last executing test programs:

38m14.298128061s ago: executing program 1 (id=4190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="150129bd7000ffdbdf253500000008000300", @ANYRES32=r2, @ANYBLOB="08001f0102eb6b001400fe00401dc5e655da1d665295665176b736e40600fd000000000008001f010e0000fe210034249d3bd0f9c452b5ef8c2fbdd302485f4f1b2113df190d0e094f0af9ae712bfa01c932f7004345548673eeca27fa5256ee7df070fa12c3fc14f1682f43bbc430936af788e4ec0385a9e6d7a7ad5e9078606ed2261776018fe44457b1da8fab163d8929844c897f16993687b11cc5b2eec0c23efdfb849b6556a0eb790cdc27494dfc99efbc7073e5613b6f166c23c75a9de19a1b57d151d27f86ef96ed53c3d200a7fe000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4c840)
syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88b2ff250001003000000c0100000000205805e5aafb9e960000"], &(0x7f0000000040)={0x1, 0x3, [0x7fa, 0xe46, 0x4b5, 0xbf2]})

38m13.790632088s ago: executing program 1 (id=4194):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000500)="66b87f000f01b0279b0000ea4641ab83b5003e0fc76e00c74424000d000000c744240200500000c7442406000000000f0114242e0fc75f000f79707df30f01ea663626f3a70f0095000000000f09", 0x4e}], 0x1, 0x44, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x877, 0x101000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendto$inet(r0, &(0x7f0000000280)="f2", 0xffffffffffffffd5, 0x2e7b8af778cd36ca, 0x0, 0xfffffd38)
r4 = socket$inet6_sctp(0xa, 0x296c58fda0cd28a9, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x7, 0x8200, 0x6, 0xf13, 0x200, 0x40, 0xdd}, 0x20)

38m12.605950938s ago: executing program 1 (id=4198):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="02002dbd7000fcdbdf252b0000000c009900ff0300007c0011ae08006b0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4015)

38m12.366008551s ago: executing program 1 (id=4199):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0)
move_mount(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100) (fail_nth: 4)

38m11.155053032s ago: executing program 1 (id=4202):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x20000010)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20040000) (fail_nth: 5)

38m10.879732877s ago: executing program 1 (id=4205):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x252603, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

38m10.113739859s ago: executing program 32 (id=4205):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x252603, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

9m37.417563669s ago: executing program 0 (id=9509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_enable(r2, 0x0, 0x2b)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180))

9m36.985105803s ago: executing program 0 (id=9513):
r0 = socket$netlink(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000071b82f9f4ea879f4d27ae84fe66b515a27fa70f01c86ff71096977c68ec3fe8d0f6d75f81ea3039dab81baaf4df08a349ee17c44334150ceb082e7f60c002c9764150b9dc23dacc2edf46cacd993e4581986c98239c44a78944f6dd856db447cf6bcd25a1dc6266f531f8c0afd1f784862797bfd235f3989ad4e3a43fb995931d59e6ebb76c9f0fb190704a5189c72baf3608ad5df7f2208510c0a3ec2b8ec36eb57763bfbda0f", @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884)

9m36.165878739s ago: executing program 0 (id=9516):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80})
readv(r1, &(0x7f0000002740)=[{&(0x7f00000025c0)=""/246, 0xf6}, {&(0x7f00000026c0)=""/106, 0x6a}], 0x2)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xfd, 0x1, 0x10f4, 0x3ff, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x100000, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc})

9m35.807708304s ago: executing program 0 (id=9518):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
stat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dc5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0x5, 0x1, 0x9, 0xa, 0x80000006, 0x5, 0x6, 0x101, 0x4000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockname(r1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
preadv2(r2, &(0x7f0000000340)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x7, 0x6)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000000c0)={0x2, r3, 0x5, 0x5343d9a0, 0x7ff, 0x2, 0x4, 0x3, 0x9})
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x3a, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r6, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x4d, [@local]}, @timestamp={0x44, 0x4, 0x5}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0)
unshare(0x2c020400)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)

9m35.510355193s ago: executing program 0 (id=9520):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x2, 0x22f}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="300000001e0001002abd7000040000000a000000", @ANYRES32=0x0, @ANYBLOB="00000bb2"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x76a78000)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x803, 0x0, 0x0, 0x18, 0x0, {0x2}})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1)
io_uring_enter(r0, 0x6c28, 0xaa86, 0x4, 0x0, 0x0)

9m35.113861208s ago: executing program 0 (id=9521):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000680000000014000c80060001000b0000000800030002000000060003000100"/50], 0x40}, 0x1, 0x0, 0x0, 0x20004884}, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0)
unshare(0x28000600)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xa9)

9m34.163087863s ago: executing program 33 (id=9521):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000680000000014000c80060001000b0000000800030002000000060003000100"/50], 0x40}, 0x1, 0x0, 0x0, 0x20004884}, 0x10)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0)
unshare(0x28000600)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xa9)

2m34.79785089s ago: executing program 4 (id=10209):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100"], 0xa0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500"], 0x2c}}, 0x808)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m33.192014692s ago: executing program 4 (id=10215):
keyctl$clear(0x5, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x3699, 0x0, 0x0, 0x10d})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000002c0)={0x0, r4}, &(0x7f0000000780)=""/246, 0xf6, &(0x7f0000000400)={&(0x7f0000000340)={'cmac(aes)\x00'}})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
dup(r5)
sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0)
add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)

2m30.701637578s ago: executing program 4 (id=10223):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f00000001c0))
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002800)={0x2020}, 0x2020)
ioctl$UFFDIO_MOVE(r3, 0xc028aa05, 0x0)
mq_getsetattr(r3, &(0x7f0000000040)={0xdc1b, 0x8c, 0xb, 0x7ff80}, &(0x7f0000000080))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece)
read$FUSE(r7, &(0x7f0000002340)={0x2020}, 0x2020)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xa2, 0x6, 0x8, 0x7, 0x3, 0xffffffff, "cc8b5eba607da620a29013518dde7ff041d18eed039bbf1bf7343fe34b9dfd8787e66ea930c92508c5b1bdd4cf5009415d47a95c18aeeb3d69a71f86ad8d162c8aaedad8c014ca2b456ebcb1ae67425e68a8d57e4839c2958615addfb1581eeeedded1b99f63cb072bd99fa80928bac375b8b963cec2d035426e3ca4891b5500546891e21505e6204cd7a4a52d50d699438a23c23c963cd822a8d1a544376dd46487"}}, 0x1ba)

2m30.187117076s ago: executing program 4 (id=10226):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040))
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r2}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
signalfd4(r2, &(0x7f0000000140), 0x8, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x1, 0x0)
fchdir(r5)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
close(r5)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4a23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)

2m30.086007482s ago: executing program 4 (id=10227):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) (fail_nth: 10)

2m29.46588533s ago: executing program 4 (id=10229):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
shutdown(r2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000e0c000000000000000000f70005001700000000000a0000000000000000000000000000000000000000000000000000000000000005001a00ff020000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_open_dev$hiddev(&(0x7f0000000200), 0x2, 0x90203)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000000002a81, 0x0)
ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff})
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0)
syz_io_uring_setup(0x2ae8, &(0x7f0000000040)={0x0, 0x9caa, 0x0, 0x6, 0x14d, 0x0, r8}, 0x0, &(0x7f0000000340))
ioctl$RTC_PIE_ON(r6, 0x4008700c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x608000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=@delqdisc={0x274, 0x25, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {0x19, 0xfff3}, {0xffe0, 0x1}}, [@TCA_STAB={0x1b4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x9, 0x2, 0x2, 0x2, 0x8, 0x8}}, {0x14, 0x2, [0xfffd, 0x3, 0x4, 0x5, 0xf9bc, 0x401, 0xfff3, 0x100]}}, {{0x1c, 0x1, {0x7f, 0x4, 0x39d8, 0x1, 0x1, 0x5, 0x8, 0x4}}, {0xc, 0x2, [0x401, 0x4, 0x2, 0x7]}}, {{0x1c, 0x1, {0x1, 0x5, 0x1ff, 0x822e, 0x1, 0x2, 0xbc, 0x9}}, {0x16, 0x2, [0x4, 0x7, 0x10, 0x8, 0x9, 0xee3, 0x2, 0x2, 0x5]}}, {{0x1c, 0x1, {0x4, 0xe, 0x5, 0x7181, 0x0, 0x4, 0xf, 0x8}}, {0x14, 0x2, [0x4d, 0x1000, 0xf638, 0x2, 0x1, 0xfa35, 0x4, 0x3]}}, {{0x1c, 0x1, {0x0, 0x3, 0x1, 0x5, 0x0, 0x7fff, 0x543, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0x8000, 0x8, 0xbf]}}, {{0x1c, 0x1, {0x4, 0xb, 0xd, 0x10001, 0x1, 0x8, 0x7, 0x2}}, {0x8, 0x2, [0x7f, 0x2e77]}}, {{0x1c, 0x1, {0x4, 0x7, 0x7, 0x1, 0x2, 0xfffff369, 0x6, 0x7}}, {0x12, 0x2, [0x7, 0x0, 0x3, 0x8, 0x3f, 0xd65, 0xa]}}, {{0x1c, 0x1, {0x9, 0xa, 0x1, 0x2, 0x1, 0x3, 0x3, 0x7}}, {0x12, 0x2, [0x7, 0x8, 0x2, 0x1, 0x2, 0x34, 0x18]}}, {{0x1c, 0x1, {0x6, 0x8, 0x5, 0x1, 0x1, 0x808, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}]}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x1, 0x8, 0x4, 0x380, 0x40}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x8, 0x7, 0x4, 0x1, 0x2, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0xa47]}}, {{0x1c, 0x1, {0x4, 0x7, 0x401, 0x2, 0x2, 0x1ff, 0xb06, 0x7}}, {0x12, 0x2, [0xd, 0x1, 0x2, 0x8, 0xfffc, 0x1b, 0xb]}}, {{0x1c, 0x1, {0x80, 0x0, 0xe8, 0x5, 0x0, 0xffff, 0x7d, 0x2}}, {0x8, 0x2, [0x1, 0x9]}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40081}, 0x0)

2m28.624545629s ago: executing program 34 (id=10229):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
shutdown(r2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000e0c000000000000000000f70005001700000000000a0000000000000000000000000000000000000000000000000000000000000005001a00ff020000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_open_dev$hiddev(&(0x7f0000000200), 0x2, 0x90203)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000000002a81, 0x0)
ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff})
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0)
syz_io_uring_setup(0x2ae8, &(0x7f0000000040)={0x0, 0x9caa, 0x0, 0x6, 0x14d, 0x0, r8}, 0x0, &(0x7f0000000340))
ioctl$RTC_PIE_ON(r6, 0x4008700c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x608000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=@delqdisc={0x274, 0x25, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {0x19, 0xfff3}, {0xffe0, 0x1}}, [@TCA_STAB={0x1b4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x9, 0x2, 0x2, 0x2, 0x8, 0x8}}, {0x14, 0x2, [0xfffd, 0x3, 0x4, 0x5, 0xf9bc, 0x401, 0xfff3, 0x100]}}, {{0x1c, 0x1, {0x7f, 0x4, 0x39d8, 0x1, 0x1, 0x5, 0x8, 0x4}}, {0xc, 0x2, [0x401, 0x4, 0x2, 0x7]}}, {{0x1c, 0x1, {0x1, 0x5, 0x1ff, 0x822e, 0x1, 0x2, 0xbc, 0x9}}, {0x16, 0x2, [0x4, 0x7, 0x10, 0x8, 0x9, 0xee3, 0x2, 0x2, 0x5]}}, {{0x1c, 0x1, {0x4, 0xe, 0x5, 0x7181, 0x0, 0x4, 0xf, 0x8}}, {0x14, 0x2, [0x4d, 0x1000, 0xf638, 0x2, 0x1, 0xfa35, 0x4, 0x3]}}, {{0x1c, 0x1, {0x0, 0x3, 0x1, 0x5, 0x0, 0x7fff, 0x543, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0x8000, 0x8, 0xbf]}}, {{0x1c, 0x1, {0x4, 0xb, 0xd, 0x10001, 0x1, 0x8, 0x7, 0x2}}, {0x8, 0x2, [0x7f, 0x2e77]}}, {{0x1c, 0x1, {0x4, 0x7, 0x7, 0x1, 0x2, 0xfffff369, 0x6, 0x7}}, {0x12, 0x2, [0x7, 0x0, 0x3, 0x8, 0x3f, 0xd65, 0xa]}}, {{0x1c, 0x1, {0x9, 0xa, 0x1, 0x2, 0x1, 0x3, 0x3, 0x7}}, {0x12, 0x2, [0x7, 0x8, 0x2, 0x1, 0x2, 0x34, 0x18]}}, {{0x1c, 0x1, {0x6, 0x8, 0x5, 0x1, 0x1, 0x808, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}]}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x1, 0x8, 0x4, 0x380, 0x40}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x8, 0x7, 0x4, 0x1, 0x2, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0xa47]}}, {{0x1c, 0x1, {0x4, 0x7, 0x401, 0x2, 0x2, 0x1ff, 0xb06, 0x7}}, {0x12, 0x2, [0xd, 0x1, 0x2, 0x8, 0xfffc, 0x1b, 0xb]}}, {{0x1c, 0x1, {0x80, 0x0, 0xe8, 0x5, 0x0, 0xffff, 0x7d, 0x2}}, {0x8, 0x2, [0x1, 0x9]}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40081}, 0x0)

10.047490477s ago: executing program 6 (id=10725):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000001c00), 0xda, 0x1e1041)
ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0xd39b, 0x10, [{0x7, 0x1}, {0x6}, {0x9}, {0x8, 0x1}, {0x1, 0x1}, {0x3}, {0x6, 0x1}, {0x9, 0x1}, {0x8}, {0x5}, {0xb}, {0x8}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

7.941896946s ago: executing program 6 (id=10729):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil)
setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f00000000c0)=0x800, 0x4c)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x0, 0x0}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000380)=[{0x3, 0x2, 0xf, 0x2}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x4, 0x6, 0x8}, {0x4, 0x3, 0xf, 0x5}, {0x5, 0x4, 0x10}, {0x2, 0x5, 0x9, 0xa}, {0x4, 0x1, 0xb, 0x8}, {0x4, 0x3, 0x2}, {0x3, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xb, 0x1}], 0x10, 0xfffffffe}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)

6.934049068s ago: executing program 5 (id=10733):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000841)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d828ffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210649fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1a14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328537a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0xb5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000200", @ANYRES32=r7, @ANYBLOB="52d187ad99c3526f131cdd182651def5d2b832217141fff11b173e82fe6ab3e346da38cd648a11"], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
bind$inet6(r5, 0x0, 0x0)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}})

5.978667686s ago: executing program 6 (id=10736):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0xd6f, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa00}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0})

5.628822192s ago: executing program 5 (id=10737):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
timer_create(0x3, 0x0, &(0x7f0000044000)=<r1=>0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4(r5, 0x0, &(0x7f0000000100), 0x100800)
timer_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timer_delete(r1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x26d2, 0x2, 0x0, 0x4}, {0x1, 0xff, 0xfc, 0x1}]})

5.493161106s ago: executing program 5 (id=10738):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="08000300286cdb290000010000080000", 0x10) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="08000300286cdb290000010000080000", 0x10)
r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
read$FUSE(r1, &(0x7f0000002a40)={0x2020}, 0x2020)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020)

5.386477912s ago: executing program 5 (id=10739):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r0, 0x0, 0x7}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2040400)
syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0xb347, 0x10, 0xffffffff, 0xc2, 0x0, r2}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
epoll_create1(0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00')
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0)

4.987088576s ago: executing program 2 (id=10740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x2, 0x28981)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef7, 0x0, 0x0, 0x504bb288, 0x1], [0x10000, 0x3, 0x0, 0xfff, 0x0, 0x6, 0xfffffffe, 0x7], [0x7, 0x0, 0x5, 0x0, 0xea7, 0x1000, 0x0, 0x1]], '\x00', [{0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x0, 0x0, 0x1}, {0xfffffffb, 0x8, 0x1}, {}, {}, {0x103, 0x7f}, {0x0, 0x8766}, {0x3}, {0x0, 0xffffffff}], '\x00', 0x2101004})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000004c0))
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000)
r4 = dup2(r3, r3)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r5, 0x29, 0xb, 0x0, &(0x7f0000000280))
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5)
write$vhost_msg_v2(r4, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1)
r6 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00)
close(r6)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x44840)

4.869612397s ago: executing program 6 (id=10741):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2})
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) (async)
close(r3)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async)
r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82)
lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) (async)
getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast, <r5=>0x0}, 0x0) (async)
openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000040000", @ANYBLOB="010100"/14, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050000000300000003000000010000000000000000000000008a58da2201000000f2e106be3411e0b756fc67067fc9cfe2"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) (async)
ioctl$TCFLSH(r6, 0x540b, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)

4.158254154s ago: executing program 3 (id=10742):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ARP_SHA={0xa}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000851}, 0x40c08c4)

4.14232124s ago: executing program 2 (id=10743):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14)

4.122879952s ago: executing program 7 (id=10744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2505000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005000d270000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000086)
r4 = gettid()
ptrace$ARCH_SET_CPUID(0x1e, r4, 0x0, 0x1012)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f0000000180), 0x3c, 0x2, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r4)
setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r6 = socket(0x400000000010, 0x3, 0x0)
getsockopt$sock_int(r6, 0x1, 0xc, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x83, "e1e6cf2ba3a6a9192ae4d4a215a8ba3b9848550c2530b201d41f9bab57271df33d932ecd816196fd9898ff10781e197dd5d2f71f0e8ba30c9598945dc5eee4fa3a990807b3dd5d92e9ba450860f74a83aa70eaac36a91b64b9e151e42d7d1a35c1b833db7b5565b7263b0b27c1f485d404fc3e60f96a4aafaf5389646afb94168cc4f0"}})
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "1cc0024e868c5e5976e645a73168e79cacc09ae543063b091a6a9490602e3069ade4f8af40d1d393192d0446ed9cd732748250e0d139a39ff488184b93a348fb63235a686c1cf2ecd88b1791781e5bb179582e4034261b1a7401f516e46a2951270b1045dcb3daf6dd25f875e6ea8865148c142ee039cbe7dbda353eacc4bfb6306e599bec6a67954a387f24d45e2d1c8085f69f8dfebe10ab0f9a638f62a3f97c5a407c5f591fcde02017f3f54e568b343851f2774f13ace647954708e69083d901bd220e4989526e754da03e8c91b1fb238c95ac78e507b9e95cd6165efa7ef25cd7854fc68f8e1adf918925ebe5abab0b376252ffedad6b81f4e921f4dc18e5f71b51a3eae386e4f89511ed298ee701732d91556feef809ae94c11b6c76f167d6e4d644d1742387018a522b23ed9dce56ebc57f5fb9c5cac8a7d6f6af9d2f2f1dcf8cae2bba7a25eb6162f7925c3b8cfe96cdcdc1fd69509a067207f6cb135a7e95ebda71b7005aa8363903ec18dac3f514a3c7240fb90845b4f801ce67c4c2ed6bae0555b3f1e4023e8f8d60c987904a4bba54c6c1e0deb9a49e995642d0270e97780346c466aca3d3c0bf1f547c8d7e92f4fac7cfde99ab7532ba0e5146eeef2cd39126f9556205c75f0acc8a5ea9d25fc0a4cb5605d6556c02159fd4ae07c9159a88493334f6a69e54f629f6ed92a8ea0c0e426001fa8cfa223e4d5341b8490e35a5df38166bd14e4168fb59a102e72cd82dc43de72353d7b708330728005ed8a150aa3d36ff497b40694769a1d06ba238b130ba100bf35321ac36f701a5d9c5baaf9d57508198e5f940ce102951e9cd17596cedb4cdf36960d54bd478fc8e4d1c592b1b744f954138daee9377d3f463d8f1157bd26bee3997683356c6bfbba554749bb729e60c8ca195d901dc4613cd3ce7a9f4a87afc4ed233d5"}, 0x2a9)
pwritev(r7, &(0x7f0000002740)=[{&(0x7f0000002180)="ce7316", 0x3}], 0x1, 0x2, 0x1)

3.871936583s ago: executing program 3 (id=10745):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000d00)={0x0, 'macvtap0\x00', {0x4}, 0xd}) (fail_nth: 10)

3.634504562s ago: executing program 2 (id=10746):
r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x62}, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r4, 0x8040552c, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1707b863", @ANYRES16=r3, @ANYBLOB="050028bd7000fbdbdf2567000000080001000a00000108000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x20044000)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x400c084)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}}, 0x24}}, 0x400c084)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r13, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000140)=0x5567581e32fb858d, 0x4)
syz_open_dev$vim2m(&(0x7f0000000740), 0x3, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x3, 0xf2d3})

3.429948138s ago: executing program 3 (id=10747):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000a40)=ANY=[], 0x18, 0xffffffffffffffff)
syz_io_uring_setup(0xe80, &(0x7f0000000180)={0x0, 0x5862, 0x8, 0x1, 0x237}, &(0x7f00000000c0), &(0x7f0000000200))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0)
request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x3, 0xfffffffd})
readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='asymmetric\x00', r2)
ioprio_set$uid(0x3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000000)='.*+]^\'+8\x87^^\x00', &(0x7f0000000040)="8b0f", 0x2)
sendfile(r5, r4, 0x0, 0x7ffffffd)

3.212197136s ago: executing program 7 (id=10748):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10e)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r8, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x964, 0x8}, 0x8)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$inet6(0xa, 0x4, 0x5)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f00000002c0)={0x8, 'erspan0\x00', {'team0\x00'}, 0x8})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338)
write$tun(r9, 0x0, 0x0)

2.662825768s ago: executing program 3 (id=10749):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000280), 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x5, @raw_data="418f1c6e9abde697b0f4114cee65492e0134006547f418d61f87b5aef5d2623e338f31836da079da1a87798abc654597dbede5c6a4a486608de4319addf8a48230b16c8a0fc3d587e2fb7757b1e291db6582dca27896416535b34cc6c9de13b36603bf346bc7fed252bf614667fb4a8dae4024a250ff783e64db5eac789b3aa37cee6d2a36929b4754df8c845e81ee9598f3f87ecf416685975198e51eb71e05743fa404f89a8551ee1979b506728d626094ff03535c776c2c9cdd78afb3360216328b3dc4ab9ae2"})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000005e000301000000000400000002000000000000001c000c80080002"], 0x34}}, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=""/85, 0x55}, 0x2}], 0x1, 0x2122, 0x0)

2.2979535s ago: executing program 3 (id=10750):
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x98, 0x190, 0x190, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffff00, 0x0, 'bond_slave_1\x00', 'virt_wifi0\x00', {0xff}, {}, 0x47, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0x98, 0xfff9}}}, {{@ip={@remote, @multicast1, 0xffffff00, 0xffffff00, 'pimreg0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x67, 0x0, 0x3}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x6}, {0x2, 0x1, 0x2}, {0xffffffffffffffff, 0x4}, 0x5, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1, 0x3, 0x2, 0x2, 0x2], 0x9, 0x2}, {0x3, [0x3, 0xc, 0x0, 0x1, 0x4, 0x1], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000100)='timers\x00')
readlinkat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r4, 0x2, 0x0, @void}, 0x10)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0xb54, 0x1)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000300)={0x0})
r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x1, 0x103000)
ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000080)={0x8001, 0xef9, 0x20, 0x8})
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) (async)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x98, 0x190, 0x190, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffff00, 0x0, 'bond_slave_1\x00', 'virt_wifi0\x00', {0xff}, {}, 0x47, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0x98, 0xfff9}}}, {{@ip={@remote, @multicast1, 0xffffff00, 0xffffff00, 'pimreg0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x67, 0x0, 0x3}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x6}, {0x2, 0x1, 0x2}, {0xffffffffffffffff, 0x4}, 0x5, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1, 0x3, 0x2, 0x2, 0x2], 0x9, 0x2}, {0x3, [0x3, 0xc, 0x0, 0x1, 0x4, 0x1], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) (async)
getpid() (async)
syz_pidfd_open(r3, 0x0) (async)
syz_open_procfs(r3, &(0x7f0000000100)='timers\x00') (async)
readlinkat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r4, 0x2, 0x0, @void}, 0x10) (async)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12) (async)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
syz_open_dev$I2C(&(0x7f0000000040), 0xb54, 0x1) (async)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000300)={0x0}) (async)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x1, 0x103000) (async)
ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000080)={0x8001, 0xef9, 0x20, 0x8}) (async)

2.269470878s ago: executing program 2 (id=10751):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000540500000800000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="020000c005"], 0x48}, 0x1, 0x0, 0x0, 0x4008041}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191)
clock_gettime(0x0, &(0x7f0000000080))
ppoll(&(0x7f0000000040)=[{r2, 0x9051}], 0x1, 0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x168)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x2c, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="00101e5738ebf7"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x2c}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)

2.23951327s ago: executing program 5 (id=10752):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r4=>0x0, 0x1, 0x1, 0x1d, 0x9c000000, {{0x25, 0x4, 0x2, 0x7, 0x94, 0x64, 0x0, 0x1, 0x22fd66760bbb4987, 0x0, @multicast2, @remote, {[@generic={0x83, 0x7, "a1a43a09cb"}, @noop, @timestamp_prespec={0x44, 0x14, 0xd7, 0x3, 0x8, [{@rand_addr=0x64010102, 0x1}, {@loopback, 0x100}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x82, 0x0, 0x7, [0x4, 0x243fd576, 0x2, 0x3, 0x5, 0x7, 0x57cc45c1, 0x100, 0x1]}, @timestamp={0x44, 0x1c, 0x7e, 0x0, 0xd, [0xa, 0x7, 0xf, 0xee8, 0x9, 0x5]}, @rr={0x7, 0xb, 0x81, [@rand_addr=0x64010102, @multicast1]}, @lsrr={0x83, 0xf, 0x35, [@private=0xa010101, @remote, @loopback]}]}}}}})
r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}})
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipmr_newroute={0x4c, 0x18, 0x8, 0x70bd25, 0x25dfdbfb, {0x80, 0x80, 0x14, 0x3, 0xff, 0x4, 0x37, 0xb, 0x2600}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_OIF={0x8, 0x4, r4}, @RTA_SRC={0x8, 0x2, @private=0xa010102}, @RTA_IIF={0x8, 0x3, r6}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_FLOW={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000040}, 0x20040841)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x93a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0)

2.057655322s ago: executing program 3 (id=10753):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
syz_io_uring_setup(0x118d9, &(0x7f0000000040)={0x0, 0x4345, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r2 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r2, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x8020, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})

2.017399688s ago: executing program 5 (id=10754):
r0 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x1, 0xfffffffffffffff8})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x240001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r9, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r10, 0x0, r9})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1})
r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa4800, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="f10000002000000000000000cb8bcb548b9d4226757df2ae0d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
ioctl$FBIOBLANK(r11, 0x4611, 0x3)
ioctl$FBIO_WAITFORVSYNC(r11, 0x40044620, 0x0)
dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
times(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

1.950196002s ago: executing program 7 (id=10755):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3)
read(r1, &(0x7f0000001580)=""/4096, 0x1000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001800400030008"], 0x44}}, 0x20008000)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0)
sendto$packet(r6, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @local}, 0x14)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff53, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xfffffffffffffe5d, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x4)
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x20000, 0x0, {[0x8, 0xa5, 0x5d, 0x7, 0xffffffff, 0x0, 0x7, 0x100000001]}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xeeef0000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x0, 0xff}, {0x19, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7f}, {}, {0x0, 0x65, 0xff}, {0x0, 0x0, 0x2c}, {}, {0x0, 0x33, 0xfa}, {0x2, 0x9}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0x8, 0x5, '\x00', 0xfc}, {}, {0x3}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x4, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x6}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}})
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000380))

1.050240754s ago: executing program 2 (id=10756):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000002000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0)

658.674838ms ago: executing program 7 (id=10757):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0)
ftruncate(r2, 0x8800000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000600)=0x3)
sendfile(r3, r2, 0x0, 0x558410e9)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1)
accept(r6, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000040))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x1, @remote, 0x4e20, 0x4000003, 'wrr\x00', 0x24, 0x5, 0x26}, 0x2c)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002900)={0x1c, 0x5f, 0x101, 0xfffffffe, 0x25dfdbff, "", [@nested={0xc, 0x50, 0x0, 0x1, [@nested={0x5, 0x87, 0x0, 0x1, [@generic="99"]}]}]}, 0x1c}], 0x1}, 0x44040)
r8 = syz_open_dev$vcsn(&(0x7f0000001ec0), 0x2, 0x2880)
r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x2, 0x0, @multicast1}, &(0x7f0000001b40)=0x10, 0x0)
sendmmsg(r8, &(0x7f0000001dc0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @multicast2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="633a8f09daab37e5b5cec84ba43a7cbd9591025241665b47cff351ec4019f74e546c0e0d84da6e1a514202e79ac45b0b37be1ad4ed754c06fc8364243aae40b80fac811ca048baeb05554b9e4a7e8d0371fef7cb6176a047fcdbe984009fc0219520e3f41dc133cee2538b0eada219340382d163865a06108b44b3b9755993d5fd64127d0d1e7d99db346e915c34f59407faeb38c84077b20d2f4b7c2bda90326a4f41b96cc933d052d47a62c220ec7c3e5f3a0471103abbe22e0982dca9b30fd9eaaaba2a19144c36941ee0aab0", 0xce}], 0x1, &(0x7f0000000340)=[{0x110, 0x1, 0x8, "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"}, {0xa8, 0x10c, 0x9, "2482073e866980a603d1e943c8fdbe0f3aaf93776b73428a066c3f10f603d4b786035ccfe4b7cd9f04a48677c2f1b518fbc130e57243d8cfbdf0198e789ac076b6b66ecbe10ecc314ba41754f4a0ea9d15b49ecbafd28355abf5cc1b32bba7d174cf8f1bfa56a0715ade12c6ba7e620c8d20b937792e964a02ef7d079fc9d161b29eeac086423a40efb4ae25a4e66ed59373"}], 0x1b8}}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2, 0x0, 0x3}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="ce23ffb4458b6d3279ca92eb9203fec2a5e1d34837576e04f16b2d56dc19944a4356487e541380f7d4affe7a5b89ede7beafb2ca2faa3bb05a64fab94bb6b4fdd2de621bad183e787c04e364ca40eea44d2659bc4e563dd828963d17b213c1507cae589550ac9c6f4314d57c1b0662b8796e9dec225e75cf2e6c5ae0be900c449b1183a56ef5b1f3f651f24c013ae9e0a2855d57a87c184c6e9d34e1f87db0296a1c7c7c4559723c1a1f67", 0xab}, {&(0x7f0000000680)="a1fdf9cd68cf8b474fb69a150cfa628569ad50ff2b582ebc1b3b57079dbf06", 0x1f}], 0x2, &(0x7f0000002940)=[{0x1010, 0x113, 0x1, "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"}, {0x160, 0x104, 0x7, "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"}, {0xb0, 0xff, 0x7, "f7d7bc23722d2c38431bb739277cafa7c258bad52f6dcf35f7d41f208c5422c622f1eee390eee652443215b03112660fb70de6675d438547c8854ab847cbff5ebff83ff7b3ae276e5b0bb683a6481d2ef8ae9755f9a8be033e5bdff9e8e6b70061d0141078b3ceaf26ed867bb7ac7cc0681c9300168912551674f43782716e1c0e64ea2e6568cd05ef51c8c40e886285ab991af5cb7e0e34b3f1ca031643ca"}], 0x1220}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x308, 0x4, 0xfc, 0x0, 0x7, @random="a68ac56e7757"}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)="169154787069df30484418fdf0e700fdd5e160df91e33a719c66d62dd052c3da89ae03fd3d94bac2c4b2b9521360a14520c63bbaa222891c5b88785bb4b591cc0dfafa0d03ccfc396ab1b8d4dc92c62ccf475db00b4686ac7ded8fc693890d9e8ea85f52fa04fa64508a1491fd71a4e697b340d570cf61ec6156d078c646801c77ea39c3ad7bc7e26fd19a9dbc5c27b02a3979f8b99ad4481af6b08ea863dfd425aff5e92f57e9646cbbd2670ce54311c7c9745d775a46009e89a7a23b3bd051d003eb77a8577ae86bd883e0fba5d02dc660108e1bb844ff9134e3ef19bc96a7115bb97c00e0", 0xe6}, {&(0x7f0000001a40)="d06c3b202319b381d706030f3fb103b6945a2be2cd0668d2cdba747c68", 0x1d}, {&(0x7f0000001a80)="7199d227d1368614b074554f70ffda07b276fd6ad7a2b81093d43730d499c48290b780fb4e40276dabe077d0b8f37b9c54f571f0f8bdaf0a970f69f2c784c4", 0x3f}], 0x3}}, {{&(0x7f0000001b80)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001f00)="8af87f0dec3c16d2300836c61430f0ad41a3111abfba2bf40dcbe9946bcce172a075aa0b30466c6941964514e53e511e0b565b9e6256f2388843dc79a670de6afe0d84f104e6c182997163bb3342a8b53ae1abcf378e23142b397de4b6d63cae2989dd98d7c0d402f054a263b8e12e2731e1caeeefd23fa10853bdaf8b001920499470b5f4221cdcc6043ce5eb9097ed299ffe3bf5d725d7dd740000100000000000000000", 0xa5}, {&(0x7f0000001cc0)="f5aa7422a7427b790c56aada97eb7afb458ac70b8628dceb69c809b1963c13dfdc333b5626a1c8b134af9eb109ea0f7d8df23b28bfad41d02756bd209569701c746b60d96096770fec135d266ad154b63b98cce9b1ebacf06c2bbe717cbaa1b6770369ea95cfdb0dd174a478b843ac829b6875b47186e59a03d40f2bfeb10ea04b85717200d1a0911563b22a927ee7fb15be84309b5f690916287f0897cb8638b56f966aec9cd4fad9cf3b84b1ea75d2cb", 0xb1}], 0x2}}], 0x4, 0x4011)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace$setregs(0xf, r10, 0x9, &(0x7f0000000040)="f52bc70050e5d631b6e70b883bdd2413ffcfdd0eb40d88e3a794b4d8162955a298c56e7ca85c0c606fe880ee1939346f2119428afd2e8e15f1822f2111537b9932d00140c500090c861b08397ba616c671071746c486f3f14250c2404674a28b854b4ef35857e9e5548dd8ad14119d610b5f6a7763621966286c25172819e98e8fda5994e317ff4d1fde4343327af949eacea2555e1cca0c1f878535b116cd1b44ba5c93952b44c5212213fc3f9be31e060bc2be5adc271952c0f1bb06d40054e4bc121d47b7")
ptrace$setregs(0x1a, r10, 0xc, &(0x7f0000000000))
sched_setattr(r10, &(0x7f0000000140)={0x38, 0x0, 0x1000003d, 0xc0000, 0xff, 0x5, 0x4, 0x1, 0x0, 0x6}, 0x0)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r11)
umount2(&(0x7f0000000040)='./cgroup\x00', 0x8)

657.409579ms ago: executing program 6 (id=10758):
r0 = getpid() (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) (async)
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x119040, 0x0) (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async, rerun: 64)
r4 = syz_pidfd_open(r0, 0x0) (rerun: 64)
setns(r4, 0x24020000)

596.333484ms ago: executing program 2 (id=10759):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe7d, 0x24040084) (async)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100021f1c00203a092c2631ae01a700000018e0bf4bd9cfc60b30ff0301090d1b0007000010000904fa0201ed7d3200090582020002000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 32)
r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xa9eb, 0x8, 0x0, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0) (rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @private0, 0x1}, 0x1c) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async)
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000008c0)={0x15, 0x1, 0x2, "0e6a605103787fa03e08fd65b728aec1b2e81ba8de67a818a1c85f5a22f39ca6", 0x3132564e}) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x30000000) (async, rerun: 64)
r6 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64)
connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)

242.035581ms ago: executing program 7 (id=10760):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x380, 0x3a8, 0x3a8, 0x380, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x700, {}, [@common=@eui64={{0x28}}, @common=@unspec=@connlimit={{0x40}, {[0xff, 0xff, 0xff000000, 0xffffffff], 0x2, 0x2, {0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00', {0x18000}}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x8003, [0x7fffffff, 0xad1], 0x10, 0x20, 0x8, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}], 0xf}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x4c7, 0x3, 'snmp\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)

1.817158ms ago: executing program 7 (id=10761):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r1)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x11)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0xfffffffffffffe66)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x8080000, 0x38d000, 0x8})

0s ago: executing program 6 (id=10762):
socket$inet_sctp(0x2, 0x1, 0x84)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60})
close(0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000040000080005400000001c08000640ffffff00140000001000010000000000000000000084000a"], 0x6c}}, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
bind$packet(r3, 0x0, 0x0)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="7404000014"], 0x474}], 0x1, 0x0, 0x0, 0xc014}, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

kernel console output (not intermixed with test programs):

 3502.808272][T12001]  ? trace_irq_disable+0x37/0x100
[ 3502.808299][T12001]  ? clear_bhb_loop+0x60/0xb0
[ 3502.808326][T12001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3502.808347][T12001] RIP: 0033:0x7f2fc1f8f749
[ 3502.808366][T12001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3502.808386][T12001] RSP: 002b:00007f2fc01ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3502.808409][T12001] RAX: ffffffffffffffda RBX: 00007f2fc21e5fa0 RCX: 00007f2fc1f8f749
[ 3502.808426][T12001] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 3502.808441][T12001] RBP: 00007f2fc01ee090 R08: 0000000000000000 R09: 0000000000000000
[ 3502.808454][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3502.808468][T12001] R13: 00007f2fc21e6038 R14: 00007f2fc21e5fa0 R15: 00007f2fc230fa28
[ 3502.808504][T12001]  </TASK>
[ 3503.318494][T12001] debugfs: out of free dentries, can not create file 'netdev@ffff888083102618'
[ 3503.379659][T12006] program syz.3.10399 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3503.774831][T12016] netlink: 'syz.6.10402': attribute type 5 has an invalid length.
[ 3503.864449][ T6726] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 3504.027942][ T6726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3504.058299][ T6726] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 3504.106078][ T6726] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3504.166247][ T6726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3504.267900][ T6726] usb 4-1: Product: syz
[ 3504.288486][ T6726] usb 4-1: Manufacturer: syz
[ 3504.495562][ T6726] usb 4-1: SerialNumber: syz
[ 3504.518601][ T6726] cdc_mbim 4-1:1.0: skipping garbage
[ 3504.737403][T12014] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3505.421429][T12014] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3505.430154][ T6726] cdc_mbim 4-1:1.0: setting tx_max = 16384
[ 3505.438054][ T6726] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[ 3505.447932][ T6726] wwan wwan0: port wwan0mbim0 attached
[ 3505.555773][ T6726] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 02:56:8d:e5:ba:af
[ 3505.643539][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10401'.
[ 3505.702073][ T6726] usb 4-1: USB disconnect, device number 15
[ 3505.740831][ T6726] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[ 3505.860586][ T6726] wwan wwan0: port wwan0mbim0 disconnected
[ 3506.562086][T12045] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10407'.
[ 3506.666043][T12045] netlink: 'syz.6.10407': attribute type 1 has an invalid length.
[ 3506.714748][T12045] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10407'.
[ 3506.800786][T12045] FAULT_INJECTION: forcing a failure.
[ 3506.800786][T12045] name failslab, interval 1, probability 0, space 0, times 0
[ 3506.831253][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.6.10407 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3506.831291][T12045] Tainted: [L]=SOFTLOCKUP
[ 3506.831306][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3506.831319][T12045] Call Trace:
[ 3506.831329][T12045]  <TASK>
[ 3506.831339][T12045]  dump_stack_lvl+0xe8/0x150
[ 3506.831377][T12045]  should_fail_ex+0x414/0x560
[ 3506.831419][T12045]  should_failslab+0xa8/0x100
[ 3506.831456][T12045]  __kmalloc_cache_noprof+0x84/0x700
[ 3506.831482][T12045]  ? igmpv3_add_delrec+0xbd/0x560
[ 3506.831514][T12045]  igmpv3_add_delrec+0xbd/0x560
[ 3506.831538][T12045]  ? __local_bh_enable_ip+0xd0/0x130
[ 3506.831567][T12045]  __igmp_group_dropped+0x6e5/0x8f0
[ 3506.831609][T12045]  ? __pfx___igmp_group_dropped+0x10/0x10
[ 3506.831658][T12045]  __ip_mc_dec_group+0x3d3/0x670
[ 3506.831697][T12045]  br_multicast_leave_snoopers+0xb6/0x1c0
[ 3506.831724][T12045]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 3506.831761][T12045]  ? __pfx_br_multicast_leave_snoopers+0x10/0x10
[ 3506.831784][T12045]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 3506.831819][T12045]  ? __try_to_del_timer_sync+0x344/0x390
[ 3506.831846][T12045]  ? __timer_delete_sync+0x7f/0x1d0
[ 3506.831873][T12045]  br_dev_stop+0x8a/0x180
[ 3506.831902][T12045]  ? __pfx_br_dev_stop+0x10/0x10
[ 3506.831933][T12045]  __dev_close_many+0x344/0x6b0
[ 3506.831963][T12045]  ? __pfx___dev_close_many+0x10/0x10
[ 3506.831989][T12045]  ? __local_bh_enable_ip+0xd0/0x130
[ 3506.832011][T12045]  ? __pfx_br_dev_change_rx_flags+0x10/0x10
[ 3506.832046][T12045]  __dev_change_flags+0x2be/0x680
[ 3506.832081][T12045]  ? __pfx___dev_change_flags+0x10/0x10
[ 3506.832122][T12045]  netif_change_flags+0x88/0x1a0
[ 3506.832156][T12045]  do_setlink+0xc55/0x41c0
[ 3506.832201][T12045]  ? __pfx_do_setlink+0x10/0x10
[ 3506.832235][T12045]  ? br_multicast_start_querier+0x19a/0x990
[ 3506.832259][T12045]  ? lock_acquire+0x107/0x340
[ 3506.832305][T12045]  ? __local_bh_enable_ip+0xd0/0x130
[ 3506.832330][T12045]  ? lockdep_hardirqs_on+0x7b/0x110
[ 3506.832352][T12045]  ? br_multicast_set_querier+0x1ed/0x240
[ 3506.832376][T12045]  ? __local_bh_enable_ip+0xd0/0x130
[ 3506.832399][T12045]  ? br_multicast_set_querier+0x1ed/0x240
[ 3506.832429][T12045]  ? br_changelink+0x124f/0x1650
[ 3506.832460][T12045]  ? __pfx_br_changelink+0x10/0x10
[ 3506.832488][T12045]  ? rtnl_newlink+0x8ec/0x1c90
[ 3506.832516][T12045]  ? __pfx___mutex_lock+0x10/0x10
[ 3506.832552][T12045]  ? ns_capable+0x8a/0xf0
[ 3506.832582][T12045]  rtnl_newlink+0x161c/0x1c90
[ 3506.832621][T12045]  ? __pfx_rtnl_newlink+0x10/0x10
[ 3506.832643][T12045]  ? do_syscall_64+0xec/0xf80
[ 3506.832665][T12045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3506.832727][T12045]  ? kasan_quarantine_put+0xbb/0x1f0
[ 3506.832751][T12045]  ? lockdep_hardirqs_on+0x7b/0x110
[ 3506.832779][T12045]  ? kmem_cache_free+0x197/0x620
[ 3506.832801][T12045]  ? nlmon_xmit+0xb0/0x100
[ 3506.832839][T12045]  ? __lock_acquire+0x6b6/0x2cf0
[ 3506.832870][T12045]  ? __local_bh_enable_ip+0xd0/0x130
[ 3506.832893][T12045]  ? lockdep_hardirqs_on+0x7b/0x110
[ 3506.832914][T12045]  ? __dev_queue_xmit+0x289/0x31c0
[ 3506.832941][T12045]  ? __local_bh_enable_ip+0xd0/0x130
[ 3506.832962][T12045]  ? __dev_queue_xmit+0x289/0x31c0
[ 3506.832998][T12045]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 3506.833039][T12045]  ? __pfx_rtnl_newlink+0x10/0x10
[ 3506.833062][T12045]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 3506.833090][T12045]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 3506.833114][T12045]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 3506.833136][T12045]  ? ref_tracker_free+0x63a/0x7d0
[ 3506.833159][T12045]  ? __asan_memcpy+0x40/0x70
[ 3506.833178][T12045]  ? __pfx_ref_tracker_free+0x10/0x10
[ 3506.833211][T12045]  netlink_rcv_skb+0x208/0x470
[ 3506.833242][T12045]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 3506.833268][T12045]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 3506.833308][T12045]  ? netlink_deliver_tap+0x2e/0x1b0
[ 3506.833343][T12045]  netlink_unicast+0x82f/0x9e0
[ 3506.833376][T12045]  ? __pfx_netlink_unicast+0x10/0x10
[ 3506.833399][T12045]  ? __alloc_skb+0x198/0x3a0
[ 3506.833422][T12045]  ? netlink_sendmsg+0x642/0xb30
[ 3506.833454][T12045]  ? skb_put+0x11b/0x210
[ 3506.833480][T12045]  netlink_sendmsg+0x805/0xb30
[ 3506.833518][T12045]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3506.833551][T12045]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 3506.833583][T12045]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3506.833604][T12045]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3506.833634][T12045]  __sock_sendmsg+0x21c/0x270
[ 3506.833672][T12045]  ____sys_sendmsg+0x505/0x820
[ 3506.833705][T12045]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3506.833742][T12045]  ? import_iovec+0x74/0xa0
[ 3506.833773][T12045]  ___sys_sendmsg+0x21f/0x2a0
[ 3506.833801][T12045]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3506.833865][T12045]  ? __fget_files+0x2a/0x420
[ 3506.833892][T12045]  ? __fget_files+0x3a0/0x420
[ 3506.833931][T12045]  __x64_sys_sendmsg+0x19b/0x260
[ 3506.833961][T12045]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3506.833998][T12045]  ? __pfx_ksys_write+0x10/0x10
[ 3506.834033][T12045]  do_syscall_64+0xec/0xf80
[ 3506.834057][T12045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3506.834078][T12045]  ? trace_irq_disable+0x37/0x100
[ 3506.834108][T12045]  ? clear_bhb_loop+0x60/0xb0
[ 3506.834135][T12045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3506.834157][T12045] RIP: 0033:0x7f2fc1f8f749
[ 3506.834178][T12045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3506.834197][T12045] RSP: 002b:00007f2fc01ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3506.834222][T12045] RAX: ffffffffffffffda RBX: 00007f2fc21e5fa0 RCX: 00007f2fc1f8f749
[ 3506.834238][T12045] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[ 3506.834252][T12045] RBP: 00007f2fc01ee090 R08: 0000000000000000 R09: 0000000000000000
[ 3506.834266][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3506.834279][T12045] R13: 00007f2fc21e6038 R14: 00007f2fc21e5fa0 R15: 00007f2fc230fa28
[ 3506.834314][T12045]  </TASK>
[ 3506.998989][T12057] FAULT_INJECTION: forcing a failure.
[ 3506.998989][T12057] name failslab, interval 1, probability 0, space 0, times 0
[ 3507.438343][ T5985] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 3507.450848][T12057] CPU: 0 UID: 0 PID: 12057 Comm: syz.3.10411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3507.450885][T12057] Tainted: [L]=SOFTLOCKUP
[ 3507.450893][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3507.450907][T12057] Call Trace:
[ 3507.450916][T12057]  <TASK>
[ 3507.450926][T12057]  dump_stack_lvl+0xe8/0x150
[ 3507.450960][T12057]  should_fail_ex+0x414/0x560
[ 3507.450999][T12057]  should_failslab+0xa8/0x100
[ 3507.451027][T12057]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 3507.451061][T12057]  ? __alloc_skb+0x198/0x3a0
[ 3507.451083][T12057]  ? __alloc_skb+0x1dc/0x3a0
[ 3507.451103][T12057]  ? __local_bh_enable_ip+0xd0/0x130
[ 3507.451127][T12057]  ? __alloc_skb+0x198/0x3a0
[ 3507.451149][T12057]  __alloc_skb+0x1dc/0x3a0
[ 3507.451175][T12057]  netlink_sendmsg+0x5c6/0xb30
[ 3507.451212][T12057]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3507.451243][T12057]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 3507.451271][T12057]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3507.451291][T12057]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3507.451318][T12057]  __sock_sendmsg+0x21c/0x270
[ 3507.451351][T12057]  ____sys_sendmsg+0x52d/0x820
[ 3507.451389][T12057]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3507.451423][T12057]  ? import_iovec+0x74/0xa0
[ 3507.451453][T12057]  ___sys_sendmsg+0x21f/0x2a0
[ 3507.451481][T12057]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3507.451505][T12057]  ? __lock_acquire+0x6b6/0x2cf0
[ 3507.451533][T12057]  ? kstrtouint+0x6e/0xe0
[ 3507.451607][T12057]  __sys_sendmmsg+0x227/0x430
[ 3507.451641][T12057]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3507.451665][T12057]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 3507.451715][T12057]  ? ksys_write+0x22a/0x250
[ 3507.451758][T12057]  ? __pfx_ksys_write+0x10/0x10
[ 3507.451788][T12057]  __x64_sys_sendmmsg+0xa0/0xc0
[ 3507.451818][T12057]  do_syscall_64+0xec/0xf80
[ 3507.451841][T12057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3507.451864][T12057]  ? trace_irq_disable+0x37/0x100
[ 3507.451898][T12057]  ? clear_bhb_loop+0x60/0xb0
[ 3507.451926][T12057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3507.451948][T12057] RIP: 0033:0x7f9e24d8f749
[ 3507.451968][T12057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3507.451987][T12057] RSP: 002b:00007f9e25bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3507.452012][T12057] RAX: ffffffffffffffda RBX: 00007f9e24fe5fa0 RCX: 00007f9e24d8f749
[ 3507.452029][T12057] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[ 3507.452045][T12057] RBP: 00007f9e25bfa090 R08: 0000000000000000 R09: 0000000000000000
[ 3507.452060][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3507.452073][T12057] R13: 00007f9e24fe6038 R14: 00007f9e24fe5fa0 R15: 00007f9e2510fa28
[ 3507.452108][T12057]  </TASK>
[ 3507.766298][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3507.808996][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3507.868389][ T5985] usb 6-1: Using ep0 maxpacket: 8
[ 3507.875749][ T5985] usb 6-1: config 11 has an invalid interface number: 61 but max is 0
[ 3507.884211][ T5985] usb 6-1: config 11 has no interface number 0
[ 3507.890824][ T5985] usb 6-1: config 11 interface 61 has no altsetting 0
[ 3507.902357][ T5985] usb 6-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[ 3507.915671][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3507.929252][ T5985] usb 6-1: Product: syz
[ 3507.933576][ T5985] usb 6-1: Manufacturer: syz
[ 3507.938331][ T5985] usb 6-1: SerialNumber: syz
[ 3508.028287][ T6726] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[ 3508.119431][ T6720] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 3508.221159][   T30] audit: type=1400 audit(1767191579.632:3776): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=12068 comm="syz.7.10413"
[ 3508.266364][ T6726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3508.314350][ T6726] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3508.328270][ T6720] usb 4-1: Using ep0 maxpacket: 8
[ 3508.355982][ T6720] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[ 3508.368367][ T6726] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3508.387608][ T6720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3508.396275][ T6726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3508.418254][ T6726] usb 3-1: Product: syz
[ 3508.442068][ T6720] usb 4-1: config 0 descriptor??
[ 3508.449263][ T6726] usb 3-1: Manufacturer: syz
[ 3508.453922][ T6726] usb 3-1: SerialNumber: syz
[ 3508.724839][ T6726] usb 3-1: 0:2 : does not exist
[ 3508.741958][ T6726] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 3508.833973][ T6726] usb 3-1: USB disconnect, device number 80
[ 3509.055873][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3509.069858][ T9287] udevd[9287]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3509.118138][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3509.168968][ T4620] usb 4-1: USB disconnect, device number 16
[ 3509.808755][ T6726] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 3509.896421][ T5985] usb 6-1: USB disconnect, device number 111
[ 3510.099574][ T6726] usb 4-1: Using ep0 maxpacket: 32
[ 3510.140978][ T6726] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3510.172138][ T6726] usb 4-1: can't read configurations, error -61
[ 3510.427520][ T6726] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 3510.598353][T12112] fuse: Unknown parameter ''
[ 3510.608235][ T6726] usb 4-1: Using ep0 maxpacket: 32
[ 3510.633148][ T6726] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3510.651721][ T6726] usb 4-1: can't read configurations, error -61
[ 3510.671128][ T6726] usb usb4-port1: attempt power cycle
[ 3510.962739][T12119] FAULT_INJECTION: forcing a failure.
[ 3510.962739][T12119] name failslab, interval 1, probability 0, space 0, times 0
[ 3511.035941][T12119] CPU: 0 UID: 0 PID: 12119 Comm: syz.6.10422 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3511.035979][T12119] Tainted: [L]=SOFTLOCKUP
[ 3511.035988][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3511.036002][T12119] Call Trace:
[ 3511.036012][T12119]  <TASK>
[ 3511.036022][T12119]  dump_stack_lvl+0xe8/0x150
[ 3511.036055][T12119]  should_fail_ex+0x414/0x560
[ 3511.036096][T12119]  should_failslab+0xa8/0x100
[ 3511.036125][T12119]  __kmalloc_noprof+0xdf/0x800
[ 3511.036152][T12119]  ? tomoyo_encode+0x28b/0x550
[ 3511.036189][T12119]  tomoyo_encode+0x28b/0x550
[ 3511.036215][T12119]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 3511.036245][T12119]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 3511.036263][T12119]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 3511.036282][T12119]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3511.036302][T12119]  ? sb_end_write+0xe9/0x1c0
[ 3511.036322][T12119]  ? vfs_write+0x956/0xb30
[ 3511.036361][T12119]  ? ksys_write+0x1e1/0x250
[ 3511.036381][T12119]  security_file_ioctl+0xcb/0x2d0
[ 3511.036399][T12119]  __se_sys_ioctl+0x47/0x170
[ 3511.036416][T12119]  do_syscall_64+0xec/0xf80
[ 3511.036433][T12119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3511.036449][T12119]  ? trace_irq_disable+0x37/0x100
[ 3511.036470][T12119]  ? clear_bhb_loop+0x60/0xb0
[ 3511.036489][T12119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3511.036504][T12119] RIP: 0033:0x7f2fc1f8f749
[ 3511.036519][T12119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3511.036534][T12119] RSP: 002b:00007f2fc01ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3511.036551][T12119] RAX: ffffffffffffffda RBX: 00007f2fc21e5fa0 RCX: 00007f2fc1f8f749
[ 3511.036563][T12119] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 3511.036574][T12119] RBP: 00007f2fc01ee090 R08: 0000000000000000 R09: 0000000000000000
[ 3511.036584][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3511.036593][T12119] R13: 00007f2fc21e6038 R14: 00007f2fc21e5fa0 R15: 00007f2fc230fa28
[ 3511.036618][T12119]  </TASK>
[ 3511.036676][T12119] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3511.080429][ T6726] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 3511.356112][T12119] input: syz1 as /devices/virtual/input/input305
[ 3511.510680][ T6726] usb 4-1: Using ep0 maxpacket: 32
[ 3511.532928][ T6726] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3511.545137][ T6726] usb 4-1: can't read configurations, error -61
[ 3511.689477][ T6726] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 3511.763169][ T6726] usb 4-1: Using ep0 maxpacket: 32
[ 3511.827595][ T6726] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3511.838256][ T6726] usb 4-1: can't read configurations, error -61
[ 3511.846544][ T6726] usb usb4-port1: unable to enumerate USB device
[ 3511.850350][T12124] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 3511.999645][T12128] netdevsim netdevsim6: Direct firmware load for /
[ 3511.999645][T12128]  failed with error -2
[ 3512.020954][T12128] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[ 3512.020954][T12128] 
[ 3512.832627][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10428'.
[ 3513.389584][T12146] tipc: Started in network mode
[ 3513.399586][T12146] tipc: Node identity f0, cluster identity 4711
[ 3513.417740][T12146] tipc: Node number set to 240
[ 3513.668583][ T6726] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 3513.819147][ T6726] usb 3-1: Using ep0 maxpacket: 16
[ 3513.827616][ T6726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3513.856616][ T6726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3513.877307][ T6726] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3513.907955][ T6726] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 3513.928493][ T6726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3513.951137][ T6726] usb 3-1: config 0 descriptor??
[ 3513.958328][ T6720] usb 6-1: new full-speed USB device number 112 using dummy_hcd
[ 3514.124943][ T6720] usb 6-1: device descriptor read/64, error -71
[ 3514.403327][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10434'.
[ 3514.419014][ T6720] usb 6-1: new full-speed USB device number 113 using dummy_hcd
[ 3514.558247][ T6720] usb 6-1: device descriptor read/64, error -71
[ 3514.595883][ T6726] usbhid 3-1:0.0: can't add hid device: -71
[ 3514.622349][ T6726] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3514.652392][ T6726] usb 3-1: USB disconnect, device number 81
[ 3514.668925][ T6720] usb usb6-port1: attempt power cycle
[ 3515.038450][ T6720] usb 6-1: new full-speed USB device number 114 using dummy_hcd
[ 3515.155079][ T6720] usb 6-1: device descriptor read/8, error -71
[ 3515.366015][T12174] FAULT_INJECTION: forcing a failure.
[ 3515.366015][T12174] name failslab, interval 1, probability 0, space 0, times 0
[ 3515.390768][T12174] CPU: 1 UID: 0 PID: 12174 Comm: syz.2.10441 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3515.390805][T12174] Tainted: [L]=SOFTLOCKUP
[ 3515.390814][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3515.390828][T12174] Call Trace:
[ 3515.390838][T12174]  <TASK>
[ 3515.390848][T12174]  dump_stack_lvl+0xe8/0x150
[ 3515.390883][T12174]  should_fail_ex+0x414/0x560
[ 3515.390923][T12174]  should_failslab+0xa8/0x100
[ 3515.390952][T12174]  __kmalloc_noprof+0xdf/0x800
[ 3515.390973][T12174]  ? prep_compound_page+0x2f6/0x6d0
[ 3515.391005][T12174]  ? blk_rq_map_user_iov+0x2ec/0x1770
[ 3515.391040][T12174]  blk_rq_map_user_iov+0x2ec/0x1770
[ 3515.391089][T12174]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[ 3515.391117][T12174]  ? sg_write+0xacd/0xea0
[ 3515.391138][T12174]  ? do_writev+0x14d/0x2d0
[ 3515.391163][T12174]  ? do_syscall_64+0xec/0xf80
[ 3515.391186][T12174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3515.391224][T12174]  ? import_ubuf+0xfb/0x1d0
[ 3515.391252][T12174]  blk_rq_map_user_io+0x252/0x3a0
[ 3515.391290][T12174]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[ 3515.391328][T12174]  ? sg_common_write+0xb3d/0x1360
[ 3515.391356][T12174]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 3515.391381][T12174]  ? set_page_refcounted+0xa0/0x1e0
[ 3515.391412][T12174]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3515.391438][T12174]  ? sg_build_indirect+0x5f8/0x850
[ 3515.391483][T12174]  sg_common_write+0xc90/0x1360
[ 3515.391526][T12174]  ? __pfx_sg_common_write+0x10/0x10
[ 3515.391564][T12174]  sg_write+0xacd/0xea0
[ 3515.391595][T12174]  ? __pfx_sg_write+0x10/0x10
[ 3515.391620][T12174]  ? __pfx_aa_file_perm+0x10/0x10
[ 3515.391682][T12174]  ? bpf_lsm_file_permission+0x9/0x20
[ 3515.391705][T12174]  ? security_file_permission+0x75/0x290
[ 3515.391730][T12174]  ? rw_verify_area+0x255/0x4d0
[ 3515.391754][T12174]  vfs_writev+0x4b6/0x960
[ 3515.391783][T12174]  ? __pfx_sg_write+0x10/0x10
[ 3515.391808][T12174]  ? __pfx_vfs_writev+0x10/0x10
[ 3515.391850][T12174]  ? __fget_files+0x2a/0x420
[ 3515.391881][T12174]  ? __fget_files+0x3a0/0x420
[ 3515.391905][T12174]  ? __fget_files+0x2a/0x420
[ 3515.391940][T12174]  do_writev+0x14d/0x2d0
[ 3515.391968][T12174]  ? __pfx_do_writev+0x10/0x10
[ 3515.392008][T12174]  do_syscall_64+0xec/0xf80
[ 3515.392031][T12174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3515.392052][T12174]  ? trace_irq_disable+0x37/0x100
[ 3515.392081][T12174]  ? clear_bhb_loop+0x60/0xb0
[ 3515.392108][T12174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3515.392129][T12174] RIP: 0033:0x7efd9958f749
[ 3515.392150][T12174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3515.392169][T12174] RSP: 002b:00007efd9a385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3515.392192][T12174] RAX: ffffffffffffffda RBX: 00007efd997e5fa0 RCX: 00007efd9958f749
[ 3515.392208][T12174] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003
[ 3515.392222][T12174] RBP: 00007efd9a385090 R08: 0000000000000000 R09: 0000000000000000
[ 3515.392236][T12174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3515.392249][T12174] R13: 00007efd997e6038 R14: 00007efd997e5fa0 R15: 00007efd9990fa28
[ 3515.392283][T12174]  </TASK>
[ 3515.727286][ T6720] usb 6-1: new full-speed USB device number 115 using dummy_hcd
[ 3515.749158][ T6720] usb 6-1: device descriptor read/8, error -71
[ 3515.858808][ T6720] usb usb6-port1: unable to enumerate USB device
[ 3516.031360][ T5985] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 3516.039138][ T4620] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 3516.198315][ T4620] usb 3-1: Using ep0 maxpacket: 8
[ 3516.207496][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3516.219815][ T4620] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 3516.244596][ T4620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3516.255727][ T5985] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[ 3516.269979][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3516.282234][ T4620] pvrusb2: Hardware description: Terratec Grabster AV400
[ 3516.300873][ T4620] pvrusb2: **********
[ 3516.304888][ T4620] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 3516.322917][ T5985] usb 7-1: config 0 descriptor??
[ 3516.343414][ T4620] pvrusb2: Important functionality might not be entirely working.
[ 3516.355803][ T4620] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 3516.376444][ T4620] pvrusb2: **********
[ 3516.438317][ T6720] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 3516.638273][ T6720] usb 4-1: Using ep0 maxpacket: 32
[ 3516.662610][ T6720] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3516.690145][ T6720] usb 4-1: can't read configurations, error -61
[ 3516.776969][ T5985] hid_mf 0003:0079:1846.00A9: unknown main item tag 0x0
[ 3516.794278][ T5985] hid_mf 0003:0079:1846.00A9: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.6-1/input0
[ 3516.815935][ T5985] hid_mf 0003:0079:1846.00A9: Invalid report, this should never happen!
[ 3516.976849][T12192] netdevsim netdevsim5: Direct firmware load for /
[ 3516.976849][T12192]  failed with error -2
[ 3516.988282][ T6720] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 3516.997824][T12192] netdevsim netdevsim5: Falling back to sysfs fallback for: /
[ 3516.997824][T12192] 
[ 3517.113420][ T5985] hid_mf 0003:0079:1846.00A9: Force feedback init failed.
[ 3517.140107][ T5985] usb 7-1: USB disconnect, device number 55
[ 3517.259004][ T6720] usb 4-1: Using ep0 maxpacket: 32
[ 3517.281651][ T6720] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3517.323031][ T6720] usb 4-1: can't read configurations, error -61
[ 3517.376182][ T6720] usb usb4-port1: attempt power cycle
[ 3517.399590][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 3517.407595][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3517.480453][T12196] fido_id[12196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 3517.732567][ T6720] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 3517.801824][ T6720] usb 4-1: Using ep0 maxpacket: 32
[ 3517.839345][ T6720] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3517.847223][ T6720] usb 4-1: can't read configurations, error -61
[ 3518.003636][ T6720] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 3518.039071][ T6720] usb 4-1: Using ep0 maxpacket: 32
[ 3518.070434][ T6720] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 3518.085635][ T6720] usb 4-1: can't read configurations, error -61
[ 3518.151462][ T6720] usb usb4-port1: unable to enumerate USB device
[ 3519.737999][T12210] erspan0: entered promiscuous mode
[ 3520.662064][ T2346] pvrusb2: Invalid write control endpoint
[ 3520.747879][ T4620] usb 3-1: USB disconnect, device number 82
[ 3520.788038][ T2346] pvrusb2: Invalid write control endpoint
[ 3520.837801][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 3520.858623][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 3520.866680][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 3520.937485][ T2346] pvrusb2: Device being rendered inoperable
[ 3520.954326][ T2346] cx25840 3-0044: Unable to detect h/w, assuming cx23887
[ 3520.981268][ T2346] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d)
[ 3521.037460][ T2346] pvrusb2: Attached sub-driver cx25840
[ 3521.059578][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 3521.095803][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 3521.518546][ T4620] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 3521.678272][ T4620] usb 3-1: Using ep0 maxpacket: 8
[ 3521.695227][ T4620] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[ 3521.720734][ T4620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3521.735716][ T4620] usb 3-1: Product: syz
[ 3521.758422][ T4620] usb 3-1: Manufacturer: syz
[ 3521.774918][ T4620] usb 3-1: SerialNumber: syz
[ 3521.801142][ T4620] usb 3-1: config 0 descriptor??
[ 3521.822640][ T4620] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[ 3521.978232][ T6720] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 3521.989325][ T6716] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 3522.032478][ T4620] pwc: send_video_command error -71
[ 3522.049951][ T4620] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3522.068538][ T4620] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 3522.095630][ T4620] usb 3-1: USB disconnect, device number 83
[ 3522.158733][ T6716] usb 6-1: Using ep0 maxpacket: 16
[ 3522.173425][ T6720] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 3522.198566][ T6720] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 3522.225336][ T6720] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 3522.245956][ T6716] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 3522.266029][ T6716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3522.277239][ T6720] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 3522.291803][ T6716] usb 6-1: Product: syz
[ 3522.306579][ T6716] usb 6-1: Manufacturer: syz
[ 3522.311345][ T6720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3522.322028][ T6716] usb 6-1: SerialNumber: syz
[ 3522.332942][ T6716] usb 6-1: config 0 descriptor??
[ 3522.339814][ T6720] usb 7-1: Product: syz
[ 3522.344721][ T6720] usb 7-1: Manufacturer: syz
[ 3522.350157][ T6720] usb 7-1: SerialNumber: syz
[ 3522.380189][ T6716] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 3522.389944][ T6720] usb 7-1: config 0 descriptor??
[ 3522.396267][T12234] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 3522.438429][T12234] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 3522.450099][ T6720] usb 7-1: ucan: probing device on interface #0
[ 3523.103631][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3523.150536][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3523.208582][ T6720] ucan 7-1:0.0: probe with driver ucan failed with error -71
[ 3523.313424][ T6720] usb 7-1: USB disconnect, device number 56
[ 3523.578380][ T6716] usb 6-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[ 3523.783388][T12232] delete_channel: no stack
[ 3523.790890][ T6720] usb 6-1: USB disconnect, device number 116
[ 3523.817983][ T6720] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[ 3523.855069][ T6720] ssu100 6-1:0.0: device disconnected
[ 3523.968249][ T6705] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 3524.131360][T12263] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10466'.
[ 3524.149996][ T6705] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3524.160743][ T6705] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 3524.185398][ T6705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3524.218202][ T6705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 3524.255874][ T6705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 3524.319370][ T6705] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3524.367577][ T6705] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3524.409003][ T6720] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 3524.430583][ T6705] usb 3-1: Product: syz
[ 3524.450341][ T6705] usb 3-1: Manufacturer: syz
[ 3524.501024][ T6705] cdc_wdm 3-1:1.0: skipping garbage
[ 3524.527195][ T6705] cdc_wdm 3-1:1.0: skipping garbage
[ 3524.543828][ T6705] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 3524.564143][ T6705] cdc_wdm 3-1:1.0: Unknown control protocol
[ 3524.748640][ T6716] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 3524.768908][ T6720] usb 7-1: Using ep0 maxpacket: 32
[ 3524.782759][ T6720] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 3524.793811][ T6720] usb 7-1: config 120 has an invalid descriptor of length 94, skipping remainder of the config
[ 3524.807060][ T6720] usb 7-1: config 120 has 0 interfaces, different from the descriptor's value: 1
[ 3524.822975][ T6720] usb 7-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[ 3524.833009][ T6720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3524.849113][ T6720] usb 7-1: Product: syz
[ 3524.853542][ T6720] usb 7-1: Manufacturer: syz
[ 3524.859783][ T6720] usb 7-1: SerialNumber: syz
[ 3524.918205][ T6716] usb 6-1: Using ep0 maxpacket: 16
[ 3524.928021][ T6716] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[ 3524.937876][ T6716] usb 6-1: config 1 has no interface number 0
[ 3524.944716][ T6716] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 3524.965625][ T6716] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 3524.985327][ T6716] usb 6-1: config 1 interface 105 has no altsetting 0
[ 3524.998960][ T6716] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 3525.018277][ T6716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3525.037282][ T6716] usb 6-1: Product: syz
[ 3525.046917][ T6716] usb 6-1: Manufacturer: syz
[ 3525.063454][ T6716] usb 6-1: SerialNumber: syz
[ 3525.126923][T12268] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 3525.135267][T12268] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 3525.245099][ T4694] usb 3-1: USB disconnect, device number 84
[ 3525.551654][T12268] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 3525.577473][T12268] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 3525.801653][ T6705] hid-generic 00A0:0006:0003.00AA: unknown main item tag 0x7
[ 3525.811209][ T6705] hid-generic 00A0:0006:0003.00AA: unknown main item tag 0x1
[ 3525.818941][ T4694] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 3525.833932][ T6705] hid-generic 00A0:0006:0003.00AA: item fetching failed at offset 8/15
[ 3525.873232][ T6705] hid-generic 00A0:0006:0003.00AA: probe with driver hid-generic failed with error -22
[ 3525.988667][ T4694] usb 4-1: Using ep0 maxpacket: 16
[ 3526.002755][ T4694] usb 4-1: config 0 has no interfaces?
[ 3526.011624][ T4694] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3526.020824][ T4694] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3526.029812][ T4694] usb 4-1: Manufacturer: syz
[ 3526.148795][ T4694] usb 4-1: config 0 descriptor??
[ 3526.203273][ T6716] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 3526.220091][ T6716] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 3526.270970][ T6716] aqc111 6-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41
[ 3526.309966][ T6716] usb 6-1: USB disconnect, device number 117
[ 3526.325525][ T6716] aqc111 6-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 3526.405977][T12282] netlink: 'syz.3.10472': attribute type 1 has an invalid length.
[ 3526.488065][T12288] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10472'.
[ 3526.604987][ T6716] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 3526.857940][ T6716] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 3526.891650][T12282] 8021q: adding VLAN 0 to HW filter on device bond4
[ 3526.905144][ T6716] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 3526.971222][T12290] vlan0: entered allmulticast mode
[ 3526.976544][T12290] bond4: entered allmulticast mode
[ 3527.080928][ T6720] usb 7-1: USB disconnect, device number 57
[ 3527.560103][T12292] netdevsim netdevsim2: Direct firmware load for /
[ 3527.560103][T12292]  failed with error -2
[ 3527.729819][T12292] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[ 3527.729819][T12292] 
[ 3527.870543][T12303] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10476'.
[ 3528.417069][T12306] batadv0: entered promiscuous mode
[ 3528.550323][T12306] batadv0: left promiscuous mode
[ 3529.044359][T12310] fuse: Unknown parameter '	'
[ 3529.244091][ T6720] usb 4-1: USB disconnect, device number 25
[ 3529.518576][ T5985] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 3529.603088][T12325] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 3529.675222][T12325] netdevsim netdevsim5: Direct firmware load for /
[ 3529.675222][T12325]  failed with error -2
[ 3529.685954][T12325] netdevsim netdevsim5: Falling back to sysfs fallback for: /
[ 3529.685954][T12325] 
[ 3529.754801][ T5985] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[ 3529.765222][ T5985] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[ 3529.785324][ T5985] usb 3-1: config 1 interface 0 has no altsetting 0
[ 3529.803284][ T5985] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[ 3529.839279][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3529.866890][ T5985] usb 3-1: Product: syz
[ 3529.930984][ T5985] usb 3-1: Manufacturer: syz
[ 3529.945713][ T5985] usb 3-1: SerialNumber: syz
[ 3529.965923][T12316] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 3529.981891][T12316] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 3530.078431][ T6705] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 3530.239708][ T6705] usb 4-1: Using ep0 maxpacket: 32
[ 3530.247645][ T6705] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 3530.265512][ T6705] usb 4-1: config 0 has no interface number 0
[ 3530.290135][ T6705] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 3530.317776][ T6705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3530.364256][ T6705] usb 4-1: Product: syz
[ 3530.378315][ T6705] usb 4-1: Manufacturer: syz
[ 3530.382976][ T6705] usb 4-1: SerialNumber: syz
[ 3530.397566][ T6705] usb 4-1: config 0 descriptor??
[ 3530.416968][ T6705] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 3530.685007][ T6705] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 3530.725371][T12339] netdevsim netdevsim6: Direct firmware load for /
[ 3530.725371][T12339]  failed with error -2
[ 3530.736476][T12339] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[ 3530.736476][T12339] 
[ 3530.828652][T12340] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10490'.
[ 3530.863539][ T6705] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 3531.046502][ T5985] (unnamed net_device) (uninitialized): Assigned a random MAC address: 76:38:73:3f:7b:9a
[ 3531.095517][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3531.133485][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3531.217993][ T5985] rtl8150 3-1:1.0: eth13: rtl8150 is detected
[ 3531.225793][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 3531.229307][ T6720] usb 4-1: USB disconnect, device number 26
[ 3531.273892][ T6720] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 3531.309623][ T5985] usb 3-1: USB disconnect, device number 85
[ 3531.351196][ T6720] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 3531.417317][ T6720] quatech2 4-1:0.51: device disconnected
[ 3532.488251][ T6720] usb 6-1: new full-speed USB device number 118 using dummy_hcd
[ 3532.651373][ T6720] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3532.661277][ T6720] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3532.674681][ T6720] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3532.714516][ T6720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3532.818630][ T5985] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[ 3532.896574][T12372] netdevsim netdevsim6: Direct firmware load for /
[ 3532.896574][T12372]  failed with error -2
[ 3532.907387][T12372] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[ 3532.907387][T12372] 
[ 3532.972563][ T6720] usb 6-1: GET_CAPABILITIES returned 0
[ 3532.982551][ T6720] usbtmc 6-1:16.0: can't read capabilities
[ 3533.115031][ T5985] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 3533.124954][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3533.136959][ T5985] usb 3-1: Product: syz
[ 3533.144295][ T5985] usb 3-1: Manufacturer: syz
[ 3533.154264][ T5985] usb 3-1: SerialNumber: syz
[ 3533.173364][ T5985] usb 3-1: config 0 descriptor??
[ 3533.403558][ T5985] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3534.661310][T12382] veth0_to_team: entered promiscuous mode
[ 3534.938225][ T6716] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 3535.104303][ T1040] usb 6-1: USB disconnect, device number 118
[ 3535.119576][ T6716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3535.159929][ T6716] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3535.175719][T12393] FAULT_INJECTION: forcing a failure.
[ 3535.175719][T12393] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3535.193544][ T5985] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 3535.197017][ T6716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3535.227716][T12393] CPU: 0 UID: 0 PID: 12393 Comm: syz.6.10506 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3535.227754][T12393] Tainted: [L]=SOFTLOCKUP
[ 3535.227763][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3535.227778][T12393] Call Trace:
[ 3535.227788][T12393]  <TASK>
[ 3535.227797][T12393]  dump_stack_lvl+0xe8/0x150
[ 3535.227832][T12393]  should_fail_ex+0x414/0x560
[ 3535.227873][T12393]  _copy_to_user+0x31/0xb0
[ 3535.227903][T12393]  simple_read_from_buffer+0xe1/0x170
[ 3535.227936][T12393]  proc_fail_nth_read+0x1b3/0x220
[ 3535.227962][T12393]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3535.228000][T12393]  ? rw_verify_area+0x2a6/0x4d0
[ 3535.228019][T12393]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3535.228043][T12393]  vfs_read+0x200/0xa30
[ 3535.228062][T12393]  ? fdget_pos+0x247/0x320
[ 3535.228094][T12393]  ? __pfx___mutex_lock+0x10/0x10
[ 3535.228121][T12393]  ? __pfx_vfs_read+0x10/0x10
[ 3535.228142][T12393]  ? __fget_files+0x2a/0x420
[ 3535.228172][T12393]  ? __fget_files+0x3a0/0x420
[ 3535.228197][T12393]  ? __fget_files+0x2a/0x420
[ 3535.228231][T12393]  ksys_read+0x145/0x250
[ 3535.228255][T12393]  ? __pfx_ksys_read+0x10/0x10
[ 3535.228286][T12393]  do_syscall_64+0xec/0xf80
[ 3535.228308][T12393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3535.228328][T12393]  ? trace_irq_disable+0x37/0x100
[ 3535.228355][T12393]  ? clear_bhb_loop+0x60/0xb0
[ 3535.228380][T12393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3535.228402][T12393] RIP: 0033:0x7f2fc1f8e15c
[ 3535.228422][T12393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3535.228440][T12393] RSP: 002b:00007f2fc01ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3535.228462][T12393] RAX: ffffffffffffffda RBX: 00007f2fc21e5fa0 RCX: 00007f2fc1f8e15c
[ 3535.228479][T12393] RDX: 000000000000000f RSI: 00007f2fc01ee0a0 RDI: 0000000000000004
[ 3535.228492][T12393] RBP: 00007f2fc01ee090 R08: 0000000000000000 R09: 0000000000000000
[ 3535.228506][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3535.228518][T12393] R13: 00007f2fc21e6038 R14: 00007f2fc21e5fa0 R15: 00007f2fc230fa28
[ 3535.228550][T12393]  </TASK>
[ 3535.445966][ T5985] usb 3-1: USB disconnect, device number 86
[ 3535.522011][ T6716] usb 4-1: config 0 descriptor??
[ 3535.584903][ T6716] pwc: Askey VC010 type 2 USB webcam detected.
[ 3535.714216][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10510'.
[ 3535.726242][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10510'.
[ 3535.821944][T12406] netdevsim netdevsim7: Direct firmware load for /
[ 3535.821944][T12406]  failed with error -2
[ 3535.836255][T12406] netdevsim netdevsim7: Falling back to sysfs fallback for: /
[ 3535.836255][T12406] 
[ 3535.908287][ T6718] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 3535.981609][ T6716] pwc: recv_control_msg error -32 req 02 val 2b00
[ 3536.034150][T12410] fuse: Unknown parameter 'rootmkV0�D�J�000�000000000060000'
[ 3536.107388][ T6718] usb 6-1: config 0 has no interfaces?
[ 3536.190701][ T6716] pwc: recv_control_msg error -32 req 02 val 2c00
[ 3536.197876][ T6718] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 3536.207823][ T6718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3536.234130][ T6716] pwc: recv_control_msg error -32 req 04 val 1000
[ 3536.249248][ T6718] usb 6-1: Product: syz
[ 3536.253670][ T6718] usb 6-1: Manufacturer: syz
[ 3536.258801][ T6718] usb 6-1: SerialNumber: syz
[ 3536.264978][ T6716] pwc: recv_control_msg error -32 req 04 val 1300
[ 3536.276197][ T6716] pwc: recv_control_msg error -32 req 04 val 1400
[ 3536.286667][ T6718] usb 6-1: config 0 descriptor??
[ 3536.297223][ T6716] pwc: recv_control_msg error -32 req 02 val 2000
[ 3536.309011][ T5985] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 3536.327238][ T6716] pwc: recv_control_msg error -32 req 02 val 2100
[ 3536.340967][ T6716] pwc: recv_control_msg error -32 req 04 val 1500
[ 3536.364762][ T6716] pwc: recv_control_msg error -32 req 02 val 2500
[ 3536.458412][ T6716] pwc: recv_control_msg error -71 req 02 val 2400
[ 3536.469512][ T6716] pwc: recv_control_msg error -71 req 02 val 2600
[ 3536.498656][ T5985] usb 3-1: Using ep0 maxpacket: 16
[ 3536.505869][T12398] veth1_macvtap: left promiscuous mode
[ 3536.507577][ T6716] pwc: recv_control_msg error -71 req 02 val 2900
[ 3536.548789][ T6716] pwc: recv_control_msg error -71 req 02 val 2800
[ 3536.576256][ T5985] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 3536.600599][ T6716] pwc: recv_control_msg error -71 req 04 val 1100
[ 3536.612400][ T6716] pwc: recv_control_msg error -71 req 04 val 1200
[ 3536.628260][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3536.653360][ T5985] usb 3-1: Product: syz
[ 3536.657602][ T5985] usb 3-1: Manufacturer: syz
[ 3536.668351][ T5985] usb 3-1: SerialNumber: syz
[ 3536.687441][ T6716] pwc: Registered as video103.
[ 3536.690341][ T5985] usb 3-1: config 0 descriptor??
[ 3536.714355][ T6716] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input307
[ 3536.726985][ T5985] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 3536.767016][ T5985] usb 3-1: Detected FT232H
[ 3536.806351][T12398] veth1_macvtap: entered promiscuous mode
[ 3536.839912][ T6716] usb 4-1: USB disconnect, device number 27
[ 3536.879222][ T4620] usb 6-1: USB disconnect, device number 119
[ 3537.102422][ T5985] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 3537.117627][ T5985] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[ 3537.158810][ T5985] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 3537.201266][ T5985] usb 3-1: USB disconnect, device number 87
[ 3537.230820][ T5985] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 3537.269985][ T5985] ftdi_sio 3-1:0.0: device disconnected
[ 3537.981480][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10517'.
[ 3538.243559][T12439] FAULT_INJECTION: forcing a failure.
[ 3538.243559][T12439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3538.285313][T12439] CPU: 1 UID: 0 PID: 12439 Comm: syz.7.10522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3538.285351][T12439] Tainted: [L]=SOFTLOCKUP
[ 3538.285360][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3538.285374][T12439] Call Trace:
[ 3538.285391][T12439]  <TASK>
[ 3538.285402][T12439]  dump_stack_lvl+0xe8/0x150
[ 3538.285442][T12439]  should_fail_ex+0x414/0x560
[ 3538.285483][T12439]  _copy_to_user+0x31/0xb0
[ 3538.285514][T12439]  simple_read_from_buffer+0xe1/0x170
[ 3538.285548][T12439]  proc_fail_nth_read+0x1b3/0x220
[ 3538.285577][T12439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3538.285605][T12439]  ? rw_verify_area+0x2a6/0x4d0
[ 3538.285626][T12439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3538.285651][T12439]  vfs_read+0x200/0xa30
[ 3538.285671][T12439]  ? fdget_pos+0x247/0x320
[ 3538.285704][T12439]  ? __pfx___mutex_lock+0x10/0x10
[ 3538.285730][T12439]  ? __pfx_vfs_read+0x10/0x10
[ 3538.285753][T12439]  ? __fget_files+0x2a/0x420
[ 3538.285785][T12439]  ? __fget_files+0x3a0/0x420
[ 3538.285811][T12439]  ? __fget_files+0x2a/0x420
[ 3538.285848][T12439]  ksys_read+0x145/0x250
[ 3538.285873][T12439]  ? __pfx_ksys_read+0x10/0x10
[ 3538.285907][T12439]  do_syscall_64+0xec/0xf80
[ 3538.285930][T12439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3538.285952][T12439]  ? trace_irq_disable+0x37/0x100
[ 3538.285981][T12439]  ? clear_bhb_loop+0x60/0xb0
[ 3538.286009][T12439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3538.286030][T12439] RIP: 0033:0x7f26ec98e15c
[ 3538.286051][T12439] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3538.286070][T12439] RSP: 002b:00007f26ed7c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3538.286094][T12439] RAX: ffffffffffffffda RBX: 00007f26ecbe5fa0 RCX: 00007f26ec98e15c
[ 3538.286111][T12439] RDX: 000000000000000f RSI: 00007f26ed7c20a0 RDI: 0000000000000005
[ 3538.286126][T12439] RBP: 00007f26ed7c2090 R08: 0000000000000000 R09: 0000000000000000
[ 3538.286141][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3538.286155][T12439] R13: 00007f26ecbe6038 R14: 00007f26ecbe5fa0 R15: 00007f26ecd0fa28
[ 3538.286199][T12439]  </TASK>
[ 3538.508872][ T5985] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 3538.980481][ T5985] usb 4-1: device descriptor read/64, error -71
[ 3539.408232][ T5985] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 3539.598330][ T5985] usb 4-1: device descriptor read/64, error -71
[ 3539.728741][ T5985] usb usb4-port1: attempt power cycle
[ 3540.146694][ T5985] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 3540.207531][ T5985] usb 4-1: device descriptor read/8, error -71
[ 3540.308247][ T4620] usb 6-1: new full-speed USB device number 120 using dummy_hcd
[ 3540.448209][ T5985] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 3540.449253][   T30] audit: type=1326 audit(1767191611.922:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.6.10528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fc1f8f749 code=0x0
[ 3540.486546][ T5985] usb 4-1: device descriptor read/8, error -71
[ 3540.546170][ T4620] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3540.575792][ T4620] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 3540.618314][ T4620] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 3540.686755][ T5985] usb usb4-port1: unable to enumerate USB device
[ 3540.693756][ T4620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3540.724773][ T4620] usb 6-1: config 0 descriptor??
[ 3540.759088][ T4620] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 3540.767546][ T4620] dvb-usb: bulk message failed: -22 (3/0)
[ 3540.782977][ T4620] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 3540.803027][ T4620] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 3540.816194][ T4620] usb 6-1: media controller created
[ 3540.832092][ T4620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3540.861423][ T4620] dvb-usb: bulk message failed: -22 (6/0)
[ 3540.870477][ T4620] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 3540.902628][ T4620] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input308
[ 3540.935238][ T4620] dvb-usb: schedule remote query interval to 150 msecs.
[ 3540.951634][ T4620] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 3541.124198][ T4620] dvb-usb: bulk message failed: -22 (1/0)
[ 3541.131349][ T4620] dvb-usb: error while querying for an remote control event.
[ 3541.302279][ T5985] dvb-usb: bulk message failed: -22 (1/0)
[ 3541.311496][ T5985] dvb-usb: error while querying for an remote control event.
[ 3541.527124][ T5985] dvb-usb: bulk message failed: -22 (1/0)
[ 3541.545179][ T5985] dvb-usb: error while querying for an remote control event.
[ 3541.711607][ T6705] dvb-usb: bulk message failed: -22 (1/0)
[ 3541.718893][ T6705] dvb-usb: error while querying for an remote control event.
[ 3541.791554][T12490] netlink: 'syz.3.10537': attribute type 5 has an invalid length.
[ 3541.799727][ T5985] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 3541.878285][ T6705] dvb-usb: bulk message failed: -22 (1/0)
[ 3541.884981][ T6705] dvb-usb: error while querying for an remote control event.
[ 3542.038507][ T5985] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 3542.047544][ T5985] usb 3-1: config 0 has no interface number 0
[ 3542.060078][ T6705] dvb-usb: bulk message failed: -22 (1/0)
[ 3542.066661][ T6705] dvb-usb: error while querying for an remote control event.
[ 3542.118063][ T5985] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3542.167206][ T5985] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3542.225792][ T5985] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3542.257717][ T6705] dvb-usb: bulk message failed: -22 (1/0)
[ 3542.285336][ T6705] dvb-usb: error while querying for an remote control event.
[ 3542.321761][ T5985] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 3542.339605][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3542.375881][ T5985] usb 3-1: config 0 descriptor??
[ 3542.506709][ T6705] dvb-usb: bulk message failed: -22 (1/0)
[ 3542.519925][ T6705] dvb-usb: error while querying for an remote control event.
[ 3542.793683][ T6705] dvb-usb: bulk message failed: -22 (1/0)
[ 3542.819220][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3542.838289][ T6705] dvb-usb: error while querying for an remote control event.
[ 3542.854874][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3542.935206][ T6716] usb 6-1: USB disconnect, device number 120
[ 3543.024874][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.036403][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.049803][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.160191][ T6716] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 3543.176271][T12506] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 3543.185646][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.185688][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.185720][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.185750][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.185781][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.185812][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.185843][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: unknown main item tag 0x0
[ 3543.298253][ T4694] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 3543.313483][ T5985] holtek_mouse 0003:04D9:A0C2.00AB: hidraw0: USB HID v0.03 Device [HID 04d9:a0c2] on usb-dummy_hcd.2-1/input1
[ 3543.498236][ T4694] usb 4-1: Using ep0 maxpacket: 16
[ 3543.562823][ T4694] usb 4-1: config 0 has no interfaces?
[ 3543.571763][ T4694] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3543.580995][ T4694] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3543.589309][ T4694] usb 4-1: Manufacturer: syz
[ 3543.632405][ T4694] usb 4-1: config 0 descriptor??
[ 3543.978886][T12501] netlink: 'syz.3.10539': attribute type 1 has an invalid length.
[ 3544.073880][T12510] syz.5.10541(12510): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 3544.101363][T12501] 8021q: adding VLAN 0 to HW filter on device bond5
[ 3544.405644][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10542'.
[ 3544.699929][ T4694] usb 3-1: USB disconnect, device number 88
[ 3544.922885][T12523] syzkaller1: entered promiscuous mode
[ 3544.934376][T12523] syzkaller1: entered allmulticast mode
[ 3545.218269][ T5985] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 3545.410241][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3545.431383][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3545.472565][ T5985] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 3545.492688][T12528] netlink: 'syz.7.10545': attribute type 7 has an invalid length.
[ 3545.511691][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3545.632117][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10546'.
[ 3545.721422][ T5985] usb 6-1: config 0 descriptor??
[ 3545.958590][ T4694] usb 4-1: USB disconnect, device number 32
[ 3546.363991][ T5985] hid-steam 0003:28DE:1142.00AC: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[ 3546.620691][T12523] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10544'.
[ 3546.638813][ T5985] usb 6-1: USB disconnect, device number 121
[ 3546.917768][T12557] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 3546.929809][T12557] team0: Port device batadv1 added
[ 3548.198425][T12578] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 3548.245286][T12578] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 3548.318316][ T6716] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 3548.332363][T12582] netlink: 'syz.7.10561': attribute type 7 has an invalid length.
[ 3548.401551][T12583] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10562'.
[ 3548.508851][ T6716] usb 6-1: Using ep0 maxpacket: 16
[ 3548.600349][ T6716] usb 6-1: config 0 has an invalid interface number: 216 but max is 0
[ 3548.626128][ T6716] usb 6-1: config 0 has no interface number 0
[ 3548.633129][ T6716] usb 6-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[ 3548.643613][ T6716] usb 6-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[ 3548.656560][ T6716] usb 6-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 3548.671543][ T6716] usb 6-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[ 3548.896349][ T6716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3548.966178][ T6716] usb 6-1: Product: syz
[ 3548.970681][ T6716] usb 6-1: Manufacturer: syz
[ 3548.976631][ T6716] usb 6-1: SerialNumber: syz
[ 3549.000468][ T6716] usb 6-1: config 0 descriptor??
[ 3549.022258][T12576] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3549.101628][T12576] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3549.160338][ T6716] usb-storage 6-1:0.216: USB Mass Storage device detected
[ 3549.199785][T12593] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 3549.207120][T12593] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 3549.285456][ T6716] scsi host1: usb-storage 6-1:0.216
[ 3549.319045][ T4694] usb 7-1: new full-speed USB device number 59 using dummy_hcd
[ 3549.602673][ T4694] usb 7-1: config 7 has an invalid interface number: 101 but max is 0
[ 3549.622163][ T4694] usb 7-1: config 7 has no interface number 0
[ 3549.644927][ T4694] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[ 3549.658208][ T4694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3549.707639][ T4694] usb 7-1: Product: syz
[ 3549.774754][ T4694] usb 7-1: Manufacturer: syz
[ 3549.788283][ T4694] usb 7-1: SerialNumber: syz
[ 3550.830465][ T4694] as10x_usb: device has been detected
[ 3550.836888][ T4694] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[ 3550.862759][T12597] usb 6-1: reset high-speed USB device number 122 using dummy_hcd
[ 3550.876227][ T4694] usb 7-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)...
[ 3550.930587][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10565'.
[ 3551.119414][ T4694] as10x_usb: error during firmware upload part1
[ 3551.151177][ T4694] Registered device Elgato EyeTV DTT Deluxe
[ 3551.175688][ T4694] usb 7-1: USB disconnect, device number 59
[ 3551.245740][ T4694] Unregistered device Elgato EyeTV DTT Deluxe
[ 3551.259516][ T4694] as10x_usb: device has been disconnected
[ 3552.206210][T12628] input: syz0 as /devices/virtual/input/input309
[ 3552.217768][T12628] FAULT_INJECTION: forcing a failure.
[ 3552.217768][T12628] name failslab, interval 1, probability 0, space 0, times 0
[ 3552.231590][T12628] CPU: 1 UID: 0 PID: 12628 Comm: syz.5.10575 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3552.231626][T12628] Tainted: [L]=SOFTLOCKUP
[ 3552.231635][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3552.231648][T12628] Call Trace:
[ 3552.231657][T12628]  <TASK>
[ 3552.231667][T12628]  dump_stack_lvl+0xe8/0x150
[ 3552.231701][T12628]  should_fail_ex+0x414/0x560
[ 3552.231741][T12628]  should_failslab+0xa8/0x100
[ 3552.231770][T12628]  __kmalloc_noprof+0xdf/0x800
[ 3552.231791][T12628]  ? kfree+0x4d/0x660
[ 3552.231819][T12628]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 3552.231855][T12628]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 3552.231887][T12628]  ? tomoyo_domain+0xd8/0x130
[ 3552.231922][T12628]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 3552.231954][T12628]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 3552.231981][T12628]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3552.232004][T12628]  ? __lock_acquire+0x6b6/0x2cf0
[ 3552.232041][T12628]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 3552.232087][T12628]  ? __fget_files+0x2a/0x420
[ 3552.232118][T12628]  ? __fget_files+0x2a/0x420
[ 3552.232143][T12628]  ? __fget_files+0x3a0/0x420
[ 3552.232170][T12628]  ? __fget_files+0x2a/0x420
[ 3552.232202][T12628]  security_file_ioctl+0xcb/0x2d0
[ 3552.232226][T12628]  __se_sys_ioctl+0x47/0x170
[ 3552.232249][T12628]  do_syscall_64+0xec/0xf80
[ 3552.232272][T12628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3552.232293][T12628]  ? trace_irq_disable+0x37/0x100
[ 3552.232322][T12628]  ? clear_bhb_loop+0x60/0xb0
[ 3552.232348][T12628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3552.232370][T12628] RIP: 0033:0x7f0c0118f749
[ 3552.232389][T12628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3552.232409][T12628] RSP: 002b:00007f0c02094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3552.232433][T12628] RAX: ffffffffffffffda RBX: 00007f0c013e5fa0 RCX: 00007f0c0118f749
[ 3552.232450][T12628] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000009
[ 3552.232465][T12628] RBP: 00007f0c02094090 R08: 0000000000000000 R09: 0000000000000000
[ 3552.232479][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3552.232492][T12628] R13: 00007f0c013e6038 R14: 00007f0c013e5fa0 R15: 00007f0c0150fa28
[ 3552.232527][T12628]  </TASK>
[ 3552.232536][T12628] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3552.704266][T12641] netdevsim netdevsim6: Direct firmware load for /
[ 3552.704266][T12641]  failed with error -2
[ 3552.726539][T12641] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[ 3552.726539][T12641] 
[ 3552.927778][ T5985] usb 6-1: USB disconnect, device number 122
[ 3552.998624][ T6705] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 3553.167093][ T6705] usb 4-1: device descriptor read/64, error -71
[ 3553.498229][ T6705] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 3553.632613][ T6705] usb 4-1: device descriptor read/64, error -71
[ 3553.749674][ T6705] usb usb4-port1: attempt power cycle
[ 3554.128262][ T6705] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 3554.186054][ T6705] usb 4-1: device descriptor read/8, error -71
[ 3554.498220][ T6705] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 3554.556864][ T6705] usb 4-1: device descriptor read/8, error -71
[ 3554.689113][ T6705] usb usb4-port1: unable to enumerate USB device
[ 3556.158342][ T6705] usb 6-1: new full-speed USB device number 123 using dummy_hcd
[ 3556.340115][ T6705] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 3556.364574][ T6705] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 3556.391736][ T6705] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[ 3556.488728][ T6705] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3556.518678][ T6705] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1
[ 3556.543747][ T6705] usb 6-1: Manufacturer: syz
[ 3556.558343][ T6705] usb 6-1: SerialNumber: syz
[ 3556.790424][ T6705] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[ 3556.833118][ T6705] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[ 3556.876510][ T6705] usb 6-1: USB disconnect, device number 123
[ 3556.948501][ T6716] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 3557.160235][ T6716] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 3557.252653][ T6716] usb 3-1: config 0 has no interface number 0
[ 3557.286572][ T6716] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 3557.328923][ T6716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3557.336986][ T6716] usb 3-1: Product: syz
[ 3557.368893][ T6716] usb 3-1: Manufacturer: syz
[ 3557.378382][ T6716] usb 3-1: SerialNumber: syz
[ 3557.399635][ T6716] usb 3-1: config 0 descriptor??
[ 3557.840169][T12679] netlink: 203340 bytes leftover after parsing attributes in process `syz.6.10587'.
[ 3557.897211][T12681] geneve2: entered promiscuous mode
[ 3557.999047][ T6716] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[ 3558.012382][ T6716] usb 3-1: USB disconnect, device number 89
[ 3558.463824][T12697] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 3558.767221][T12698] hfs: unable to load iocharset "io#harset"
[ 3558.898295][ T6705] usb 6-1: new full-speed USB device number 124 using dummy_hcd
[ 3559.083551][T12710] netlink: 9 bytes leftover after parsing attributes in process `syz.7.10593'.
[ 3559.172484][T12710] netlink: 9 bytes leftover after parsing attributes in process `syz.7.10593'.
[ 3559.227839][ T6705] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 3559.240749][ T6705] usb 6-1: not running at top speed; connect to a high speed hub
[ 3559.275683][ T6705] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1096, setting to 64
[ 3559.308306][ T6705] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 3559.340906][ T6705] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3559.364658][ T6705] usb 6-1: config 1 interface 0 has no altsetting 0
[ 3559.390511][ T6705] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3559.407125][ T6705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3559.416268][ T6705] usb 6-1: Product: syz
[ 3559.461149][ T6705] usb 6-1: Manufacturer: syz
[ 3559.501825][ T6705] usb 6-1: SerialNumber: syz
[ 3559.573342][T12697] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3559.581224][T12697] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3561.494139][T12737] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 3561.815712][ T6705] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[ 3561.838401][ T6716] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 3561.887836][ T6705] usb 6-1: USB disconnect, device number 124
[ 3562.001125][ T6716] usb 7-1: config 0 has an invalid interface number: 153 but max is 0
[ 3562.012082][ T6716] usb 7-1: config 0 has no interface number 0
[ 3562.078464][ T6716] usb 7-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[ 3562.128294][ T6716] usb 7-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 3562.162897][ T6716] usb 7-1: config 0 interface 153 has no altsetting 0
[ 3562.190644][ T6716] usb 7-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[ 3562.210436][ T6716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3562.210629][T12743] kAFS: unable to lookup cell '�'
[ 3562.255406][ T6716] usb 7-1: Product: syz
[ 3562.282417][ T6716] usb 7-1: Manufacturer: syz
[ 3562.297333][ T6716] usb 7-1: SerialNumber: syz
[ 3562.323644][ T6716] usb 7-1: config 0 descriptor??
[ 3562.555352][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10602'.
[ 3562.587357][ T6716] hub 7-1:0.153: bad descriptor, ignoring hub
[ 3562.596078][ T6716] hub 7-1:0.153: probe with driver hub failed with error -5
[ 3562.607930][ T6716] sierra 7-1:0.153: Sierra USB modem converter detected
[ 3562.662944][ T6716] usb 7-1: USB disconnect, device number 60
[ 3562.679184][ T6716] sierra 7-1:0.153: device disconnected
[ 3562.878230][ T4694] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 3562.897225][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10611'.
[ 3562.926710][T12756] openvswitch: netlink: Message has 8 unknown bytes.
[ 3563.041951][ T4694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3563.055365][ T4694] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[ 3563.065627][ T6716] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 3563.073880][ T4694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3563.091366][ T4694] usb 6-1: config 0 descriptor??
[ 3563.233800][ T6716] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 3563.250305][ T6716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3563.266582][ T6716] usb 3-1: Product: syz
[ 3563.276785][ T6716] usb 3-1: Manufacturer: syz
[ 3563.281767][ T6716] usb 3-1: SerialNumber: syz
[ 3563.289405][T12764] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10614'.
[ 3563.302732][T12751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3563.306936][ T6716] usb 3-1: config 0 descriptor??
[ 3563.327529][ T6716] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 3563.336501][T12751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3563.353932][T12751] binder: BINDER_SET_CONTEXT_MGR already set
[ 3563.361497][T12751] binder: 12750:12751 ioctl 4018620d 200000000040 returned -16
[ 3563.453540][T12766] input: syz0 as /devices/virtual/input/input310
[ 3563.587005][ T4694] usbhid 6-1:0.0: can't add hid device: -71
[ 3563.611631][ T4694] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 3563.636213][ T4694] usb 6-1: USB disconnect, device number 125
[ 3564.851584][ T6705] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 3565.111701][ T6705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3565.130857][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3565.142846][ T6705] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 3565.161513][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3565.187416][ T6705] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[ 3565.208210][ T6705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3565.219721][ T6705] usb 6-1: config 0 descriptor??
[ 3565.603374][ T6716] gspca_sunplus: reg_r err -71
[ 3565.609257][ T6716] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 3565.621430][ T6716] usb 3-1: USB disconnect, device number 90
[ 3565.867377][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10623'.
[ 3566.185597][T12798] syzkaller0: entered promiscuous mode
[ 3566.201527][T12798] syzkaller0: entered allmulticast mode
[ 3566.310556][T12798] tipc: Started in network mode
[ 3566.325960][T12798] tipc: Node identity be0253139a5b, cluster identity 4711
[ 3566.337887][T12798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3566.363195][T12799] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 3566.492652][T12797] tipc: Resetting bearer <eth:syzkaller0>
[ 3566.530049][T12797] tipc: Disabling bearer <eth:syzkaller0>
[ 3566.898414][ T6716] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 3567.070510][ T6716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3567.080698][ T6716] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[ 3567.089994][ T6716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3567.101035][ T6716] usb 7-1: config 0 descriptor??
[ 3567.297723][T12812] FAULT_INJECTION: forcing a failure.
[ 3567.297723][T12812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3567.330583][T12812] CPU: 0 UID: 0 PID: 12812 Comm: syz.2.10630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3567.330618][T12812] Tainted: [L]=SOFTLOCKUP
[ 3567.330626][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3567.330638][T12812] Call Trace:
[ 3567.330648][T12812]  <TASK>
[ 3567.330659][T12812]  dump_stack_lvl+0xe8/0x150
[ 3567.330694][T12812]  should_fail_ex+0x414/0x560
[ 3567.330732][T12812]  _copy_from_user+0x2d/0xb0
[ 3567.330760][T12812]  do_ipv6_setsockopt+0x23e/0x2eb0
[ 3567.330789][T12812]  ? get_pid_task+0x20/0x1f0
[ 3567.330818][T12812]  ? aa_label_sk_perm+0x4c4/0x610
[ 3567.330849][T12812]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 3567.330876][T12812]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 3567.330900][T12812]  ? get_pid_task+0x20/0x1f0
[ 3567.330924][T12812]  ? get_pid_task+0x20/0x1f0
[ 3567.330962][T12812]  ? __lock_acquire+0x6b6/0x2cf0
[ 3567.331000][T12812]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 3567.331021][T12812]  ? aa_sk_perm+0x15f/0x920
[ 3567.331047][T12812]  ? aa_sk_perm+0x7ee/0x920
[ 3567.331078][T12812]  ? __pfx_aa_sk_perm+0x10/0x10
[ 3567.331107][T12812]  ? __fget_files+0x2a/0x420
[ 3567.331132][T12812]  ? aa_sock_opt_perm+0xff/0x1a0
[ 3567.331174][T12812]  ipv6_setsockopt+0x59/0x170
[ 3567.331202][T12812]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 3567.331250][T12812]  do_sock_setsockopt+0x17c/0x1b0
[ 3567.331278][T12812]  __x64_sys_setsockopt+0x13f/0x1b0
[ 3567.331307][T12812]  do_syscall_64+0xec/0xf80
[ 3567.331328][T12812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3567.331348][T12812]  ? trace_irq_disable+0x37/0x100
[ 3567.331377][T12812]  ? clear_bhb_loop+0x60/0xb0
[ 3567.331403][T12812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3567.331425][T12812] RIP: 0033:0x7efd9958f749
[ 3567.331444][T12812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3567.331463][T12812] RSP: 002b:00007efd9a385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 3567.331487][T12812] RAX: ffffffffffffffda RBX: 00007efd997e5fa0 RCX: 00007efd9958f749
[ 3567.331503][T12812] RDX: 0000000000000013 RSI: 0000000000000029 RDI: 0000000000000003
[ 3567.331517][T12812] RBP: 00007efd9a385090 R08: 0000000000000049 R09: 0000000000000000
[ 3567.331530][T12812] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 3567.331545][T12812] R13: 00007efd997e6038 R14: 00007efd997e5fa0 R15: 00007efd9990fa28
[ 3567.331576][T12812]  </TASK>
[ 3567.580655][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10631'.
[ 3567.593000][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3567.602684][T12814] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 3567.603187][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3567.681822][T12805] binder: BINDER_SET_CONTEXT_MGR already set
[ 3567.687867][T12805] binder: 12804:12805 ioctl 4018620d 200000000040 returned -16
[ 3567.962129][ T6716] usbhid 7-1:0.0: can't add hid device: -71
[ 3568.010538][ T6716] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 3568.032056][ T4694] usb 6-1: USB disconnect, device number 126
[ 3568.055246][ T6716] usb 7-1: USB disconnect, device number 61
[ 3568.451027][T12835] vivid-000: disconnect
[ 3568.542833][T12834] vivid-000: reconnect
[ 3569.092938][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10642'.
[ 3569.388730][ T6705] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 3569.465980][T12860] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10645'.
[ 3569.578606][ T6705] usb 4-1: Using ep0 maxpacket: 8
[ 3569.591658][ T6705] usb 4-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[ 3569.603157][ T6705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3569.613301][ T6705] usb 4-1: Product: syz
[ 3569.617526][ T6705] usb 4-1: Manufacturer: syz
[ 3569.624847][ T6705] usb 4-1: SerialNumber: syz
[ 3569.634406][ T6705] usb 4-1: config 0 descriptor??
[ 3569.649698][ T6705] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[ 3569.758585][ T6709] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 3569.857609][ T6705] pwc: send_video_command error -71
[ 3569.866351][ T6705] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3569.874644][ T6705] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 3569.884214][ T5985] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 3569.897422][ T6705] usb 4-1: USB disconnect, device number 37
[ 3569.908219][ T6709] usb 6-1: Using ep0 maxpacket: 32
[ 3569.921541][ T6709] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 3569.932650][ T6709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3569.946910][ T6709] usb 6-1: config 0 descriptor??
[ 3570.051552][ T5985] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[ 3570.060236][ T5985] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 3570.073214][ T5985] usb 7-1: config 220 has no interface number 2
[ 3570.081027][ T5985] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 3570.094750][ T5985] usb 7-1: config 220 interface 0 has no altsetting 0
[ 3570.101658][ T5985] usb 7-1: config 220 interface 76 has no altsetting 0
[ 3570.108681][ T5985] usb 7-1: config 220 interface 1 has no altsetting 0
[ 3570.119185][ T5985] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 3570.128604][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3570.136665][ T5985] usb 7-1: Product: syz
[ 3570.141320][ T5985] usb 7-1: Manufacturer: syz
[ 3570.146040][ T5985] usb 7-1: SerialNumber: syz
[ 3570.156102][ T6709] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 3570.190957][ T6709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3570.225393][ T6709] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 3570.233655][ T6709] usb 6-1: media controller created
[ 3570.276505][ T6709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3570.393689][ T5985] usb 7-1: selecting invalid altsetting 0
[ 3570.432538][ T5985] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 3570.460464][ T5985] uvcvideo 7-1:220.0: No valid video chain found.
[ 3570.497142][ T5985] usb 7-1: selecting invalid altsetting 0
[ 3570.505909][ T5985] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[ 3570.514354][ T6709] DVB: Unable to find symbol dib7000p_attach()
[ 3570.524312][ T6709] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 3570.534551][ T5985] usb 7-1: USB disconnect, device number 62
[ 3570.678323][ T6709] rc_core: IR keymap rc-dib0700-rc5 not found
[ 3570.702467][ T6709] Registered IR keymap rc-empty
[ 3570.707740][ T6709] dvb-usb: could not initialize remote control.
[ 3570.720369][ T6709] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 3570.752544][ T6709] usb 6-1: USB disconnect, device number 127
[ 3570.834049][ T6709] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 3571.241586][ T6709] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 3571.328219][ T6716] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 3571.863594][ T6709] usb 6-1: Using ep0 maxpacket: 32
[ 3571.880709][ T6709] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3571.958355][ T6709] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3572.092730][ T6716] usb 3-1: Using ep0 maxpacket: 32
[ 3572.116079][ T6716] usb 3-1: config 0 has an invalid interface number: 4 but max is 1
[ 3572.124403][T12395] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 3572.144705][ T6709] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3572.158163][ T6709] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 3572.300010][ T6716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3572.308511][ T6709] usb 6-1: Product: syz
[ 3572.314374][ T6709] usb 6-1: Manufacturer: syz
[ 3572.330015][T12395] usb 7-1: Using ep0 maxpacket: 16
[ 3572.346049][ T6709] hub 6-1:4.0: USB hub found
[ 3572.352518][ T6716] usb 3-1: config 0 has no interface number 1
[ 3572.376479][T12395] usb 7-1: config 0 has no interfaces?
[ 3572.396004][T12395] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3572.663722][ T6716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3572.777002][T12395] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3572.796285][ T6716] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[ 3572.808701][T12395] usb 7-1: Manufacturer: syz
[ 3572.827048][ T6716] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 3572.845043][T12395] usb 7-1: config 0 descriptor??
[ 3572.896747][ T6716] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[ 3572.943899][ T6716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3572.952526][ T6716] usb 3-1: Product: syz
[ 3572.956741][ T6716] usb 3-1: Manufacturer: syz
[ 3572.961740][ T6716] usb 3-1: SerialNumber: syz
[ 3572.986446][ T6716] usb 3-1: config 0 descriptor??
[ 3573.033798][T12893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3573.116809][T12891] netlink: 'syz.6.10654': attribute type 1 has an invalid length.
[ 3573.146438][T12893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3573.184306][ T6709] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[ 3573.304072][T12891] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3573.353178][T12897] bond1: (slave gretap1): making interface the new active one
[ 3573.365817][T12897] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 3573.531276][ T6716] cxacru 3-1:0.0: cxacru_bind: interface has incorrect endpoints
[ 3573.539364][ T6716] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 3573.559104][ T6716] cxacru 3-1:0.4: cxacru_bind: interface has incorrect endpoints
[ 3573.574282][ T6716] cxacru 3-1:0.4: usbatm_usb_probe: bind failed: -19!
[ 3573.599697][ T6716] usb 3-1: USB disconnect, device number 91
[ 3574.785621][ T6709] usb 7-1: USB disconnect, device number 63
[ 3574.992372][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10660'.
[ 3575.238551][ T6716] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 3575.343187][T12921] FAULT_INJECTION: forcing a failure.
[ 3575.343187][T12921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3575.363651][T12921] CPU: 1 UID: 0 PID: 12921 Comm: syz.2.10662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3575.363689][T12921] Tainted: [L]=SOFTLOCKUP
[ 3575.363698][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3575.363713][T12921] Call Trace:
[ 3575.363723][T12921]  <TASK>
[ 3575.363733][T12921]  dump_stack_lvl+0xe8/0x150
[ 3575.363768][T12921]  should_fail_ex+0x414/0x560
[ 3575.363809][T12921]  _copy_to_user+0x31/0xb0
[ 3575.363840][T12921]  simple_read_from_buffer+0xe1/0x170
[ 3575.363874][T12921]  proc_fail_nth_read+0x1b3/0x220
[ 3575.363902][T12921]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3575.363930][T12921]  ? rw_verify_area+0x2a6/0x4d0
[ 3575.363951][T12921]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3575.363977][T12921]  vfs_read+0x200/0xa30
[ 3575.363997][T12921]  ? fdget_pos+0x247/0x320
[ 3575.364030][T12921]  ? __pfx___mutex_lock+0x10/0x10
[ 3575.364056][T12921]  ? __pfx_vfs_read+0x10/0x10
[ 3575.364079][T12921]  ? __fget_files+0x2a/0x420
[ 3575.364112][T12921]  ? __fget_files+0x3a0/0x420
[ 3575.364140][T12921]  ? __fget_files+0x2a/0x420
[ 3575.364178][T12921]  ksys_read+0x145/0x250
[ 3575.364203][T12921]  ? __pfx_ksys_read+0x10/0x10
[ 3575.364237][T12921]  do_syscall_64+0xec/0xf80
[ 3575.364260][T12921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3575.364282][T12921]  ? trace_irq_disable+0x37/0x100
[ 3575.364312][T12921]  ? clear_bhb_loop+0x60/0xb0
[ 3575.364347][T12921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3575.364369][T12921] RIP: 0033:0x7efd9958e15c
[ 3575.364390][T12921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3575.364415][T12921] RSP: 002b:00007efd9a385030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3575.364440][T12921] RAX: ffffffffffffffda RBX: 00007efd997e5fa0 RCX: 00007efd9958e15c
[ 3575.364458][T12921] RDX: 000000000000000f RSI: 00007efd9a3850a0 RDI: 0000000000000004
[ 3575.364472][T12921] RBP: 00007efd9a385090 R08: 0000000000000000 R09: 0000000000000000
[ 3575.364486][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3575.364500][T12921] R13: 00007efd997e6038 R14: 00007efd997e5fa0 R15: 00007efd9990fa28
[ 3575.364536][T12921]  </TASK>
[ 3575.838223][ T6716] usb 7-1: Using ep0 maxpacket: 8
[ 3575.847122][ T6716] usb 7-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[ 3575.877744][ T6716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3575.898190][ T6716] usb 7-1: Product: syz
[ 3575.951705][ T6716] usb 7-1: Manufacturer: syz
[ 3575.971422][ T6716] usb 7-1: SerialNumber: syz
[ 3576.149274][ T6716] usb 7-1: config 0 descriptor??
[ 3576.176883][ T6716] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[ 3576.371152][ T6716] pwc: send_video_command error -71
[ 3576.376441][ T6716] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3576.399784][ T6716] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[ 3576.435455][ T6716] usb 7-1: USB disconnect, device number 64
[ 3577.009699][T12934] FAULT_INJECTION: forcing a failure.
[ 3577.009699][T12934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3577.085066][T12934] CPU: 0 UID: 0 PID: 12934 Comm: syz.6.10666 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3577.085103][T12934] Tainted: [L]=SOFTLOCKUP
[ 3577.085112][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3577.085126][T12934] Call Trace:
[ 3577.085135][T12934]  <TASK>
[ 3577.085145][T12934]  dump_stack_lvl+0xe8/0x150
[ 3577.085180][T12934]  should_fail_ex+0x414/0x560
[ 3577.085220][T12934]  fpu__restore_sig+0x1bb/0x10d0
[ 3577.085264][T12934]  ? __pfx_fpu__restore_sig+0x10/0x10
[ 3577.085326][T12934]  __ia32_sys_rt_sigreturn+0x704/0x860
[ 3577.085370][T12934]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[ 3577.085401][T12934]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 3577.085471][T12934]  ? __task_pid_nr_ns+0x28/0x490
[ 3577.085513][T12934]  do_syscall_64+0xec/0xf80
[ 3577.085536][T12934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3577.085557][T12934]  ? trace_irq_disable+0x37/0x100
[ 3577.085587][T12934]  ? clear_bhb_loop+0x60/0xb0
[ 3577.085613][T12934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3577.085635][T12934] RIP: 0033:0x7f2fc1f8f747
[ 3577.085655][T12934] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[ 3577.085674][T12934] RSP: 002b:00007f2fc01ee038 EFLAGS: 00000246
[ 3577.085695][T12934] RAX: 0000000000000013 RBX: 00007f2fc21e5fa0 RCX: 00007f2fc1f8f749
[ 3577.085712][T12934] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[ 3577.085726][T12934] RBP: 00007f2fc01ee090 R08: 0000000000000000 R09: 0000000000000000
[ 3577.085741][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3577.085755][T12934] R13: 00007f2fc21e6038 R14: 00007f2fc21e5fa0 R15: 00007f2fc230fa28
[ 3577.085790][T12934]  </TASK>
[ 3577.268507][ T6716] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 3577.450346][ T6716] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 3577.460576][ T6716] usb 4-1: config 0 interface 0 has no altsetting 0
[ 3577.486644][ T6716] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 3577.561592][ T6716] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 3577.578227][ T6716] usb 4-1: Product: syz
[ 3577.594066][ T6716] usb 4-1: Manufacturer: syz
[ 3577.603004][ T6716] usb 4-1: SerialNumber: syz
[ 3577.623969][ T6716] usb 4-1: config 0 descriptor??
[ 3577.644736][ T6716] usb 4-1: selecting invalid altsetting 0
[ 3577.987527][ T6705] usb 4-1: USB disconnect, device number 38
[ 3578.627060][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10671'.
[ 3578.705564][ T4526] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 3578.745401][ T4526] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 3578.788889][ T4526] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 3578.811777][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 3578.818342][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3578.840676][ T4526] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 3578.984531][ T6716] usb 6-1: USB disconnect, device number 2
[ 3579.194769][T12958] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10673'.
[ 3579.777049][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10676'.
[ 3579.788471][ T6705] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 3579.949212][ T6705] usb 6-1: Using ep0 maxpacket: 16
[ 3579.960563][ T6705] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3579.971178][ T6705] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3579.979993][ T6705] usb 6-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[ 3579.991533][ T6705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3580.036167][ T6705] usb 6-1: config 0 descriptor??
[ 3580.068719][ T4694] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 3580.228343][ T4694] usb 3-1: Using ep0 maxpacket: 8
[ 3580.247246][ T4694] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[ 3580.283543][ T4694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3580.324228][ T4694] usb 3-1: Product: syz
[ 3580.332470][ T4694] usb 3-1: Manufacturer: syz
[ 3580.337148][ T4694] usb 3-1: SerialNumber: syz
[ 3580.378805][ T4694] usb 3-1: config 0 descriptor??
[ 3580.400311][ T4694] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[ 3580.493117][T12966] kvm: Disabled LAPIC found during irq injection
[ 3580.512386][T12966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3580.534748][T12966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3580.599898][ T4694] pwc: send_video_command error -71
[ 3580.605178][ T4694] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3580.651869][ T4694] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 3580.691803][ T6705] usbhid 6-1:0.0: can't add hid device: -71
[ 3580.700425][ T6705] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 3580.728900][ T6705] usb 6-1: USB disconnect, device number 3
[ 3580.745694][ T4694] usb 3-1: USB disconnect, device number 92
[ 3580.888568][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[ 3581.429634][ T4694] usb 3-1: new full-speed USB device number 93 using dummy_hcd
[ 3581.975639][ T4694] usb 3-1: config 4 has an invalid interface number: 88 but max is 0
[ 3581.997368][ T4694] usb 3-1: config 4 has no interface number 0
[ 3582.033683][ T4694] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[ 3582.068161][ T4694] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[ 3582.098151][ T4694] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[ 3582.140983][ T4694] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 3582.200329][ T4694] usb 3-1: config 4 interface 88 has no altsetting 0
[ 3582.233013][ T4694] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[ 3582.258467][ T4694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3582.276921][ T4694] usb 3-1: Product: syz
[ 3582.403301][ T4694] usb 3-1: Manufacturer: syz
[ 3582.438296][ T4694] usb 3-1: SerialNumber: syz
[ 3582.477495][T12978] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 3582.702325][T12990] vlan2: entered promiscuous mode
[ 3582.707533][T12990] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode
[ 3582.715646][ T5985] usb 3-1: USB disconnect, device number 93
[ 3582.811622][ T6705] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 3582.884777][T12941] syz.6.10668 (12941): drop_caches: 1
[ 3583.020112][ T6705] usb 4-1: Using ep0 maxpacket: 16
[ 3583.034706][ T6705] usb 4-1: config 0 has no interfaces?
[ 3583.069745][ T6705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3583.101350][ T6705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3583.118590][ T6705] usb 4-1: Manufacturer: syz
[ 3583.160759][ T6705] usb 4-1: config 0 descriptor??
[ 3583.383379][T13000] FAULT_INJECTION: forcing a failure.
[ 3583.383379][T13000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3583.418779][T12989] netlink: 'syz.3.10680': attribute type 1 has an invalid length.
[ 3583.506088][T12989] 8021q: adding VLAN 0 to HW filter on device bond6
[ 3583.619895][T13000] CPU: 0 UID: 0 PID: 13000 Comm: syz.6.10683 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3583.619933][T13000] Tainted: [L]=SOFTLOCKUP
[ 3583.619940][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3583.619950][T13000] Call Trace:
[ 3583.619957][T13000]  <TASK>
[ 3583.619965][T13000]  dump_stack_lvl+0xe8/0x150
[ 3583.619990][T13000]  should_fail_ex+0x414/0x560
[ 3583.620019][T13000]  _copy_from_user+0x2d/0xb0
[ 3583.620040][T13000]  keyctl_dh_compute+0xbb/0x160
[ 3583.620065][T13000]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 3583.620099][T13000]  __se_sys_keyctl+0x423/0x910
[ 3583.620118][T13000]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 3583.620137][T13000]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3583.620159][T13000]  ? __fget_files+0x3a0/0x420
[ 3583.620184][T13000]  ? fput+0xa0/0xd0
[ 3583.620206][T13000]  ? ksys_write+0x22a/0x250
[ 3583.620224][T13000]  ? __pfx_ksys_write+0x10/0x10
[ 3583.620244][T13000]  ? __x64_sys_keyctl+0x20/0xc0
[ 3583.620262][T13000]  do_syscall_64+0xec/0xf80
[ 3583.620278][T13000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3583.620294][T13000]  ? trace_irq_disable+0x37/0x100
[ 3583.620316][T13000]  ? clear_bhb_loop+0x60/0xb0
[ 3583.620335][T13000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3583.620351][T13000] RIP: 0033:0x7f2fc1f8f749
[ 3583.620366][T13000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3583.620380][T13000] RSP: 002b:00007f2fc01ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 3583.620396][T13000] RAX: ffffffffffffffda RBX: 00007f2fc21e6180 RCX: 00007f2fc1f8f749
[ 3583.620408][T13000] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000017
[ 3583.620419][T13000] RBP: 00007f2fc01ac090 R08: 0000200000000000 R09: 0000000000000000
[ 3583.620430][T13000] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001
[ 3583.620440][T13000] R13: 00007f2fc21e6218 R14: 00007f2fc21e6180 R15: 00007f2fc230fa28
[ 3583.620463][T13000]  </TASK>
[ 3584.714730][T13015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10688'.
[ 3584.978216][ T4694] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 3585.150039][ T4694] usb 3-1: Using ep0 maxpacket: 8
[ 3585.187488][ T4694] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[ 3585.200612][ T4694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3585.220657][ T4694] usb 3-1: Product: syz
[ 3585.230457][ T4694] usb 3-1: Manufacturer: syz
[ 3585.249838][ T4694] usb 3-1: SerialNumber: syz
[ 3585.273580][ T4694] usb 3-1: config 0 descriptor??
[ 3585.296022][ T4694] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[ 3585.522451][ T4694] pwc: send_video_command error -71
[ 3585.558778][ T4694] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3585.591041][ T4694] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 3585.650190][ T4694] usb 3-1: USB disconnect, device number 94
[ 3585.846056][T13022] netlink: 'syz.6.10689': attribute type 6 has an invalid length.
[ 3586.138717][T13025] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10690'.
[ 3586.186597][T13025] loop4: detected capacity change from 0 to 7
[ 3586.208712][T13025] buffer_io_error: 14 callbacks suppressed
[ 3586.211535][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.252969][ T4694] usb 4-1: USB disconnect, device number 39
[ 3586.278383][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.290304][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.368770][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.446810][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.457283][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.467334][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.475914][T13025] ldm_validate_partition_table(): Disk read failed.
[ 3586.489525][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.557285][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.592825][T13035] netdevsim netdevsim6: Direct firmware load for /
[ 3586.592825][T13035]  failed with error -2
[ 3586.607756][T13035] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[ 3586.607756][T13035] 
[ 3586.624818][T13025] Buffer I/O error on dev loop4, logical block 0, async page read
[ 3586.643161][T13025] Dev loop4: unable to read RDB block 0
[ 3587.362236][T13025]  loop4: unable to read partition table
[ 3587.499638][T13025] loop4: partition table beyond EOD, truncated
[ 3587.511104][T13025] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[ 3588.590679][T13048] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10696'.
[ 3588.686259][   T30] audit: type=1326 audit(1767191660.152:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.738396][   T30] audit: type=1326 audit(1767191660.192:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.762484][   T30] audit: type=1326 audit(1767191660.192:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.790373][   T30] audit: type=1326 audit(1767191660.192:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.816692][   T30] audit: type=1326 audit(1767191660.192:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.842060][   T30] audit: type=1326 audit(1767191660.192:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.870649][   T30] audit: type=1326 audit(1767191660.192:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.909306][T13050] FAULT_INJECTION: forcing a failure.
[ 3588.909306][T13050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3588.922891][   T30] audit: type=1326 audit(1767191660.192:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3588.946104][T13050] CPU: 1 UID: 0 PID: 13050 Comm: syz.2.10697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3588.946141][T13050] Tainted: [L]=SOFTLOCKUP
[ 3588.946150][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3588.946165][T13050] Call Trace:
[ 3588.946175][T13050]  <TASK>
[ 3588.946185][T13050]  dump_stack_lvl+0xe8/0x150
[ 3588.946227][T13050]  should_fail_ex+0x414/0x560
[ 3588.946268][T13050]  _copy_from_user+0x2d/0xb0
[ 3588.946297][T13050]  ___sys_sendmsg+0x158/0x2a0
[ 3588.946329][T13050]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3588.946394][T13050]  ? __fget_files+0x2a/0x420
[ 3588.946422][T13050]  ? __fget_files+0x3a0/0x420
[ 3588.946462][T13050]  __x64_sys_sendmsg+0x19b/0x260
[ 3588.946492][T13050]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3588.946529][T13050]  ? __pfx_ksys_write+0x10/0x10
[ 3588.946563][T13050]  do_syscall_64+0xec/0xf80
[ 3588.946587][T13050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3588.946609][T13050]  ? trace_irq_disable+0x37/0x100
[ 3588.946639][T13050]  ? clear_bhb_loop+0x60/0xb0
[ 3588.946666][T13050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3588.946689][T13050] RIP: 0033:0x7efd9958f749
[ 3588.946709][T13050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3588.946730][T13050] RSP: 002b:00007efd9a385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3588.946755][T13050] RAX: ffffffffffffffda RBX: 00007efd997e5fa0 RCX: 00007efd9958f749
[ 3588.946772][T13050] RDX: 0000000020000040 RSI: 0000200000000740 RDI: 0000000000000003
[ 3588.946788][T13050] RBP: 00007efd9a385090 R08: 0000000000000000 R09: 0000000000000000
[ 3588.946804][T13050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3588.946818][T13050] R13: 00007efd997e6038 R14: 00007efd997e5fa0 R15: 00007efd9990fa28
[ 3588.946854][T13050]  </TASK>
[ 3589.135466][   T30] audit: type=1326 audit(1767191660.192:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3589.159409][   T30] audit: type=1326 audit(1767191660.202:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.10696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24d8f749 code=0x7ffc0000
[ 3589.543509][T13066] FAULT_INJECTION: forcing a failure.
[ 3589.543509][T13066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3589.557881][T12395] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[ 3589.573904][T13066] CPU: 1 UID: 0 PID: 13066 Comm: syz.6.10703 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3589.573942][T13066] Tainted: [L]=SOFTLOCKUP
[ 3589.573952][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3589.573966][T13066] Call Trace:
[ 3589.573975][T13066]  <TASK>
[ 3589.573985][T13066]  dump_stack_lvl+0xe8/0x150
[ 3589.574020][T13066]  should_fail_ex+0x414/0x560
[ 3589.574061][T13066]  _copy_from_user+0x2d/0xb0
[ 3589.574090][T13066]  input_event_from_user+0xb2/0x280
[ 3589.574116][T13066]  ? __pfx_input_event_from_user+0x10/0x10
[ 3589.574155][T13066]  evdev_write+0x2a6/0x480
[ 3589.574186][T13066]  ? __pfx_evdev_write+0x10/0x10
[ 3589.574211][T13066]  ? bpf_lsm_file_permission+0x9/0x20
[ 3589.574235][T13066]  ? security_file_permission+0x75/0x290
[ 3589.574261][T13066]  ? rw_verify_area+0x255/0x4d0
[ 3589.574282][T13066]  ? __pfx_evdev_write+0x10/0x10
[ 3589.574307][T13066]  vfs_write+0x27e/0xb30
[ 3589.574339][T13066]  ? __pfx_vfs_write+0x10/0x10
[ 3589.574363][T13066]  ? __fget_files+0x2a/0x420
[ 3589.574395][T13066]  ? __fget_files+0x2a/0x420
[ 3589.574422][T13066]  ? __fget_files+0x3a0/0x420
[ 3589.574458][T13066]  ? __fget_files+0x2a/0x420
[ 3589.574496][T13066]  ksys_write+0x145/0x250
[ 3589.574521][T13066]  ? __pfx_ksys_write+0x10/0x10
[ 3589.574556][T13066]  do_syscall_64+0xec/0xf80
[ 3589.574579][T13066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3589.574600][T13066]  ? trace_irq_disable+0x37/0x100
[ 3589.574629][T13066]  ? clear_bhb_loop+0x60/0xb0
[ 3589.574656][T13066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3589.574679][T13066] RIP: 0033:0x7f2fc1f8f749
[ 3589.574700][T13066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3589.574720][T13066] RSP: 002b:00007f2fc01ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3589.574744][T13066] RAX: ffffffffffffffda RBX: 00007f2fc21e5fa0 RCX: 00007f2fc1f8f749
[ 3589.574762][T13066] RDX: 0000000000000373 RSI: 0000200000000040 RDI: 0000000000000003
[ 3589.574778][T13066] RBP: 00007f2fc01ee090 R08: 0000000000000000 R09: 0000000000000000
[ 3589.574793][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3589.574807][T13066] R13: 00007f2fc21e6038 R14: 00007f2fc21e5fa0 R15: 00007f2fc230fa28
[ 3589.574844][T13066]  </TASK>
[ 3589.890635][T12395] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[ 3589.899395][T12395] usb 4-1: config 0 has no interface number 0
[ 3589.905559][T12395] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B
[ 3589.917884][T12395] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 3589.934604][T12395] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0
[ 3589.947227][T12395] usb 4-1: config 0 interface 200 has no altsetting 0
[ 3589.956754][T12395] usb 4-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39
[ 3589.966141][T12395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3589.974284][T12395] usb 4-1: Product: syz
[ 3589.978599][T12395] usb 4-1: Manufacturer: syz
[ 3589.984346][T12395] usb 4-1: SerialNumber: syz
[ 3589.993986][T12395] usb 4-1: config 0 descriptor??
[ 3590.214380][T12395] usb 4-1: USB disconnect, device number 40
[ 3591.013477][T13090] FAULT_INJECTION: forcing a failure.
[ 3591.013477][T13090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3591.027116][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.5.10710 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3591.027153][T13090] Tainted: [L]=SOFTLOCKUP
[ 3591.027159][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3591.027169][T13090] Call Trace:
[ 3591.027177][T13090]  <TASK>
[ 3591.027184][T13090]  dump_stack_lvl+0xe8/0x150
[ 3591.027209][T13090]  should_fail_ex+0x414/0x560
[ 3591.027239][T13090]  _copy_from_iter+0x3b0/0x1630
[ 3591.027265][T13090]  ? __pfx__copy_from_iter+0x10/0x10
[ 3591.027286][T13090]  ? __pfx__copy_from_iter+0x10/0x10
[ 3591.027304][T13090]  ? page_copy_sane+0x16a/0x280
[ 3591.027323][T13090]  copy_page_from_iter+0xdd/0x170
[ 3591.027343][T13090]  skb_copy_datagram_from_iter+0x306/0x720
[ 3591.027374][T13090]  packet_sendmsg+0x3797/0x5080
[ 3591.027403][T13090]  ? aa_label_snxprint+0xa70/0xa70
[ 3591.027420][T13090]  ? __lock_acquire+0x6b6/0x2cf0
[ 3591.027443][T13090]  ? unwind_next_frame+0xa5/0x23d0
[ 3591.027474][T13090]  ? aa_sk_perm+0x15f/0x920
[ 3591.027494][T13090]  ? __pfx_packet_sendmsg+0x10/0x10
[ 3591.027514][T13090]  ? aa_sk_perm+0x7ee/0x920
[ 3591.027534][T13090]  ? __lock_acquire+0x6b6/0x2cf0
[ 3591.027550][T13090]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[ 3591.027577][T13090]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 3591.027599][T13090]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3591.027614][T13090]  ? __pfx_packet_sendmsg+0x10/0x10
[ 3591.027636][T13090]  __sock_sendmsg+0x21c/0x270
[ 3591.027661][T13090]  ____sys_sendmsg+0x505/0x820
[ 3591.027684][T13090]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3591.027709][T13090]  ? import_iovec+0x74/0xa0
[ 3591.027731][T13090]  ___sys_sendmsg+0x21f/0x2a0
[ 3591.027753][T13090]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3591.027796][T13090]  ? __fget_files+0x2a/0x420
[ 3591.027816][T13090]  ? __fget_files+0x3a0/0x420
[ 3591.027843][T13090]  __x64_sys_sendmsg+0x19b/0x260
[ 3591.027864][T13090]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3591.027889][T13090]  ? __pfx_ksys_write+0x10/0x10
[ 3591.027913][T13090]  do_syscall_64+0xec/0xf80
[ 3591.027933][T13090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3591.027948][T13090]  ? trace_irq_disable+0x37/0x100
[ 3591.027970][T13090]  ? clear_bhb_loop+0x60/0xb0
[ 3591.027993][T13090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3591.028009][T13090] RIP: 0033:0x7f0c0118f749
[ 3591.028024][T13090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3591.028039][T13090] RSP: 002b:00007f0c02094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3591.028056][T13090] RAX: ffffffffffffffda RBX: 00007f0c013e5fa0 RCX: 00007f0c0118f749
[ 3591.028087][T13090] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 3591.028101][T13090] RBP: 00007f0c02094090 R08: 0000000000000000 R09: 0000000000000000
[ 3591.028115][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3591.028129][T13090] R13: 00007f0c013e6038 R14: 00007f0c013e5fa0 R15: 00007f0c0150fa28
[ 3591.028161][T13090]  </TASK>
[ 3591.323511][ T5843] Bluetooth: hci4: command 0x0406 tx timeout
[ 3592.468190][ T6709] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 3592.639535][ T6709] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3592.661064][ T6709] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3592.688320][ T6709] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3592.722323][ T6709] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3592.771343][ T6709] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3592.786138][ T6709] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3592.803072][ T6709] usb 7-1: Product: syz
[ 3592.823252][ T6709] usb 7-1: Manufacturer: syz
[ 3592.877723][ T6709] cdc_wdm 7-1:1.0: skipping garbage
[ 3592.898282][ T6709] cdc_wdm 7-1:1.0: skipping garbage
[ 3592.903717][ T6709] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 3593.058182][T12395] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 3593.078184][ T6705] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 3593.121859][ T6709] usb 7-1: USB disconnect, device number 65
[ 3593.230112][T12395] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3593.230403][ T6705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3593.253756][ T6705] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 3593.264419][ T6705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3593.264445][T12395] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3593.264482][T12395] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3593.360365][ T6705] usb 4-1: config 0 descriptor??
[ 3593.374728][T12395] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3593.396500][T12395] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 3593.405903][T12395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3593.425565][T12395] usb 3-1: config 0 descriptor??
[ 3593.577849][ T6705] usbhid 4-1:0.0: can't add hid device: -71
[ 3593.589933][ T6705] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 3593.615617][ T6705] usb 4-1: USB disconnect, device number 41
[ 3593.830554][T13121] program syz.5.10720 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3593.957496][T13125] mmap: syz.5.10721 (13125): VmData 37474304 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[ 3594.073399][T13127] netlink: 196 bytes leftover after parsing attributes in process `syz.5.10722'.
[ 3594.113032][ T6705] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 3594.291107][ T6705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3594.302501][ T6705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3594.327779][ T6705] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3594.347554][ T6705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3594.367965][ T6705] usb 4-1: config 0 descriptor??
[ 3594.810926][ T6705] plantronics 0003:047F:FFFF.00AD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 3595.237416][T13137] fuse: Unknown parameter '1(c'
[ 3595.628917][ T6716] usb 4-1: USB disconnect, device number 42
[ 3595.654591][ T6705] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 3595.700172][ T6709] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[ 3595.801897][T12395] usbhid 3-1:0.0: can't add hid device: -71
[ 3595.818252][ T6705] usb 7-1: Using ep0 maxpacket: 32
[ 3595.824315][T12395] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3595.837253][ T6705] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 3595.860742][T12395] usb 3-1: USB disconnect, device number 95
[ 3595.867030][ T6705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3595.876008][ T6709] usb 6-1: Invalid ep0 maxpacket: 64
[ 3595.922799][ T6705] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 3596.018546][ T6709] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[ 3596.168528][ T6709] usb 6-1: Invalid ep0 maxpacket: 64
[ 3596.179074][ T6709] usb usb6-port1: attempt power cycle
[ 3596.229022][T12395] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 3596.320382][ T6705] gspca_nw80x: reg_r err -71
[ 3596.325506][ T6705] nw80x 7-1:3.0: probe with driver nw80x failed with error -71
[ 3596.375243][T13155] FAULT_INJECTION: forcing a failure.
[ 3596.375243][T13155] name failslab, interval 1, probability 0, space 0, times 0
[ 3596.389427][T13155] CPU: 1 UID: 0 PID: 13155 Comm: syz.3.10728 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3596.389471][T13155] Tainted: [L]=SOFTLOCKUP
[ 3596.389480][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3596.389495][T13155] Call Trace:
[ 3596.389504][T13155]  <TASK>
[ 3596.389515][T13155]  dump_stack_lvl+0xe8/0x150
[ 3596.389549][T13155]  should_fail_ex+0x414/0x560
[ 3596.389590][T13155]  should_failslab+0xa8/0x100
[ 3596.389620][T13155]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 3596.389659][T13155]  ? __alloc_skb+0x1dc/0x3a0
[ 3596.389681][T13155]  ? tipc_own_addr+0x45/0x2a0
[ 3596.389708][T13155]  __alloc_skb+0x1dc/0x3a0
[ 3596.389736][T13155]  tipc_msg_create+0x51/0x4d0
[ 3596.389777][T13155]  tipc_group_proto_xmit+0xce/0x790
[ 3596.389809][T13155]  tipc_group_cong+0x496/0x590
[ 3596.389831][T13155]  ? tipc_dest_pop+0x19c/0x230
[ 3596.389855][T13155]  ? __tipc_sendmsg+0x13b1/0x2940
[ 3596.389885][T13155]  ? tipc_sendmsg+0x55/0x70
[ 3596.389921][T13155]  ? __pfx_tipc_group_cong+0x10/0x10
[ 3596.389961][T13155]  ? tipc_dest_find+0x102/0x120
[ 3596.389989][T13155]  tipc_send_group_unicast+0x2f3/0x500
[ 3596.390061][T13155]  ? __pfx_tipc_send_group_unicast+0x10/0x10
[ 3596.390098][T13155]  ? __pfx_woken_wake_function+0x10/0x10
[ 3596.390134][T13155]  ? kfree+0x1c0/0x660
[ 3596.390172][T13155]  ? tipc_dest_pop+0x19c/0x230
[ 3596.390201][T13155]  __tipc_sendmsg+0x13c8/0x2940
[ 3596.390253][T13155]  ? __pfx___tipc_sendmsg+0x10/0x10
[ 3596.390289][T13155]  ? __lock_acquire+0x6b6/0x2cf0
[ 3596.390310][T13155]  ? aa_label_sk_perm+0x4c4/0x610
[ 3596.390343][T13155]  ? __lock_acquire+0x6b6/0x2cf0
[ 3596.390367][T13155]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 3596.390393][T13155]  ? __lock_acquire+0x6b6/0x2cf0
[ 3596.390421][T13155]  ? __lock_acquire+0x6b6/0x2cf0
[ 3596.390499][T13155]  ? __local_bh_enable_ip+0xd0/0x130
[ 3596.390529][T13155]  tipc_sendmsg+0x55/0x70
[ 3596.390561][T13155]  ? __pfx_tipc_sendmsg+0x10/0x10
[ 3596.390594][T13155]  __sock_sendmsg+0x21c/0x270
[ 3596.390631][T13155]  ____sys_sendmsg+0x505/0x820
[ 3596.390665][T13155]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3596.390702][T13155]  ? import_iovec+0x74/0xa0
[ 3596.390734][T13155]  ___sys_sendmsg+0x21f/0x2a0
[ 3596.390763][T13155]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3596.390829][T13155]  ? __fget_files+0x2a/0x420
[ 3596.390857][T13155]  ? __fget_files+0x3a0/0x420
[ 3596.390896][T13155]  __x64_sys_sendmsg+0x19b/0x260
[ 3596.390926][T13155]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3596.390964][T13155]  ? __pfx_ksys_write+0x10/0x10
[ 3596.391000][T13155]  do_syscall_64+0xec/0xf80
[ 3596.391022][T13155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3596.391044][T13155]  ? trace_irq_disable+0x37/0x100
[ 3596.391074][T13155]  ? clear_bhb_loop+0x60/0xb0
[ 3596.391101][T13155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3596.391124][T13155] RIP: 0033:0x7f9e24d8f749
[ 3596.391145][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3596.391165][T13155] RSP: 002b:00007f9e25bd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3596.391188][T13155] RAX: ffffffffffffffda RBX: 00007f9e24fe6090 RCX: 00007f9e24d8f749
[ 3596.391205][T13155] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000008
[ 3596.391218][T13155] RBP: 00007f9e25bd9090 R08: 0000000000000000 R09: 0000000000000000
[ 3596.391231][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3596.391242][T13155] R13: 00007f9e24fe6128 R14: 00007f9e24fe6090 R15: 00007f9e2510fa28
[ 3596.391278][T13155]  </TASK>
[ 3596.798987][ T6705] usb 7-1: USB disconnect, device number 66
[ 3597.092208][T12395] usb 3-1: Using ep0 maxpacket: 16
[ 3597.105758][ T6709] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[ 3597.124104][T12395] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 3597.147069][T12395] usb 3-1: config 0 has no interface number 0
[ 3597.173426][T12395] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 3597.227584][T12395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3597.279503][ T6709] usb 6-1: Invalid ep0 maxpacket: 64
[ 3597.308776][T12395] usb 3-1: Product: syz
[ 3597.312981][T12395] usb 3-1: Manufacturer: syz
[ 3597.317585][T12395] usb 3-1: SerialNumber: syz
[ 3597.329128][T12395] usb 3-1: config 0 descriptor??
[ 3597.342789][T12395] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 3597.408238][ T6709] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[ 3597.466605][ T6709] usb 6-1: Invalid ep0 maxpacket: 64
[ 3597.572384][ T6709] usb usb6-port1: unable to enumerate USB device
[ 3597.848667][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10729'.
[ 3597.880296][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10729'.
[ 3598.129144][ T6716] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[ 3598.323973][ T6716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3598.335080][ T6716] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3598.361444][ T6716] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3598.388472][ T6716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3598.585858][T12395] gspca_spca1528: reg_w err -71
[ 3598.592018][T12395] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 3598.606603][T12395] usb 3-1: USB disconnect, device number 96
[ 3598.619166][ T6716] usb 4-1: usb_control_msg returned -32
[ 3598.630382][ T6716] usbtmc 4-1:16.0: can't read capabilities
[ 3598.670113][T13176] netdevsim netdevsim5: Direct firmware load for /
[ 3598.670113][T13176]  failed with error -2
[ 3598.680842][T13176] netdevsim netdevsim5: Falling back to sysfs fallback for: /
[ 3598.680842][T13176] 
[ 3598.985391][T13177] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10730'.
[ 3599.437788][T13184] netlink: 'syz.6.10736': attribute type 8 has an invalid length.
[ 3599.445870][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10736'.
[ 3599.523242][T13184] bond0: entered promiscuous mode
[ 3599.539696][T13184] gretap0: entered promiscuous mode
[ 3599.556773][T13184] team_slave_1: entered promiscuous mode
[ 3599.570563][T13184] hsr1: entered promiscuous mode
[ 3601.155627][T12395] usb 4-1: USB disconnect, device number 43
[ 3601.694438][T13211] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10744'.
[ 3601.993489][T13220] binder: 13218:13220 ioctl c0306201 2000000003c0 returned -14
[ 3603.244539][T13244] vivid-000: disconnect
[ 3603.266139][T13242] vivid-000: reconnect
[ 3603.875263][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10755'.
[ 3603.998563][ T6716] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 3604.433216][ T6716] usb 4-1: Using ep0 maxpacket: 16
[ 3604.453530][ T6716] usb 4-1: config 0 has no interfaces?
[ 3604.468670][ T6716] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3604.479318][T13264] netlink: 576 bytes leftover after parsing attributes in process `syz.2.10756'.
[ 3604.517947][ T6716] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3604.560233][ T6716] usb 4-1: Manufacturer: syz
[ 3604.578693][ T6716] usb 4-1: config 0 descriptor??
[ 3604.856093][T13258] netlink: 'syz.3.10753': attribute type 1 has an invalid length.
[ 3604.933188][T13258] 8021q: adding VLAN 0 to HW filter on device bond7
[ 3605.408192][T12395] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 3605.558168][T12395] usb 3-1: Using ep0 maxpacket: 32
[ 3605.565739][T12395] usb 3-1: no configurations
[ 3605.572190][T12395] usb 3-1: can't read configurations, error -22
[ 3605.627616][T13286] binder: 13285:13286 ioctl c01064b5 200000000040 returned -22
[ 3605.698978][   T31] INFO: task kworker/u8:23:31159 blocked for more than 143 seconds.
[ 3605.707167][   T31]       Tainted: G             L      syzkaller #0
[ 3605.714795][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3605.720719][T12395] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 3605.758220][   T31] task:kworker/u8:23   state:D stack:22264 pid:31159 tgid:31159 ppid:2      task_flags:0x4208160 flags:0x00080000
[ 3605.799507][   T31] Workqueue: netns cleanup_net
[ 3605.814650][   T31] Call Trace:
[ 3605.828150][   T31]  <TASK>
[ 3605.834152][   T31]  __schedule+0x149b/0x4fd0
[ 3605.844998][   T31]  ? __pfx___schedule+0x10/0x10
[ 3605.859548][   T31]  ? schedule+0x91/0x360
[ 3605.865972][   T31]  schedule+0x165/0x360
[ 3605.873680][   T31]  afs_cell_purge+0x3f1/0x540
[ 3605.880557][   T31]  ? __pfx_afs_cell_purge+0x10/0x10
[ 3605.888518][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[ 3605.896625][   T31]  ? __pfx_var_wake_function+0x10/0x10
[ 3605.905581][   T31]  ? __timer_delete_sync+0x179/0x1d0
[ 3605.913670][   T31]  afs_net_exit+0x50/0x100
[ 3605.920521][   T31]  ops_undo_list+0x49a/0x990
[ 3605.927396][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 3605.929570][T12395] usb 3-1: Using ep0 maxpacket: 32
[ 3605.939734][T12395] usb 3-1: no configurations
[ 3605.944780][T12395] usb 3-1: can't read configurations, error -22
[ 3605.955030][T12395] usb usb3-port1: attempt power cycle
[ 3605.975303][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 3605.983046][   T31]  cleanup_net+0x4d8/0x7a0
[ 3605.990139][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 3605.997461][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 3606.006748][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 3606.016373][   T31]  process_scheduled_works+0xad1/0x1770
[ 3606.025678][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3606.035322][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 3606.043479][   T31]  worker_thread+0x8a0/0xda0
[ 3606.050917][   T31]  ? __kthread_parkme+0x7b/0x200
[ 3606.062679][   T31]  kthread+0x711/0x8a0
[ 3606.073168][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 3606.083345][   T31]  ? __pfx_kthread+0x10/0x10
[ 3606.100670][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3606.106629][   T31]  ? __pfx_kthread+0x10/0x10
[ 3606.111925][   T31]  ret_from_fork+0x510/0xa50
[ 3606.116860][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3606.122594][   T31]  ? __switch_to+0xc9e/0x1480
[ 3606.127798][   T31]  ? __pfx_kthread+0x10/0x10
[ 3606.133015][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3606.138407][   T31]  </TASK>
[ 3606.141788][   T31] 
[ 3606.141788][   T31] Showing all locks held in the system:
[ 3606.155512][   T31] 1 lock held by khungtaskd/31:
[ 3606.161407][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 3606.174317][   T31] 2 locks held by getty/5592:
[ 3606.184576][   T31]  #0: ffff88814e3450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 3606.196287][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[ 3606.207300][   T31] 3 locks held by kworker/u8:23/31159:
[ 3606.213179][   T31]  #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 3606.224826][   T31]  #1: ffffc9000c0dfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 3606.236305][   T31]  #2: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0
[ 3606.246459][   T31] 8 locks held by kworker/1:3/12395:
[ 3606.253000][   T31]  #0: ffff88801faaf948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 3606.266257][   T31]  #1: ffffc90004b1fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 3606.281863][   T31]  #2: ffff888143705198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0
[ 3606.298362][   T31]  #3: ffff888143718518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0
[ 3606.310638][   T31]  #4: ffff888142ff1368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0
[ 3606.324065][   T31]  #5: ffffffff8ebd0970 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1850
[ 3606.335340][T12395] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 3606.346350][   T31]  #6: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[ 3606.357764][   T31]  #7: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: __queue_work+0x1a2/0xf90
[ 3606.368451][   T31] 1 lock held by syz.6.10762/13282:
[ 3606.369429][T12395] usb 3-1: Using ep0 maxpacket: 32
[ 3606.373906][   T31]  #0: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 3606.380796][T12395] usb 3-1: no configurations
[ 3606.394713][T12395] usb 3-1: can't read configurations, error -22
[ 3606.397551][   T31] 1 lock held by syz.7.10761/13285:
[ 3606.406390][   T31]  #0: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 3606.421058][   T31] 
[ 3606.423467][   T31] =============================================
[ 3606.423467][   T31] 
[ 3606.437263][   T31] NMI backtrace for cpu 0
[ 3606.437287][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3606.437317][   T31] Tainted: [L]=SOFTLOCKUP
[ 3606.437325][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3606.437338][   T31] Call Trace:
[ 3606.437347][   T31]  <TASK>
[ 3606.437356][   T31]  dump_stack_lvl+0xe8/0x150
[ 3606.437388][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 3606.437419][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3606.437449][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 3606.437476][   T31]  sys_info+0x135/0x170
[ 3606.437496][   T31]  watchdog+0xf95/0xfe0
[ 3606.437525][   T31]  ? watchdog+0x20a/0xfe0
[ 3606.437554][   T31]  kthread+0x711/0x8a0
[ 3606.437580][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3606.437603][   T31]  ? __pfx_kthread+0x10/0x10
[ 3606.437640][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3606.437665][   T31]  ? __pfx_kthread+0x10/0x10
[ 3606.437706][   T31]  ret_from_fork+0x510/0xa50
[ 3606.437726][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3606.437741][   T31]  ? __switch_to+0xc9e/0x1480
[ 3606.437768][   T31]  ? __pfx_kthread+0x10/0x10
[ 3606.437792][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3606.437828][   T31]  </TASK>
[ 3606.437839][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 3606.566540][    C1] NMI backtrace for cpu 1
[ 3606.566561][    C1] CPU: 1 UID: 0 PID: 13288 Comm: syz.7.10761 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3606.566588][    C1] Tainted: [L]=SOFTLOCKUP
[ 3606.566595][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3606.566608][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70
[ 3606.566638][    C1] Code: 24 65 48 8b 0c 25 08 10 80 92 65 8b 15 58 18 bf 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 74 2c <8b> 91 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b 32 48
[ 3606.566655][    C1] RSP: 0018:ffffc90003677458 EFLAGS: 00000246
[ 3606.566673][    C1] RAX: ffffffff820c5691 RBX: 800000003c4a6007 RCX: ffff888033a68000
[ 3606.566688][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900036777d8
[ 3606.566700][    C1] RBP: ffffc900036776f0 R08: ffffea0000f12973 R09: 1ffffd40001e252e
[ 3606.566715][    C1] R10: dffffc0000000000 R11: fffff940001e252f R12: ffffea0000f12980
[ 3606.566729][    C1] R13: 00007f26ec0a3000 R14: ffff8880114aa518 R15: ffffea0000f12980
[ 3606.566744][    C1] FS:  0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000
[ 3606.566760][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3606.566773][    C1] CR2: 0000200000257030 CR3: 0000000077d60000 CR4: 00000000003526f0
[ 3606.566790][    C1] Call Trace:
[ 3606.566798][    C1]  <TASK>
[ 3606.566805][    C1]  unmap_page_range+0x1131/0x4170
[ 3606.566848][    C1]  ? mas_next_slot+0xc20/0xcf0
[ 3606.566870][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 3606.566896][    C1]  ? mas_find+0xb0e/0xd30
[ 3606.566912][    C1]  ? unmap_vmas+0x144/0x580
[ 3606.566934][    C1]  unmap_vmas+0x399/0x580
[ 3606.566959][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 3606.566993][    C1]  exit_mmap+0x239/0xb10
[ 3606.567010][    C1]  ? uprobe_clear_state+0x20f/0x290
[ 3606.567031][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 3606.567046][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 3606.567074][    C1]  ? __pfx_exit_aio+0x10/0x10
[ 3606.567106][    C1]  ? uprobe_clear_state+0x27c/0x290
[ 3606.567127][    C1]  __mmput+0x118/0x430
[ 3606.567147][    C1]  exit_mm+0x169/0x230
[ 3606.567174][    C1]  do_exit+0x627/0x22f0
[ 3606.567201][    C1]  ? cgroup1_freezing+0x20/0x350
[ 3606.567225][    C1]  ? __pfx_do_exit+0x10/0x10
[ 3606.567251][    C1]  ? cgroup1_freezing+0x20/0x350
[ 3606.567273][    C1]  ? cgroup1_freezing+0x20/0x350
[ 3606.567299][    C1]  do_group_exit+0x21c/0x2d0
[ 3606.567326][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3606.567357][    C1]  get_signal+0x1285/0x1340
[ 3606.567387][    C1]  arch_do_signal_or_restart+0x9a/0x7a0
[ 3606.567418][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 3606.567458][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[ 3606.567482][    C1]  exit_to_user_mode_loop+0x87/0x4e0
[ 3606.567503][    C1]  ? rcu_is_watching+0x15/0xb0
[ 3606.567527][    C1]  do_syscall_64+0x2b7/0xf80
[ 3606.567546][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3606.567566][    C1]  ? trace_irq_disable+0x37/0x100
[ 3606.567591][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 3606.567612][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3606.567631][    C1] RIP: 0033:0x7f26ec98f749
[ 3606.567646][    C1] Code: Unable to access opcode bytes at 0x7f26ec98f71f.
[ 3606.567657][    C1] RSP: 002b:00007f26ed7800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 3606.567676][    C1] RAX: fffffffffffffe00 RBX: 00007f26ecbe6188 RCX: 00007f26ec98f749
[ 3606.567690][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f26ecbe6188
[ 3606.567703][    C1] RBP: 00007f26ecbe6180 R08: 0000000000000000 R09: 0000000000000000
[ 3606.567716][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3606.567728][    C1] R13: 00007f26ecbe6218 R14: 00007f26ecd0f940 R15: 00007f26ecd0fa28
[ 3606.567752][    C1]  </TASK>
[ 3606.938058][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 3606.944980][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3606.955692][   T31] Tainted: [L]=SOFTLOCKUP
[ 3606.960024][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3606.970095][   T31] Call Trace:
[ 3606.973422][   T31]  <TASK>
[ 3606.976390][   T31]  vpanic+0x1e0/0x670
[ 3606.980420][   T31]  panic+0xb9/0xc0
[ 3606.984201][   T31]  ? __pfx_panic+0x10/0x10
[ 3606.988661][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 3606.994256][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 3607.000462][   T31]  watchdog+0xfdf/0xfe0
[ 3607.004662][   T31]  ? watchdog+0x20a/0xfe0
[ 3607.009055][   T31]  kthread+0x711/0x8a0
[ 3607.013188][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3607.017911][   T31]  ? __pfx_kthread+0x10/0x10
[ 3607.022730][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3607.027988][   T31]  ? __pfx_kthread+0x10/0x10
[ 3607.032625][   T31]  ret_from_fork+0x510/0xa50
[ 3607.037265][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3607.042526][   T31]  ? __switch_to+0xc9e/0x1480
[ 3607.047251][   T31]  ? __pfx_kthread+0x10/0x10
[ 3607.051891][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3607.056710][   T31]  </TASK>
[ 3607.060371][   T31] Kernel Offset: disabled
[ 3607.064713][   T31] Rebooting in 86400 seconds..