271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  441.289398][ T5959] usb 4-1: Invalid ep0 maxpacket: 64
[  441.298137][ T5959] usb usb4-port1: attempt power cycle
[  441.311985][T12231] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.328033][ T5848] Bluetooth: hci2: command tx timeout
[  441.635238][T12231] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  441.647931][ T5959] usb 4-1: new low-speed USB device number 39 using dummy_hcd
[  441.651151][T12231] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  441.670025][T12231] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  441.682071][T12231] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  441.688654][ T5959] usb 4-1: Invalid ep0 maxpacket: 64
[  441.817917][ T5959] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[  441.845070][T12231] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.859180][ T5959] usb 4-1: Invalid ep0 maxpacket: 64
[  441.877642][T12231] 8021q: adding VLAN 0 to HW filter on device team0
[  441.883236][ T5959] usb usb4-port1: unable to enumerate USB device
[  441.897467][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.904729][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.933623][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.940963][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.952627][T12282] Scaler: =================  START STATUS  =================
[  441.961902][T12282] Scaler: ==================  END STATUS  ==================
[  442.058900][T12263] kexec: Could not allocate control_code_buffer
[  442.272142][T12231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.593023][T12231] veth0_vlan: entered promiscuous mode
[  442.609593][T12231] veth1_vlan: entered promiscuous mode
[  442.663355][T12231] veth0_macvtap: entered promiscuous mode
[  442.673565][T12231] veth1_macvtap: entered promiscuous mode
[  442.691136][T12231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.709569][T12231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.724516][ T3499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.734221][ T3499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.745497][ T3499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.757746][ T3499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.918514][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.937583][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.969202][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.977277][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.053839][T12304] netlink: 'syz.4.1966': attribute type 1 has an invalid length.
[  443.061764][T12304] netlink: 'syz.4.1966': attribute type 1 has an invalid length.
[  443.070346][T12304] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.1966'.
[  443.084125][T12304] IPVS: set_ctl: invalid protocol: 44 172.20.20.48:20000
[  443.092502][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  443.092520][   T29] audit: type=1326 audit(2000000004.760:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.4.1966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9f9c819 code=0x0
[  443.148006][ T5952] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[  443.299403][ T5952] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  443.310611][ T5952] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.321782][ T5952] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  443.331333][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  443.340159][ T5952] usb 7-1: Product: syz
[  443.344906][ T5952] usb 7-1: Manufacturer: syz
[  443.349659][ T5952] usb 7-1: SerialNumber: syz
[  443.356722][ T5952] usb 7-1: config 0 descriptor??
[  443.365973][ T5952] usb 7-1: selecting invalid altsetting 0
[  443.408057][ T5848] Bluetooth: hci2: command tx timeout
[  443.569162][ T5952] usb 7-1: USB disconnect, device number 30
[  443.667027][ T5848] Bluetooth: hci3: unexpected event for opcode 0x202f
[  443.677034][T12309] cgroup: none used incorrectly
[  443.688805][ T5848] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  444.027964][ T5938] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  444.189495][ T5938] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  444.200431][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.213323][ T5938] usb 4-1: config 0 descriptor??
[  444.232056][ T5938] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  444.444568][ T5938] gp8psk: usb in 128 operation failed.
[  444.473643][T12331] cgroup: none used incorrectly
[  444.658875][T12339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1994'.
[  444.671830][ T5938] gp8psk: FW Version = 22.179.98 (0x16b362)  Build 2168/28/201
[  444.778902][ T5908] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  444.872442][ T5938] gp8psk: FPGA Version = 25
[  444.908075][ T5908] usb 7-1: device descriptor read/64, error -71
[  445.081057][T12314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.090602][T12314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.105618][T12314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.115991][T12313] tipc: Disabling bearer <eth:syzkaller0>
[  445.149759][ T5938] gp8psk: usb in 138 operation failed.
[  445.159969][ T5908] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  445.167670][ T5938] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  445.181053][ T5938] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  445.193466][ T5938] usb 4-1: USB disconnect, device number 41
[  445.319303][ T5908] usb 7-1: device descriptor read/64, error -71
[  445.428296][ T5908] usb usb7-port1: attempt power cycle
[  445.768102][ T5908] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  445.803290][ T5908] usb 7-1: device descriptor read/8, error -71
[  446.037892][ T5938] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  446.058649][ T5908] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  446.078919][ T5908] usb 7-1: device descriptor read/8, error -71
[  446.117897][ T5870] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  446.188079][ T5938] usb 4-1: Using ep0 maxpacket: 32
[  446.193534][ T5908] usb usb7-port1: unable to enumerate USB device
[  446.202303][ T5938] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  446.210924][ T5938] usb 4-1: config 0 has no interface number 0
[  446.217511][ T5938] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  446.230278][ T5938] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  446.239406][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.247393][ T5938] usb 4-1: Product: syz
[  446.251666][ T5938] usb 4-1: Manufacturer: syz
[  446.256299][ T5938] usb 4-1: SerialNumber: syz
[  446.263224][ T5938] usb 4-1: config 0 descriptor??
[  446.270365][T12350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  446.476084][ T5870] usb 5-1: unable to read config index 0 descriptor/start: -71
[  446.488592][ T5870] usb 5-1: can't read configurations, error -71
[  446.501022][T12350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  446.528338][ T5848] Bluetooth: hci2: command tx timeout
[  446.711763][ T5938] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  446.722234][ T5938] asix 4-1:0.188: probe with driver asix failed with error -61
[  447.111507][T12365] binder: 12363:12365 ioctl 80489439 200000000200 returned -22
[  447.920103][ T5870] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  447.976577][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0002
[  448.077992][ T5870] usb 7-1: Using ep0 maxpacket: 8
[  448.084792][ T5870] usb 7-1: config 1 interface 0 has no altsetting 0
[  448.093560][ T5870] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40
[  448.102749][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.112341][ T5870] usb 7-1: Product: syz
[  448.116638][ T5870] usb 7-1: Manufacturer: syz
[  448.121348][ T5870] usb 7-1: SerialNumber: syz
[  448.338951][T12370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.351189][T12370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.360933][T12370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.371544][T12370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.383113][T12370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.393965][T12380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.394230][T12370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.405511][T12380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.447986][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input40
[  448.472587][ T5201] bcm5974 7-1:1.0: could not read from device
[  448.493080][ T5201] bcm5974 7-1:1.0: could not read from device
[  448.502864][ T5870] usb 7-1: USB disconnect, device number 35
[  448.514515][ T5201] bcm5974 7-1:1.0: could not read from device
[  448.734846][ T5938] usb 4-1: USB disconnect, device number 42
[  448.792551][T12387] netlink: 'syz.3.2007': attribute type 21 has an invalid length.
[  448.800597][T12387] netlink: 'syz.3.2007': attribute type 1 has an invalid length.
[  448.857928][ T5870] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  449.019661][ T5870] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  449.050653][ T5870] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  449.064260][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.072962][ T5870] usb 7-1: Product: syz
[  449.077188][ T5870] usb 7-1: Manufacturer: syz
[  449.088014][ T5870] usb 7-1: SerialNumber: syz
[  449.115170][ T5870] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  449.232660][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'.
[  449.527583][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.545421][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.554518][ T5870] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  449.578331][ T5870] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  449.588963][ T5870] usb 7-1: media controller created
[  449.605914][T12408] syzkaller1: entered promiscuous mode
[  449.612043][T12408] syzkaller1: entered allmulticast mode
[  449.625124][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  449.785938][ T5870] usb 7-1: USB disconnect, device number 36
[  449.820578][T12416] netlink: 'syz.3.2017': attribute type 83 has an invalid length.
[  451.397965][ T5938] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  451.537912][ T5908] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  451.558561][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  451.565748][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  451.573621][ T5938] usb 7-1: too many configurations: 23, using maximum allowed: 8
[  451.582889][ T5938] usb 7-1: unable to read config index 0 descriptor/start: -61
[  451.590593][ T5938] usb 7-1: can't read configurations, error -61
[  451.687927][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  451.694714][ T5908] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  451.703258][ T5908] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  451.711974][ T5908] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  451.721090][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  451.731672][ T5908] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  451.742035][ T5938] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  451.749813][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  451.763111][ T5908] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  451.772917][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.784615][ T5908] usb 5-1: config 0 descriptor??
[  451.917962][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  451.925711][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  451.934422][ T5938] usb 7-1: too many configurations: 23, using maximum allowed: 8
[  451.944304][ T5938] usb 7-1: unable to read config index 0 descriptor/start: -61
[  451.952577][ T5938] usb 7-1: can't read configurations, error -61
[  451.959391][ T5938] usb usb7-port1: attempt power cycle
[  452.002662][ T5908] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  452.025825][ T5908] usb 5-1: USB disconnect, device number 30
[  452.035297][ T5908] usblp0: removed
[  452.211404][ T5848] Bluetooth: hci0: command 0x2016 tx timeout
[  452.297942][ T5938] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  452.318868][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  452.325963][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  452.334002][ T5938] usb 7-1: too many configurations: 23, using maximum allowed: 8
[  452.343988][ T5938] usb 7-1: unable to read config index 0 descriptor/start: -61
[  452.351718][ T5938] usb 7-1: can't read configurations, error -61
[  452.448063][ T5908] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  452.488055][ T5938] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  452.509803][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  452.516881][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  452.525255][ T5938] usb 7-1: too many configurations: 23, using maximum allowed: 8
[  452.535140][ T5938] usb 7-1: unable to read config index 0 descriptor/start: -61
[  452.542820][ T5938] usb 7-1: can't read configurations, error -61
[  452.550343][ T5938] usb usb7-port1: unable to enumerate USB device
[  452.599126][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  452.606862][ T5908] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  452.615710][ T5908] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  452.624571][ T5908] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  452.633856][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  452.643665][ T5908] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  452.654174][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  452.668214][ T5908] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  452.677301][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.690489][ T5908] usb 5-1: config 0 descriptor??
[  452.807013][T12416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  452.904561][ T5908] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  453.143458][ T5870] usb 5-1: USB disconnect, device number 31
[  453.160014][ T5870] usblp0: removed
[  453.178117][ T5908] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  453.328032][ T5908] usb 4-1: Using ep0 maxpacket: 32
[  453.334722][ T5908] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  453.342999][ T5908] usb 4-1: config 0 has no interface number 0
[  453.349198][ T5908] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  453.362303][ T5908] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  453.372494][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.381307][ T5908] usb 4-1: Product: syz
[  453.385527][ T5908] usb 4-1: Manufacturer: syz
[  453.390291][ T5908] usb 4-1: SerialNumber: syz
[  453.397178][ T5908] usb 4-1: config 0 descriptor??
[  453.403029][T12435] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  453.613250][T12435] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  453.957982][ T5938] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  454.111600][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short
[  454.124557][ T5938] usb 5-1: not running at top speed; connect to a high speed hub
[  454.141225][ T5938] usb 5-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40
[  454.153757][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.162913][ T5938] usb 5-1: Product: syz
[  454.167374][ T5938] usb 5-1: Manufacturer: syz
[  454.172404][ T5938] usb 5-1: SerialNumber: syz
[  454.211904][ T5848] Bluetooth: hci0: unexpected event for opcode 0x202f
[  454.223816][T12439] cgroup: none used incorrectly
[  454.411537][ T5952] hid_parser_main: 4006 callbacks suppressed
[  454.411563][ T5952] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  454.421049][T12445] binder: 12443:12445 ioctl 80489439 200000000200 returned -22
[  454.433746][ T5952] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  455.975633][ T5908] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  455.989109][ T5908] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  456.001330][ T5908] asix 4-1:0.188: probe with driver asix failed with error -71
[  456.014985][ T5908] usb 4-1: USB disconnect, device number 43
[  456.161363][T12454] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  456.427964][ T5907] usb 7-1: new low-speed USB device number 41 using dummy_hcd
[  456.580425][ T5907] usb 7-1: unable to get BOS descriptor or descriptor too short
[  456.593666][ T5907] usb 7-1: config 194 has an invalid interface number: 4 but max is 0
[  456.605265][ T5907] usb 7-1: config 194 has no interface number 0
[  456.617286][ T5907] usb 7-1: config 194 interface 4 has no altsetting 0
[  456.649637][ T5907] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85
[  456.660097][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.795083][ T5938] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  456.804447][ T5938] usb 5-1: MIDIStreaming interface descriptor not found
[  456.945607][ T5907] usb 7-1: USB disconnect, device number 41
[  456.982261][ T5938] usb 5-1: USB disconnect, device number 32
[  457.068015][ T5908] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  457.092062][ T6104] udevd[6104]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  457.268015][ T5908] usb 4-1: Using ep0 maxpacket: 32
[  457.275614][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.286786][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.297491][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  457.310512][ T5908] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  457.319700][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.330737][ T5908] usb 4-1: config 0 descriptor??
[  457.462575][ T5858] Bluetooth: hci0: unexpected event for opcode 0x202f
[  457.473488][T12469] cgroup: none used incorrectly
[  457.599793][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.633321][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.917460][ T5908] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0028/input/input41
[  457.959373][ T5938] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  457.999806][ T5908] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0028/input/input42
[  458.104309][ T5908] kye 0003:0458:5011.0028: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  458.119735][ T5938] usb 7-1: device descriptor read/64, error -71
[  458.398244][ T5938] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  458.527955][ T5938] usb 7-1: device descriptor read/64, error -71
[  458.638283][ T5938] usb usb7-port1: attempt power cycle
[  458.850832][T12486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  458.978023][ T5938] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  458.998538][ T5938] usb 7-1: device descriptor read/8, error -71
[  459.051918][    C0] kye 0003:0458:5011.0028: usb_submit_urb(ctrl) failed: -1
[  459.189650][ T5908] usb 4-1: reset high-speed USB device number 44 using dummy_hcd
[  459.237934][ T5938] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  459.258511][ T5938] usb 7-1: device descriptor read/8, error -71
[  459.311924][T12493] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2040'.
[  459.327944][ T5908] usb 4-1: device descriptor read/64, error -32
[  459.379850][ T5938] usb usb7-port1: unable to enumerate USB device
[  459.430165][T12495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  459.566109][ T5858] Bluetooth: hci2: unexpected event for opcode 0x202f
[  459.571275][T12501] cgroup: none used incorrectly
[  459.581468][ T5908] usb 4-1: reset high-speed USB device number 44 using dummy_hcd
[  459.718347][ T5908] usb 4-1: device descriptor read/64, error -32
[  459.958863][ T5908] usb 4-1: reset high-speed USB device number 44 using dummy_hcd
[  459.998169][ T5908] usb 4-1: device descriptor read/8, error -32
[  460.467900][ T5908] usb 4-1: reset high-speed USB device number 44 using dummy_hcd
[  460.509960][ T5908] usb 4-1: device reset changed ep0 maxpacket size!
[  460.530203][    T9] usb 4-1: USB disconnect, device number 44
[  460.839900][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  460.986828][T12519] netlink: 'syz.4.2048': attribute type 1 has an invalid length.
[  461.038441][    T9] usb 4-1: Using ep0 maxpacket: 8
[  461.055889][T12524] x_tables: duplicate entry at hook 1
[  461.062012][    T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  461.097414][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.125375][    T9] usb 4-1: Product: syz
[  461.142420][    T9] usb 4-1: Manufacturer: syz
[  461.164277][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  461.176784][    T9] usb 4-1: SerialNumber: syz
[  461.195909][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  461.204985][    T9] usb 4-1: config 0 descriptor??
[  461.210594][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  461.220932][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  461.233327][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  461.235432][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[  461.337918][ T5952] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  461.532598][ T5952] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 3
[  461.548186][ T5952] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  461.566129][ T5952] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  461.575959][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  461.584566][ T5952] usb 7-1: Product: syz
[  461.589186][ T5952] usb 7-1: Manufacturer: syz
[  461.594041][ T5952] usb 7-1: SerialNumber: syz
[  461.607020][T12524] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  461.633833][    T9] gspca_se401: Wrong descriptor type
[  461.670876][T12525] chnl_net:caif_netlink_parms(): no params data found
[  461.826212][ T5952] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  461.865000][ T5952] usb 4-1: USB disconnect, device number 45
[  461.939243][T12525] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.946622][T12525] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.956653][T12525] bridge_slave_0: entered allmulticast mode
[  461.971928][T12525] bridge_slave_0: entered promiscuous mode
[  461.986498][T12525] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.994791][T12525] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.002122][T12525] bridge_slave_1: entered allmulticast mode
[  462.010872][T12525] bridge_slave_1: entered promiscuous mode
[  462.031438][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.049995][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.069202][T12525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.093108][T12525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.145472][T12525] team0: Port device team_slave_0 added
[  462.155094][T12525] team0: Port device team_slave_1 added
[  462.205125][T12525] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.212718][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.239515][T12525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.252798][T12525] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.260529][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.289363][T12525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.291495][ T5952] usb 7-1: USB disconnect, device number 46
[  462.344050][ T5952] usblp0: removed
[  462.453457][ T5858] Bluetooth: hci3: unexpected event for opcode 0x202f
[  462.456872][T12525] hsr_slave_0: entered promiscuous mode
[  462.467221][T12525] hsr_slave_1: entered promiscuous mode
[  462.475569][T12537] cgroup: none used incorrectly
[  462.475836][T12525] debugfs: 'hsr0' already exists in 'hsr'
[  462.488061][T12525] Cannot create hsr debugfs directory
[  462.488080][ T5858] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  462.656042][ T3535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.757291][ T3535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.810230][ T3535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.911662][ T5908] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  462.928586][ T3535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.071203][ T5908] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  463.082265][T12525] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  463.095852][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.101694][T12525] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  463.114335][ T5908] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  463.124918][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  463.133727][ T5908] usb 4-1: Product: syz
[  463.138900][ T5908] usb 4-1: Manufacturer: syz
[  463.138907][T12525] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  463.151683][ T5908] usb 4-1: SerialNumber: syz
[  463.170620][ T5908] usb 4-1: config 0 descriptor??
[  463.185513][ T5908] usb 4-1: selecting invalid altsetting 0
[  463.210370][T12525] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  463.329336][ T5858] Bluetooth: hci4: command tx timeout
[  463.404737][ T5870] usb 4-1: USB disconnect, device number 46
[  463.425469][ T3535] bridge_slave_1: left allmulticast mode
[  463.438909][ T3535] bridge_slave_1: left promiscuous mode
[  463.448221][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.463279][ T3535] bridge_slave_0: left allmulticast mode
[  463.470406][ T3535] bridge_slave_0: left promiscuous mode
[  463.480286][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.729400][ T3535] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  463.741647][ T3535] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  463.754410][ T3535] .` (unregistering): (slave batadv0): Releasing backup interface
[  463.764971][ T3535] .` (unregistering): Released all slaves
[  464.135043][T12525] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.201604][T12525] 8021q: adding VLAN 0 to HW filter on device team0
[  464.280347][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.287594][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.466450][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.468090][    T9] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  464.473693][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.644822][ T3535] hsr_slave_0: left promiscuous mode
[  464.654963][ T3535] hsr_slave_1: left promiscuous mode
[  464.667380][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.674974][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.687124][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  464.697522][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.706252][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.715807][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  464.740501][ T3535] veth1_macvtap: left promiscuous mode
[  464.749184][ T3535] veth0_macvtap: left promiscuous mode
[  464.756002][    T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40
[  464.766167][ T3535] veth1_vlan: left allmulticast mode
[  464.772831][ T3535] veth1_vlan: left promiscuous mode
[  464.787967][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.797874][ T3535] : left promiscuous mode
[  464.808116][    T9] usb 4-1: Product: syz
[  464.812794][    T9] usb 4-1: Manufacturer: syz
[  464.825702][    T9] usb 4-1: SerialNumber: syz
[  465.182953][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  465.191335][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  465.274168][    T9] usb 4-1: USB disconnect, device number 47
[  465.369282][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  465.408150][ T5858] Bluetooth: hci4: command tx timeout
[  465.439931][ T3535] team0 (unregistering): Port device team_slave_1 removed
[  465.458882][ T3535] team0 (unregistering): Port device team_slave_0 removed
[  465.742756][ T5858] Bluetooth: hci2: unexpected event for opcode 0x202f
[  465.770669][T12589] cgroup: none used incorrectly
[  466.066965][T12602] binder: 12597:12602 ioctl 80489439 200000000200 returned -22
[  466.186327][T12606] FAULT_INJECTION: forcing a failure.
[  466.186327][T12606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.203948][T12606] CPU: 0 UID: 0 PID: 12606 Comm: syz.4.2063 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.203982][T12606] Tainted: [L]=SOFTLOCKUP
[  466.203990][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  466.204020][T12606] Call Trace:
[  466.204029][T12606]  <TASK>
[  466.204038][T12606]  dump_stack_lvl+0xe8/0x150
[  466.204074][T12606]  should_fail_ex+0x412/0x560
[  466.204108][T12606]  _copy_from_user+0x2d/0xb0
[  466.204138][T12606]  vcs_write+0x4f7/0x11c0
[  466.204187][T12606]  ? __pfx_vcs_write+0x10/0x10
[  466.204213][T12606]  ? bpf_lsm_file_permission+0x9/0x20
[  466.204234][T12606]  ? iov_iter_iovec_advance+0x1e0/0x290
[  466.204271][T12606]  vfs_writev+0x4bd/0x990
[  466.204298][T12606]  ? __pfx_vcs_write+0x10/0x10
[  466.204331][T12606]  ? __pfx_vfs_writev+0x10/0x10
[  466.204370][T12606]  ? __fget_files+0x2a/0x420
[  466.204401][T12606]  ? __fget_files+0x3a0/0x420
[  466.204426][T12606]  ? __fget_files+0x2a/0x420
[  466.204466][T12606]  do_writev+0x154/0x2e0
[  466.204492][T12606]  ? __pfx_do_writev+0x10/0x10
[  466.204522][T12606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.204543][T12606]  do_syscall_64+0x15f/0xf80
[  466.204567][T12606]  ? trace_irq_disable+0x3b/0x140
[  466.204589][T12606]  ? clear_bhb_loop+0x40/0x90
[  466.204612][T12606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.204630][T12606] RIP: 0033:0x7f8dc9f9c819
[  466.204647][T12606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.204662][T12606] RSP: 002b:00007f8dcaea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  466.204682][T12606] RAX: ffffffffffffffda RBX: 00007f8dca215fa0 RCX: 00007f8dc9f9c819
[  466.204695][T12606] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003
[  466.204707][T12606] RBP: 00007f8dcaea5090 R08: 0000000000000000 R09: 0000000000000000
[  466.204720][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.204731][T12606] R13: 00007f8dca216038 R14: 00007f8dca215fa0 R15: 00007ffe86d91f88
[  466.204761][T12606]  </TASK>
[  466.227037][T12525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.937183][   T29] audit: type=1326 audit(2000000028.600:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.3.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.036400][   T29] audit: type=1326 audit(2000000028.600:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.3.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.134396][   T29] audit: type=1326 audit(2000000028.600:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.3.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.231147][   T29] audit: type=1326 audit(2000000028.600:12428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.265062][T12525] veth0_vlan: entered promiscuous mode
[  467.317813][T12525] veth1_vlan: entered promiscuous mode
[  467.344627][   T29] audit: type=1326 audit(2000000028.600:12429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.401264][   T29] audit: type=1326 audit(2000000028.600:12430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.456819][   T29] audit: type=1326 audit(2000000028.600:12431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.486354][T12640] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2069'.
[  467.497552][ T5848] Bluetooth: hci4: command tx timeout
[  467.513636][T12525] veth0_macvtap: entered promiscuous mode
[  467.532569][   T29] audit: type=1326 audit(2000000028.600:12432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.549758][T12525] veth1_macvtap: entered promiscuous mode
[  467.562733][T12641] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2069'.
[  467.604664][T12525] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.665680][T12525] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.683635][   T29] audit: type=1326 audit(2000000028.640:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.732643][ T3499] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.756878][ T5848] Bluetooth: hci3: unexpected event for opcode 0x202f
[  467.762806][ T3499] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.782370][ T5848] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  467.783231][   T29] audit: type=1326 audit(2000000028.640:12434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181a59c819 code=0x7ffc0000
[  467.836977][ T3499] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.853953][ T3499] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.108013][ T5908] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  468.114066][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.137330][T12655] syzkaller1: entered promiscuous mode
[  468.146809][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.154640][T12655] syzkaller1: entered allmulticast mode
[  468.250703][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.260453][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.273599][ T5908] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  468.298064][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.324827][ T5908] usb 7-1: config 0 descriptor??
[  468.365231][ T5908] gspca_main: cpia1-2.14.0 probing 0813:0001
[  468.467900][   T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  468.638249][   T24] usb 5-1: Using ep0 maxpacket: 32
[  468.657487][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 49864, setting to 1024
[  468.679907][T12675] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  468.692726][   T24] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024
[  468.715999][T12675] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  468.733049][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  468.736120][   T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  468.758095][ T5908] cpia1 7-1:0.0: unexpected state after lo power cmd: 00
[  468.761535][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.770491][T12675] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  468.790595][T12679] syzkaller1: left promiscuous mode
[  468.795988][T12679] syzkaller1: left allmulticast mode
[  468.797603][   T24] usb 5-1: Product: syz
[  468.815860][   T24] usb 5-1: Manufacturer: syz
[  468.825988][   T24] usb 5-1: SerialNumber: syz
[  468.844728][T12675] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  468.865301][   T24] usb 5-1: config 0 descriptor??
[  468.885401][T12655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  468.887272][T12675] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  469.162359][ T5908] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  469.226896][ T5848] Bluetooth: hci4: unexpected event for opcode 0x202f
[  469.311785][   T24] gs_usb 5-1:0.0: Couldn't get device config: (err=-121)
[  469.324494][   T24] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121
[  469.387755][T12650] sctp: [Deprecated]: syz.6.2071 (pid 12650) Use of int in maxseg socket option.
[  469.387755][T12650] Use struct sctp_assoc_value instead
[  469.420974][   T24] usb 7-1: USB disconnect, device number 47
[  469.591831][T12701] netlink: 'syz.7.2082': attribute type 4 has an invalid length.
[  470.334981][ T5848] Bluetooth: hci0: unexpected event for opcode 0x202f
[  471.121896][  T994] usb 5-1: USB disconnect, device number 33
[  471.748059][   T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  471.939138][   T24] usb 4-1: Using ep0 maxpacket: 16
[  471.961859][   T24] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.989850][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  471.999345][   T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  472.010607][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.025917][   T24] usb 4-1: config 0 descriptor??
[  472.138114][ T5952] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  472.302804][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.312390][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.322487][ T5952] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  472.331582][ T5952] usb 5-1: config 5 has no interface number 0
[  472.337746][ T5952] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  472.349577][ T5952] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[  472.359510][ T5952] usb 5-1: config 5 interface 123 has no altsetting 0
[  472.368954][ T5952] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  472.378607][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.386679][ T5952] usb 5-1: Product: syz
[  472.390969][ T5952] usb 5-1: Manufacturer: syz
[  472.395604][ T5952] usb 5-1: SerialNumber: syz
[  472.438310][ T5908] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  472.586240][   T24] mcp2221 0003:04D8:00DD.0029: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  472.587946][ T5908] usb 7-1: Using ep0 maxpacket: 32
[  472.604086][ T5908] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  472.615757][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.629962][ T5908] usb 7-1: config 0 descriptor??
[  472.644754][ T5908] as10x_usb: device has been detected
[  472.652484][ T5908] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  472.713673][ T5908] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  472.842515][ T5908] as10x_usb: error during firmware upload part1
[  472.860135][ T5908] Registered device nBox DVB-T Dongle
[  472.895152][ T5908] usb 7-1: USB disconnect, device number 48
[  472.970111][ T5908] Unregistered device nBox DVB-T Dongle
[  472.974850][ T5908] as10x_usb: device has been disconnected
[  472.978586][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.995911][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.020846][   T10] usb 4-1: USB disconnect, device number 48
[  473.028399][ T5952] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  473.065833][ T5952] usb 5-1: USB disconnect, device number 34
[  473.696496][T12785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  474.057959][ T5908] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  474.180863][   T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  474.217925][ T5908] usb 5-1: Using ep0 maxpacket: 8
[  474.229387][ T5908] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  474.237942][ T5908] usb 5-1: config 179 has no interface number 0
[  474.244263][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  474.255747][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  474.274029][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  474.288348][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  474.300902][ T5908] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  474.314253][ T5908] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  474.323391][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.336012][T12787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  474.357921][   T24] usb 4-1: Using ep0 maxpacket: 16
[  474.373422][   T24] usb 4-1: config 8 has an invalid interface number: 46 but max is 0
[  474.383502][   T24] usb 4-1: config 8 has no interface number 0
[  474.389794][   T24] usb 4-1: config 8 interface 46 has no altsetting 0
[  474.399662][   T24] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=98.9e
[  474.408953][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.416989][   T24] usb 4-1: Product: syz
[  474.421280][   T24] usb 4-1: Manufacturer: syz
[  474.425906][   T24] usb 4-1: SerialNumber: syz
[  474.645015][   T24] empeg 4-1:8.46: empeg converter detected
[  474.651436][   T24] usb 4-1: active config #8 != 1 ??
[  474.664085][   T24] usb 4-1: USB disconnect, device number 49
[  474.775766][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  474.775766][ T5959] usb 5-1: USB disconnect, device number 35
[  474.790523][    C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  475.278309][   T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  475.301848][T12825] fuse: Unknown parameter ''
[  475.438175][   T10] usb 7-1: device descriptor read/64, error -71
[  475.697895][   T10] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  475.779057][T12845] fuse: Bad value for 'user_id'
[  475.784061][T12845] fuse: Bad value for 'user_id'
[  475.838663][   T10] usb 7-1: device descriptor read/64, error -71
[  475.948177][   T10] usb usb7-port1: attempt power cycle
[  476.288763][   T10] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  476.308571][   T10] usb 7-1: device descriptor read/8, error -71
[  476.518054][    T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  476.567878][   T10] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  476.599937][   T10] usb 7-1: device descriptor read/8, error -71
[  476.677902][    T9] usb 4-1: Using ep0 maxpacket: 32
[  476.685379][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  476.696970][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  476.716493][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  476.729863][   T10] usb usb7-port1: unable to enumerate USB device
[  476.738358][    T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  476.747048][    T9] usb 4-1: Product: syz
[  476.752870][    T9] usb 4-1: Manufacturer: syz
[  476.757665][    T9] usb 4-1: SerialNumber: syz
[  476.757909][T12861] netlink: 'syz.4.2136': attribute type 7 has an invalid length.
[  476.775868][T12861] FAULT_INJECTION: forcing a failure.
[  476.775868][T12861] name failslab, interval 1, probability 0, space 0, times 0
[  476.788766][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.4.2136 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.788797][T12861] Tainted: [L]=SOFTLOCKUP
[  476.788805][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  476.788816][T12861] Call Trace:
[  476.788824][T12861]  <TASK>
[  476.788833][T12861]  dump_stack_lvl+0xe8/0x150
[  476.788867][T12861]  should_fail_ex+0x412/0x560
[  476.788898][T12861]  should_failslab+0xa8/0x100
[  476.788921][T12861]  __kmalloc_cache_noprof+0x88/0x660
[  476.788950][T12861]  ? ovs_flow_tbl_init+0x57/0x7f0
[  476.788974][T12861]  ovs_flow_tbl_init+0x57/0x7f0
[  476.788994][T12861]  ? ovs_dp_cmd_new+0x1cc/0xb30
[  476.789013][T12861]  ? __kmalloc_cache_noprof+0x15b/0x660
[  476.789045][T12861]  ovs_dp_cmd_new+0x264/0xb30
[  476.789073][T12861]  ? trace_kmalloc+0x2a/0xf0
[  476.789104][T12861]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  476.789132][T12861]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  476.789167][T12861]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  476.789200][T12861]  genl_family_rcv_msg_doit+0x22a/0x330
[  476.789229][T12861]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  476.789266][T12861]  ? bpf_lsm_capable+0x9/0x20
[  476.789291][T12861]  ? security_capable+0x7e/0x2c0
[  476.789320][T12861]  genl_rcv_msg+0x61c/0x7a0
[  476.789357][T12861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  476.789379][T12861]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  476.789405][T12861]  ? __pfx_ref_tracker_free+0x10/0x10
[  476.789428][T12861]  ? __skb_clone+0x63/0x7a0
[  476.789457][T12861]  netlink_rcv_skb+0x232/0x4b0
[  476.789478][T12861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  476.789503][T12861]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  476.789518][T12861]  ? genl_rcv+0x19/0x40
[  476.789560][T12861]  ? down_read+0x270/0x2e0
[  476.789584][T12861]  ? genl_rcv+0xd/0x40
[  476.789610][T12861]  genl_rcv+0x28/0x40
[  476.789631][T12861]  netlink_unicast+0x80f/0x9b0
[  476.789669][T12861]  ? __pfx_netlink_unicast+0x10/0x10
[  476.789699][T12861]  ? netlink_sendmsg+0x650/0xb40
[  476.789716][T12861]  ? skb_put+0x11b/0x210
[  476.789742][T12861]  netlink_sendmsg+0x813/0xb40
[  476.789774][T12861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.789798][T12861]  ? aa_sock_msg_perm+0xf1/0x1b0
[  476.789820][T12861]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  476.789849][T12861]  ____sys_sendmsg+0x972/0x9f0
[  476.789873][T12861]  ? __might_fault+0xaf/0x130
[  476.789906][T12861]  ? __pfx_____sys_sendmsg+0x10/0x10
[  476.789939][T12861]  ? import_iovec+0x73/0xa0
[  476.789972][T12861]  ___sys_sendmsg+0x2a5/0x360
[  476.789993][T12861]  ? __lock_acquire+0x6b5/0x2cf0
[  476.790024][T12861]  ? __pfx____sys_sendmsg+0x10/0x10
[  476.790082][T12861]  ? __fget_files+0x2a/0x420
[  476.790107][T12861]  ? __fget_files+0x3a0/0x420
[  476.790143][T12861]  __x64_sys_sendmsg+0x1bd/0x2a0
[  476.790179][T12861]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  476.790213][T12861]  ? __pfx_ksys_write+0x10/0x10
[  476.790241][T12861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.790262][T12861]  do_syscall_64+0x15f/0xf80
[  476.790285][T12861]  ? trace_irq_disable+0x3b/0x140
[  476.790308][T12861]  ? clear_bhb_loop+0x40/0x90
[  476.790331][T12861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.790351][T12861] RIP: 0033:0x7f8dc9f9c819
[  476.790371][T12861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.790387][T12861] RSP: 002b:00007f8dcaea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.790407][T12861] RAX: ffffffffffffffda RBX: 00007f8dca215fa0 RCX: 00007f8dc9f9c819
[  476.790422][T12861] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003
[  476.790439][T12861] RBP: 00007f8dcaea5090 R08: 0000000000000000 R09: 0000000000000000
[  476.790452][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.790464][T12861] R13: 00007f8dca216038 R14: 00007f8dca215fa0 R15: 00007ffe86d91f88
[  476.790497][T12861]  </TASK>
[  476.800661][    T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input43
[  477.225419][    T9] usb 4-1: USB disconnect, device number 50
[  477.227093][    C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  477.256084][    T9] appletouch 4-1:1.0: input: appletouch disconnected
[  477.977926][ T5959] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  478.132463][ T5959] usb 4-1: config 150 has an invalid interface number: 204 but max is 2
[  478.154997][ T5959] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  478.179021][ T5959] usb 4-1: config 150 has no interface number 0
[  478.197896][ T5959] usb 4-1: config 150 interface 204 has no altsetting 0
[  478.216948][ T5959] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  478.226229][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.226258][ T5959] usb 4-1: Product: syz
[  478.226274][ T5959] usb 4-1: Manufacturer: syz
[  478.226290][ T5959] usb 4-1: SerialNumber: syz
[  478.446037][ T5959] xr_serial 4-1:150.204: skipping garbage
[  478.463644][ T5959] xr_serial 4-1:150.204: xr_serial converter detected
[  478.490803][ T5959] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  478.501935][ T5959] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  478.545760][ T5959] usb 4-1: USB disconnect, device number 51
[  478.600865][ T5959] xr_serial 4-1:150.204: device disconnected
[  478.967915][ T5952] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  479.130095][ T5952] usb 5-1: Using ep0 maxpacket: 8
[  479.152969][T12918] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2155'.
[  479.153044][ T5952] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  479.180992][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.186513][T12918] netlink: 'syz.7.2155': attribute type 1 has an invalid length.
[  479.212321][ T5952] pvrusb2: Hardware description: Terratec Grabster AV400
[  479.220093][T12918] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2155'.
[  479.229611][ T5952] pvrusb2: **********
[  479.236324][T12923] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2158'.
[  479.244832][ T5952] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  479.291590][ T5952] pvrusb2: Important functionality might not be entirely working.
[  479.301307][ T5952] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  479.337940][ T5952] pvrusb2: **********
[  479.411874][ T2365] pvrusb2: Invalid write control endpoint
[  479.525719][ T2365] pvrusb2: Invalid write control endpoint
[  479.536035][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  479.565666][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  479.573441][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  479.585043][ T2365] pvrusb2: Device being rendered inoperable
[  479.591584][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  479.601980][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  479.609763][   T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  479.630173][ T2365] pvrusb2: Attached sub-driver cx25840
[  479.639988][ T5908] usb 5-1: USB disconnect, device number 36
[  479.649158][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  479.659927][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  479.777975][   T10] usb 7-1: Using ep0 maxpacket: 8
[  479.787873][   T10] usb 7-1: config 3 has an invalid interface number: 230 but max is 0
[  479.796442][   T10] usb 7-1: config 3 has no interface number 0
[  479.803465][   T10] usb 7-1: config 3 interface 230 altsetting 4 bulk endpoint 0xD has invalid maxpacket 8
[  479.813808][   T10] usb 7-1: config 3 interface 230 has no altsetting 0
[  479.823357][   T10] usb 7-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31
[  479.832632][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.840791][   T10] usb 7-1: Product: Р
[  479.844883][   T10] usb 7-1: Manufacturer: Г
[  479.849455][   T10] usb 7-1: SerialNumber: Џ
[  479.857089][T12926] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  479.927955][ T5952] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  480.078867][ T5952] usb 4-1: Using ep0 maxpacket: 16
[  480.083753][   T10] uvcvideo 7-1:3.230: Found UVC 0.00 device Р (199e:8002)
[  480.091663][   T10] uvcvideo 7-1:3.230: No valid video chain found.
[  480.095683][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.104673][   T10] usb 7-1: USB disconnect, device number 53
[  480.120726][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.153933][ T5952] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  480.182910][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.206676][ T5952] usb 4-1: config 0 descriptor??
[  480.445210][T12937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.473712][T12937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.501021][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.511192][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.530094][T12957] tipc: Started in network mode
[  480.530887][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.546613][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.549978][T12957] tipc: Node identity ac14140f, cluster identity 4711
[  480.561161][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.572690][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.581826][T12957] tipc: New replicast peer: 255.255.255.255
[  480.589540][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.601055][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.610368][T12957] tipc: Enabled bearer <udp:syz2>, priority 10
[  480.630987][T12957] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  480.731907][ T5952] usbhid 4-1:0.0: can't add hid device: -71
[  480.745562][ T5952] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  480.780429][ T5952] usb 4-1: USB disconnect, device number 52
[  480.807198][T12965] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2166'.
[  480.839654][T12964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2168'.
[  481.304494][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.341866][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.528426][ T5952] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  481.707944][ T5952] usb 4-1: Using ep0 maxpacket: 16
[  481.719657][ T5952] usb 4-1: config 3 has an invalid interface number: 114 but max is 0
[  481.735433][ T5952] usb 4-1: config 3 has no interface number 0
[  481.748814][ T5959] tipc: Node number set to 2886997007
[  481.759474][ T5952] usb 4-1: config 3 interface 114 has no altsetting 0
[  481.779656][ T5952] usb 4-1: config 3 has an invalid interface number: 114 but max is 0
[  481.788193][ T5952] usb 4-1: config 3 has no interface number 0
[  481.794353][ T5952] usb 4-1: config 3 interface 114 has no altsetting 0
[  481.803485][ T5952] usb 4-1: config 3 has an invalid interface number: 114 but max is 0
[  481.820877][ T5952] usb 4-1: config 3 has no interface number 0
[  481.837640][ T5952] usb 4-1: config 3 interface 114 has no altsetting 0
[  481.853069][ T5952] usb 4-1: config 3 has an invalid interface number: 114 but max is 0
[  481.867951][ T5952] usb 4-1: config 3 has no interface number 0
[  481.879796][ T5952] usb 4-1: config 3 interface 114 has no altsetting 0
[  481.898315][ T5952] usb 4-1: config 3 has an invalid interface number: 114 but max is 0
[  481.919289][ T5952] usb 4-1: config 3 has no interface number 0
[  481.928095][ T5952] usb 4-1: config 3 interface 114 has no altsetting 0
[  481.942796][ T5952] usb 4-1: config 3 has an invalid interface number: 114 but max is 0
[  481.957861][ T5952] usb 4-1: config 3 has no interface number 0
[  481.975222][ T5952] usb 4-1: config 3 interface 114 has no altsetting 0
[  481.989667][ T5952] usb 4-1: config 3 has an invalid interface number: 114 but max is 0
[  482.006756][ T5952] usb 4-1: config 3 has no interface number 0
[  482.013214][ T5952] usb 4-1: config 3 interface 114 has no altsetting 0
[  482.023099][ T5952] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice= d.d3
[  482.048431][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.057583][ T5952] usb 4-1: Product: syz
[  482.067846][ T5952] usb 4-1: Manufacturer: syz
[  482.077313][ T5952] usb 4-1: SerialNumber: syz
[  482.322802][ T5952] gspca_main: 0c45:800a too many config
[  482.342945][ T5952] usb 4-1: USB disconnect, device number 53
[  482.431248][ T5959] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  482.592081][ T5959] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  482.625318][T13023] tmpfs: Unknown parameter 'nrj�A��8�/�_inodes'
[  482.626556][ T5959] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  482.658313][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.673024][ T5959] usb 7-1: Product: syz
[  482.681748][ T5959] usb 7-1: Manufacturer: syz
[  482.696419][ T5959] usb 7-1: SerialNumber: syz
[  482.735519][ T5959] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  482.898415][T13028] binder: 13027:13028 ioctl c0585609 200000000400 returned -22
[  483.170150][ T5959] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  483.205600][ T5959] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  483.217870][ T5900] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  483.248172][ T5959] usb 7-1: media controller created
[  483.253910][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.294584][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.352680][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.383735][ T5900] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  483.398322][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  483.417528][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.426349][ T5900] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  483.461616][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  483.502396][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  483.549225][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  483.585902][ T5900] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  483.614385][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  483.644080][ T5900] usb 4-1: Product: syz
[  483.665330][ T5900] usb 4-1: Manufacturer: syz
[  483.680197][T13049] netlink: 'syz.6.2176': attribute type 10 has an invalid length.
[  483.736897][ T5900] cdc_wdm 4-1:1.0: skipping garbage
[  483.759525][ T5900] cdc_wdm 4-1:1.0: skipping garbage
[  483.823915][ T5900] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  483.853911][ T5900] cdc_wdm 4-1:1.0: Unknown control protocol
[  484.006924][T13053] kvm: pic: non byte write
[  484.224614][   T10] usb 7-1: USB disconnect, device number 54
[  484.270837][T13061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  486.000232][ T5900] usb 4-1: USB disconnect, device number 54
[  486.212677][T13099] syz.3.2195 (13099): drop_caches: 2
[  486.219545][T13099] syz.3.2195 (13099): drop_caches: 2
[  486.397645][T13092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  486.906101][T13112] overlayfs: failed to resolve './file1': -2
[  487.039278][T13116] netlink: 'syz.7.2201': attribute type 1 has an invalid length.
[  487.048968][T13116] netlink: 4030 bytes leftover after parsing attributes in process `syz.7.2201'.
[  487.446447][T13135] overlayfs: failed to resolve './file1': -2
[  487.499583][ T5959] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  487.687917][ T5959] usb 4-1: Using ep0 maxpacket: 8
[  487.702240][ T5959] usb 4-1: no configurations
[  487.712257][ T5959] usb 4-1: can't read configurations, error -22
[  487.842238][T13148] FAULT_INJECTION: forcing a failure.
[  487.842238][T13148] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.855508][T13148] CPU: 1 UID: 0 PID: 13148 Comm: syz.4.2213 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  487.855542][T13148] Tainted: [L]=SOFTLOCKUP
[  487.855550][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  487.855562][T13148] Call Trace:
[  487.855571][T13148]  <TASK>
[  487.855579][T13148]  dump_stack_lvl+0xe8/0x150
[  487.855617][T13148]  should_fail_ex+0x412/0x560
[  487.855651][T13148]  _copy_from_iter+0x1d3/0x1670
[  487.855681][T13148]  ? rep_movs_alternative+0x4a/0x90
[  487.855712][T13148]  ? __pfx__copy_from_iter+0x10/0x10
[  487.855737][T13148]  ? sock_alloc_send_pskb+0x896/0x990
[  487.855770][T13148]  ? __pfx__copy_from_iter+0x10/0x10
[  487.855807][T13148]  copy_page_from_iter+0x220/0x2d0
[  487.855840][T13148]  skb_copy_datagram_from_iter+0x306/0x710
[  487.855879][T13148]  packet_sendmsg+0x3799/0x5120
[  487.855927][T13148]  ? __lock_acquire+0x6b5/0x2cf0
[  487.855976][T13148]  ? aa_sk_perm+0x6d5/0x900
[  487.855995][T13148]  ? __pfx_packet_sendmsg+0x10/0x10
[  487.856031][T13148]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  487.856061][T13148]  ? aa_sock_msg_perm+0xf1/0x1b0
[  487.856084][T13148]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  487.856113][T13148]  ? __pfx_packet_sendmsg+0x10/0x10
[  487.856142][T13148]  __sys_sendto+0x672/0x710
[  487.856168][T13148]  ? __pfx___sys_sendto+0x10/0x10
[  487.856197][T13148]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  487.856239][T13148]  ? __fget_files+0x3a0/0x420
[  487.856276][T13148]  ? ksys_write+0x242/0x270
[  487.856298][T13148]  ? __pfx_ksys_write+0x10/0x10
[  487.856323][T13148]  __x64_sys_sendto+0xde/0x100
[  487.856347][T13148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.856374][T13148]  do_syscall_64+0x15f/0xf80
[  487.856397][T13148]  ? trace_irq_disable+0x3b/0x140
[  487.856419][T13148]  ? clear_bhb_loop+0x40/0x90
[  487.856441][T13148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.856459][T13148] RIP: 0033:0x7f8dc9f9c819
[  487.856478][T13148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.856493][T13148] RSP: 002b:00007f8dcaea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  487.856515][T13148] RAX: ffffffffffffffda RBX: 00007f8dca215fa0 RCX: 00007f8dc9f9c819
[  487.856529][T13148] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000004
[  487.856541][T13148] RBP: 00007f8dcaea5090 R08: 0000200000000140 R09: 0000000000000014
[  487.856555][T13148] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002
[  487.856567][T13148] R13: 00007f8dca216038 R14: 00007f8dca215fa0 R15: 00007ffe86d91f88
[  487.856600][T13148]  </TASK>
[  488.188599][T13150] binder: 13149:13150 ioctl c0306201 2000000003c0 returned -14
[  488.278002][ T5900] usb 7-1: new full-speed USB device number 55 using dummy_hcd
[  488.286835][ T5959] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  488.448176][ T5959] usb 4-1: Using ep0 maxpacket: 8
[  488.457723][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.468123][ T5900] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  488.479472][ T5900] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  488.492947][ T5959] usb 4-1: device descriptor read/all, error -61
[  488.499819][ T5959] usb usb4-port1: attempt power cycle
[  488.506717][ T5900] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  488.516254][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  488.524310][ T5900] usb 7-1: SerialNumber: syz
[  488.534392][ T5900] cdc_acm 7-1:1.0: skipping garbage
[  488.738472][ T5900] usb 7-1: USB disconnect, device number 55
[  488.847945][ T5959] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  488.868520][ T5959] usb 4-1: device descriptor read/8, error -71
[  489.108340][ T5959] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  489.138346][ T5959] usb 4-1: device descriptor read/8, error -71
[  489.249699][ T5959] usb usb4-port1: unable to enumerate USB device
[  489.318320][   T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  489.353458][T13160] overlayfs: failed to resolve './file1': -2
[  489.479313][   T10] usb 5-1: Using ep0 maxpacket: 16
[  489.487009][   T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  489.495532][   T10] usb 5-1: config 0 has no interface number 0
[  489.501810][   T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  489.515435][   T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  489.527950][   T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  489.537084][   T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  489.545362][   T10] usb 5-1: Product: syz
[  489.549593][   T10] usb 5-1: SerialNumber: syz
[  489.556436][   T10] usb 5-1: config 0 descriptor??
[  489.567609][   T10] cm109 5-1:0.8: invalid payload size 0, expected 4
[  489.576201][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input44
[  489.771083][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  489.982061][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.990868][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.003913][   T10] usb 5-1: USB disconnect, device number 37
[  490.019314][   T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  490.227132][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2220'.
[  490.236288][T13172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.236798][T13172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.258977][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2220'.
[  490.553030][T13177] sg_read: process 209 (syz.4.2222) changed security contexts after opening file descriptor, this is not allowed.
[  490.570856][ T5959] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  490.727871][ T5959] usb 4-1: Using ep0 maxpacket: 32
[  490.734748][ T5959] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  490.743160][ T5959] usb 4-1: config 0 has no interface number 0
[  490.751949][ T5959] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  490.761696][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.770416][ T5959] usb 4-1: Product: syz
[  490.774671][ T5959] usb 4-1: Manufacturer: syz
[  490.779407][ T5959] usb 4-1: SerialNumber: syz
[  490.786234][ T5959] usb 4-1: config 0 descriptor??
[  490.793554][ T5959] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  490.877940][ T5900] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  490.994230][ T5959] usb 4-1: qt2_attach - failed to power on unit: -71
[  491.001938][ T5959] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  491.016296][ T5959] usb 4-1: USB disconnect, device number 59
[  491.029265][ T5900] usb 5-1: Using ep0 maxpacket: 16
[  491.041878][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short
[  491.054737][ T5900] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  491.069895][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  491.079122][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.087152][ T5900] usb 5-1: Product: syz
[  491.091632][ T5900] usb 5-1: Manufacturer: syz
[  491.096272][ T5900] usb 5-1: SerialNumber: syz
[  491.308352][T13179] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  491.946086][ T5900] cdc_ncm 5-1:1.0: SET_CRC_MODE failed
[  491.952611][ T5900] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[  491.979126][ T5900] cdc_ncm 5-1:1.0: bind() failure
[  491.990242][ T5900] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  491.997193][ T5900] cdc_ncm 5-1:1.1: bind() failure
[  492.007102][ T5900] usb 5-1: USB disconnect, device number 38
[  492.038636][ T5959] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  492.210367][ T5959] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  492.218483][ T5959] usb 4-1: config 0 has no interface number 0
[  492.226640][ T5959] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  492.235939][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.244040][ T5959] usb 4-1: Product: syz
[  492.248313][ T5959] usb 4-1: Manufacturer: syz
[  492.252922][ T5959] usb 4-1: SerialNumber: syz
[  492.260269][ T5959] usb 4-1: config 0 descriptor??
[  492.401396][T13162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  492.494430][ T5959] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  492.545210][ T5959] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  492.576361][ T5959] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  492.694274][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.721792][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.900518][   T44] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  492.997912][ T5900] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  493.068078][   T44] usb 5-1: Using ep0 maxpacket: 8
[  493.075990][   T44] usb 5-1: unable to get BOS descriptor or descriptor too short
[  493.085263][   T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.095860][   T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  493.104905][   T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  493.120446][   T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  493.129775][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.138025][   T44] usb 5-1: Product: syz
[  493.142236][   T44] usb 5-1: Manufacturer: syz
[  493.146848][   T44] usb 5-1: SerialNumber: syz
[  493.158048][ T5900] usb 7-1: Using ep0 maxpacket: 32
[  493.165299][ T5900] usb 7-1: unable to get BOS descriptor or descriptor too short
[  493.176544][ T5900] usb 7-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  493.185836][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.193965][ T5900] usb 7-1: Product: syz
[  493.198462][ T5900] usb 7-1: Manufacturer: syz
[  493.203351][ T5900] usb 7-1: SerialNumber: syz
[  493.219115][ T5900] usb 7-1: found format II with max.bitrate = 1625, frame size=3
[  493.226889][ T5900] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  493.289838][ T5848] Bluetooth: hci3: adv larger than maximum supported
[  493.289897][ T5848] Bluetooth: hci3: Malformed LE Event: 0x0d
[  493.371585][   T44] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  493.381104][   T44] cdc_ncm 5-1:1.0: bind() failure
[  493.392346][   T44] usb 5-1: USB disconnect, device number 39
[  493.423946][ T5900] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  493.462366][ T5900] usb 7-1: USB disconnect, device number 56
[  493.515068][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  494.089957][T13211] syzkaller0: entered promiscuous mode
[  494.095498][T13211] syzkaller0: entered allmulticast mode
[  494.184296][ T5848] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  494.676169][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'.
[  497.872557][  T147] Bluetooth: hci1: Frame reassembly failed (-84)
[  498.789006][T13256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.113862][T13266] syzkaller0: entered promiscuous mode
[  499.122946][T13266] syzkaller0: entered allmulticast mode
[  499.256344][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2256'.
[  499.687673][T13281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  499.896576][ T5848] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  499.896874][   T51] Bluetooth: hci1: command 0xfc11 tx timeout
[  501.261264][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  501.267950][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  503.001107][T13300] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0
[  503.625150][T13324] binder_alloc: 13323: binder_alloc_buf, no vma
[  503.667920][T12765] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  503.848061][T12765] usb 5-1: Using ep0 maxpacket: 8
[  503.860107][T12765] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  503.881549][T12765] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  503.903397][T12765] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  503.927870][T12765] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  503.948163][T12765] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  503.957414][T12765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.184408][T12765] usb 5-1: GET_CAPABILITIES returned 0
[  504.191962][T12765] usbtmc 5-1:16.0: can't read capabilities
[  504.444096][T13318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.466732][T13318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.507492][ T5908] usb 5-1: USB disconnect, device number 40
[  504.699055][T13338] ------------[ cut here ]------------
[  504.706272][T13338] !chanctx_conf
[  504.706292][T13338] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x64a/0x6e0, CPU#0: syz.7.2280/13338
[  504.721294][T13338] Modules linked in:
[  504.726055][T13338] CPU: 0 UID: 0 PID: 13338 Comm: syz.7.2280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  504.737597][T13338] Tainted: [L]=SOFTLOCKUP
[  504.742357][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  504.753052][T13338] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  504.760251][T13338] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 4b 91 00 cc e8 42 5c 9a f6 90 0f 0b 90 eb e1 e8 37 5c 9a f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  504.780662][T13338] RSP: 0018:ffffc90003d16f68 EFLAGS: 00010283
[  504.788041][T13338] RAX: ffffffff8b2c1559 RBX: ffff8880528fc000 RCX: 0000000000080000
[  504.796067][T13338] RDX: ffffc9001919c000 RSI: 000000000000032b RDI: 000000000000032c
[  504.804785][T13338] RBP: 0000000000000000 R08: ffffffff8b2c1073 R09: ffffffff8e95d260
[  504.812898][T13338] R10: dffffc0000000000 R11: ffffed100a51f831 R12: 1ffff1100a51f80a
[  504.820948][T13338] R13: ffff888040780f20 R14: 0000000000000001 R15: ffffffff8b2c1073
[  504.829059][T13338] FS:  00007f6cec07a6c0(0000) GS:ffff888125204000(0000) knlGS:0000000000000000
[  504.838067][T13338] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  504.844738][T13338] CR2: 0000200000001080 CR3: 0000000036652000 CR4: 00000000003526f0
[  504.850133][T13341] FAULT_INJECTION: forcing a failure.
[  504.850133][T13341] name failslab, interval 1, probability 0, space 0, times 0
[  504.853703][T13338] Call Trace:
[  504.869341][T13338]  <TASK>
[  504.872350][T13338]  rate_control_rate_init_all_links+0x109/0x1a0
[  504.874004][T13341] CPU: 1 UID: 0 PID: 13341 Comm: syz.6.2279 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  504.874033][T13341] Tainted: [L]=SOFTLOCKUP
[  504.874041][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  504.874052][T13341] Call Trace:
[  504.874059][T13341]  <TASK>
[  504.874066][T13341]  dump_stack_lvl+0xe8/0x150
[  504.874096][T13341]  should_fail_ex+0x412/0x560
[  504.874135][T13341]  should_failslab+0xa8/0x100
[  504.874161][T13341]  ? __proc_create+0x535/0xa60
[  504.874178][T13341]  kmem_cache_alloc_noprof+0x87/0x650
[  504.874212][T13341]  __proc_create+0x535/0xa60
[  504.874235][T13341]  ? __pfx___proc_create+0x10/0x10
[  504.874252][T13341]  ? do_raw_spin_lock+0x12b/0x2f0
[  504.874285][T13341]  proc_mkdir+0x3e/0x110
[  504.874304][T13341]  register_handler_proc+0x3aa/0x440
[  504.874338][T13341]  ? __pfx_register_handler_proc+0x10/0x10
[  504.874382][T13341]  ? _raw_spin_unlock_irqrestore+0x47/0x80
[  504.874409][T13341]  __setup_irq+0x1051/0x20d0
[  504.874444][T13341]  ? __kmalloc_cache_noprof+0x15b/0x660
[  504.874474][T13341]  request_threaded_irq+0x2c1/0x3a0
[  504.874499][T13341]  ? __pfx_das16m1_interrupt+0x10/0x10
[  504.874525][T13341]  das16m1_attach+0x1b5/0xae0
[  504.874554][T13341]  comedi_device_attach+0x51f/0x720
[  504.874588][T13341]  comedi_unlocked_ioctl+0x8ef/0x1af0
[  504.874626][T13341]  ? kasan_quarantine_put+0xbb/0x1f0
[  504.874651][T13341]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  504.874690][T13341]  ? do_vfs_ioctl+0x1166/0x1530
[  504.874712][T13341]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  504.874743][T13341]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  504.874788][T13341]  ? __fget_files+0x2a/0x420
[  504.874813][T13341]  ? __fget_files+0x2a/0x420
[  504.874834][T13341]  ? __fget_files+0x3a0/0x420
[  504.874855][T13341]  ? __fget_files+0x2a/0x420
[  504.874880][T13341]  ? bpf_lsm_file_ioctl+0x9/0x20
[  504.874899][T13341]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  504.874921][T13341]  __se_sys_ioctl+0xfc/0x170
[  504.874939][T13341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.874959][T13341]  do_syscall_64+0x15f/0xf80
[  504.874981][T13341]  ? trace_irq_disable+0x3b/0x140
[  504.875002][T13341]  ? clear_bhb_loop+0x40/0x90
[  504.875024][T13341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.875042][T13341] RIP: 0033:0x7ff76a19c819
[  504.875060][T13341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.875075][T13341] RSP: 002b:00007ff76b06b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  504.875095][T13341] RAX: ffffffffffffffda RBX: 00007ff76a416090 RCX: 00007ff76a19c819
[  504.875108][T13341] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  504.875120][T13341] RBP: 00007ff76b06b090 R08: 0000000000000000 R09: 0000000000000000
[  504.875141][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.875152][T13341] R13: 00007ff76a416128 R14: 00007ff76a416090 R15: 00007ffff1624d58
[  504.875182][T13341]  </TASK>
[  505.178040][T13338]  sta_apply_auth_flags+0x1c2/0x400
[  505.183983][T13338]  sta_apply_parameters+0xea9/0x1620
[  505.189745][T13338]  ieee80211_add_station+0x401/0x670
[  505.195578][T13338]  rdev_add_station+0xfc/0x290
[  505.200798][T13338]  nl80211_new_station+0x1cab/0x2130
[  505.206236][T13338]  ? __pfx_nl80211_new_station+0x10/0x10
[  505.211971][T13338]  ? __rtnl_unlock+0xc8/0xf0
[  505.216652][T13338]  genl_family_rcv_msg_doit+0x22a/0x330
[  505.222303][T13338]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  505.228463][T13338]  ? bpf_lsm_capable+0x9/0x20
[  505.233163][T13338]  ? security_capable+0x7e/0x2c0
[  505.238191][T13338]  genl_rcv_msg+0x61c/0x7a0
[  505.242727][T13338]  ? __pfx_genl_rcv_msg+0x10/0x10
[  505.248223][T13338]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  505.253623][T13338]  ? __pfx_nl80211_new_station+0x10/0x10
[  505.259336][T13338]  ? __pfx_nl80211_post_doit+0x10/0x10
[  505.264827][T13338]  ? __pfx_ref_tracker_free+0x10/0x10
[  505.270290][T13338]  ? __skb_clone+0x63/0x7a0
[  505.274830][T13338]  netlink_rcv_skb+0x232/0x4b0
[  505.279655][T13338]  ? __pfx_genl_rcv_msg+0x10/0x10
[  505.285054][T13338]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  505.290757][T13338]  ? genl_rcv+0x19/0x40
[  505.294959][T13338]  ? down_read+0x270/0x2e0
[  505.300009][T13338]  ? genl_rcv+0xd/0x40
[  505.304114][T13338]  genl_rcv+0x28/0x40
[  505.308520][T13338]  netlink_unicast+0x80f/0x9b0
[  505.313356][T13338]  ? __pfx_netlink_unicast+0x10/0x10
[  505.318724][T13338]  ? netlink_sendmsg+0x650/0xb40
[  505.323703][T13338]  ? skb_put+0x11b/0x210
[  505.328220][T13338]  netlink_sendmsg+0x813/0xb40
[  505.333017][T13338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.338392][T13338]  ? aa_sock_msg_perm+0xf1/0x1b0
[  505.343356][T13338]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  505.348714][T13338]  ____sys_sendmsg+0x972/0x9f0
[  505.353513][T13338]  ? __might_fault+0xaf/0x130
[  505.358299][T13338]  ? __pfx_____sys_sendmsg+0x10/0x10
[  505.363628][T13338]  ? import_iovec+0x73/0xa0
[  505.368235][T13338]  ___sys_sendmsg+0x2a5/0x360
[  505.372955][T13338]  ? __lock_acquire+0x6b5/0x2cf0
[  505.377979][T13338]  ? __pfx____sys_sendmsg+0x10/0x10
[  505.383225][T13338]  ? __fget_files+0x2a/0x420
[  505.388429][T13338]  ? __fget_files+0x3a0/0x420
[  505.393126][T13338]  __x64_sys_sendmsg+0x1bd/0x2a0
[  505.398538][T13338]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  505.404172][T13338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.410886][T13338]  do_syscall_64+0x15f/0xf80
[  505.415521][T13338]  ? clear_bhb_loop+0x40/0x90
[  505.420792][T13338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.426732][T13338] RIP: 0033:0x7f6ceb19c819
[  505.431253][T13338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.450945][T13338] RSP: 002b:00007f6cec07a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  505.459420][T13338] RAX: ffffffffffffffda RBX: 00007f6ceb415fa0 RCX: 00007f6ceb19c819
[  505.467419][T13338] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006
[  505.475466][T13338] RBP: 00007f6ceb232c91 R08: 0000000000000000 R09: 0000000000000000
[  505.483499][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  505.492526][T13338] R13: 00007f6ceb416038 R14: 00007f6ceb415fa0 R15: 00007fffa098ebc8
[  505.501005][T13338]  </TASK>
[  505.504062][T13338] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  505.511364][T13338] CPU: 0 UID: 0 PID: 13338 Comm: syz.7.2280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  505.522306][T13338] Tainted: [L]=SOFTLOCKUP
[  505.526660][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  505.536742][T13338] Call Trace:
[  505.540076][T13338]  <TASK>
[  505.543035][T13338]  vpanic+0x56c/0xa60
[  505.547055][T13338]  ? __pfx__printk+0x10/0x10
[  505.551690][T13338]  ? __pfx_vpanic+0x10/0x10
[  505.556209][T13338]  ? is_bpf_text_address+0x292/0x2b0
[  505.561522][T13338]  ? is_bpf_text_address+0x26/0x2b0
[  505.566770][T13338]  panic+0xc5/0xd0
[  505.570542][T13338]  ? __pfx_panic+0x10/0x10
[  505.574995][T13338]  __warn+0x315/0x4c0
[  505.578986][T13338]  ? rate_control_rate_init+0x64a/0x6e0
[  505.584552][T13338]  ? rate_control_rate_init+0x64a/0x6e0
[  505.590108][T13338]  __report_bug+0x29a/0x540
[  505.594657][T13338]  ? rate_control_rate_init+0x64a/0x6e0
[  505.600254][T13338]  ? __pfx___report_bug+0x10/0x10
[  505.605308][T13338]  ? __lock_acquire+0x6b5/0x2cf0
[  505.610283][T13338]  ? __lock_acquire+0x6b5/0x2cf0
[  505.615252][T13338]  ? rate_control_rate_init+0x64a/0x6e0
[  505.620822][T13338]  report_bug+0x16a/0x220
[  505.625177][T13338]  ? rate_control_rate_init+0x64a/0x6e0
[  505.630837][T13338]  ? rate_control_rate_init+0x64c/0x6e0
[  505.636432][T13338]  handle_bug+0x9c/0x200
[  505.640715][T13338]  exc_invalid_op+0x1a/0x50
[  505.645247][T13338]  asm_exc_invalid_op+0x1a/0x20
[  505.650145][T13338] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  505.656338][T13338] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 4b 91 00 cc e8 42 5c 9a f6 90 0f 0b 90 eb e1 e8 37 5c 9a f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  505.676000][T13338] RSP: 0018:ffffc90003d16f68 EFLAGS: 00010283
[  505.682088][T13338] RAX: ffffffff8b2c1559 RBX: ffff8880528fc000 RCX: 0000000000080000
[  505.690146][T13338] RDX: ffffc9001919c000 RSI: 000000000000032b RDI: 000000000000032c
[  505.698137][T13338] RBP: 0000000000000000 R08: ffffffff8b2c1073 R09: ffffffff8e95d260
[  505.706292][T13338] R10: dffffc0000000000 R11: ffffed100a51f831 R12: 1ffff1100a51f80a
[  505.714272][T13338] R13: ffff888040780f20 R14: 0000000000000001 R15: ffffffff8b2c1073
[  505.722260][T13338]  ? rate_control_rate_init+0x163/0x6e0
[  505.727924][T13338]  ? rate_control_rate_init+0x163/0x6e0
[  505.733492][T13338]  ? rate_control_rate_init+0x649/0x6e0
[  505.739053][T13338]  ? rate_control_rate_init+0x649/0x6e0
[  505.744616][T13338]  rate_control_rate_init_all_links+0x109/0x1a0
[  505.750872][T13338]  sta_apply_auth_flags+0x1c2/0x400
[  505.756090][T13338]  sta_apply_parameters+0xea9/0x1620
[  505.761395][T13338]  ieee80211_add_station+0x401/0x670
[  505.766875][T13338]  rdev_add_station+0xfc/0x290
[  505.771659][T13338]  nl80211_new_station+0x1cab/0x2130
[  505.776983][T13338]  ? __pfx_nl80211_new_station+0x10/0x10
[  505.782712][T13338]  ? __rtnl_unlock+0xc8/0xf0
[  505.787346][T13338]  genl_family_rcv_msg_doit+0x22a/0x330
[  505.793004][T13338]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  505.799110][T13338]  ? bpf_lsm_capable+0x9/0x20
[  505.803798][T13338]  ? security_capable+0x7e/0x2c0
[  505.808752][T13338]  genl_rcv_msg+0x61c/0x7a0
[  505.813273][T13338]  ? __pfx_genl_rcv_msg+0x10/0x10
[  505.818329][T13338]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  505.823710][T13338]  ? __pfx_nl80211_new_station+0x10/0x10
[  505.829437][T13338]  ? __pfx_nl80211_post_doit+0x10/0x10
[  505.834908][T13338]  ? __pfx_ref_tracker_free+0x10/0x10
[  505.840299][T13338]  ? __skb_clone+0x63/0x7a0
[  505.844821][T13338]  netlink_rcv_skb+0x232/0x4b0
[  505.849595][T13338]  ? __pfx_genl_rcv_msg+0x10/0x10
[  505.854639][T13338]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  505.859945][T13338]  ? genl_rcv+0x19/0x40
[  505.864127][T13338]  ? down_read+0x270/0x2e0
[  505.868560][T13338]  ? genl_rcv+0xd/0x40
[  505.872639][T13338]  genl_rcv+0x28/0x40
[  505.876625][T13338]  netlink_unicast+0x80f/0x9b0
[  505.881416][T13338]  ? __pfx_netlink_unicast+0x10/0x10
[  505.886715][T13338]  ? netlink_sendmsg+0x650/0xb40
[  505.891658][T13338]  ? skb_put+0x11b/0x210
[  505.895939][T13338]  netlink_sendmsg+0x813/0xb40
[  505.900718][T13338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.906096][T13338]  ? aa_sock_msg_perm+0xf1/0x1b0
[  505.911044][T13338]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  505.916439][T13338]  ____sys_sendmsg+0x972/0x9f0
[  505.921212][T13338]  ? __might_fault+0xaf/0x130
[  505.925911][T13338]  ? __pfx_____sys_sendmsg+0x10/0x10
[  505.931260][T13338]  ? import_iovec+0x73/0xa0
[  505.935791][T13338]  ___sys_sendmsg+0x2a5/0x360
[  505.940478][T13338]  ? __lock_acquire+0x6b5/0x2cf0
[  505.945434][T13338]  ? __pfx____sys_sendmsg+0x10/0x10
[  505.950672][T13338]  ? __fget_files+0x2a/0x420
[  505.955270][T13338]  ? __fget_files+0x3a0/0x420
[  505.959973][T13338]  __x64_sys_sendmsg+0x1bd/0x2a0
[  505.964923][T13338]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  505.970432][T13338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.976511][T13338]  do_syscall_64+0x15f/0xf80
[  505.981110][T13338]  ? clear_bhb_loop+0x40/0x90
[  505.985856][T13338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.991762][T13338] RIP: 0033:0x7f6ceb19c819
[  505.996198][T13338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.015813][T13338] RSP: 002b:00007f6cec07a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  506.024236][T13338] RAX: ffffffffffffffda RBX: 00007f6ceb415fa0 RCX: 00007f6ceb19c819
[  506.032219][T13338] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006
[  506.040221][T13338] RBP: 00007f6ceb232c91 R08: 0000000000000000 R09: 0000000000000000
[  506.048287][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  506.056267][T13338] R13: 00007f6ceb416038 R14: 00007f6ceb415fa0 R15: 00007fffa098ebc8
[  506.064259][T13338]  </TASK>
[  506.067967][T13338] Kernel Offset: disabled
[  506.072293][T13338] Rebooting in 86400 seconds..