last executing test programs:

6m18.918408612s ago: executing program 2 (id=1174):
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x3)
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file1'}, 0x8)
write$binfmt_misc(r2, &(0x7f0000000040)='\t', 0x27)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000001900)=""/4096)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080007400000000408000640000000040900012373797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x7c}}, 0x0)
syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2)
fchdir(0xffffffffffffffff)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0)

6m18.747205531s ago: executing program 2 (id=1176):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_secret(0x0)
pipe2(&(0x7f0000000040), 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64=r0], 0x20)

6m18.319281851s ago: executing program 2 (id=1180):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f0000000040))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fanotify_init(0x200, 0x0)
r4 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6)
ppoll(&(0x7f0000000080)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0)
r5 = dup(r4)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000003b40)={0x14, &(0x7f0000003a00)={0x40, 0x9, 0xe8, {0xe8, 0x11, "042d30038051ff1194b5ee867aa76251cf5426e738487d6be2e0d5fef6f89a06cecd0bf8002fe4bbdb51ad20305da0eec1a93a1132a8cf2fe2a1409e8feb24240963e207f29ffa239ebec71e0478638351d6f7538060d4f97320fa491dddf8799b7e1a2120ac278829e12d5800957d024e63c96b567fce590d1fe5503ec955acf02d02304ac5ae8c2b05ef92c5bcc5e13b42ab6bf3e69af4af959549581891325cc4686580bcd771edb475094a97d2727fe7e1f5d980da0071ce75c74fc856835d8390ad568d9c2971a92ed7cc4a0a3a82494d3527052ce2959c6d56010dcf412a9231c7c1f1"}}, &(0x7f0000003b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000003ec0)={0x2c, &(0x7f0000003b80)={0x40, 0xe, 0x2d, "719d04b1c2e15b0d22a54b04106d98e7eca172281bc0972e8469094cbd447c6b4498d1319ef2eb52db653edda9"}, &(0x7f0000003bc0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000003c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003c40)={0xc0, 0x5, 0x1, 'f'}, &(0x7f0000003e80)={0x40, 0x5, 0x2, "f430"}})
syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, &(0x7f0000000140)={0x0, 0x200, 0x6})
fanotify_mark(r3, 0x1, 0x4800104c, r5, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000003e40)={0x1, 0x0, &(0x7f0000003c80)=""/85, &(0x7f0000003d00)=""/182, &(0x7f0000003dc0)=""/113, 0x80a0000})
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f0000003980)={0x48, 0x4, 0x0, 0x0, 0x4c, &(0x7f0000003900)="1204d2aaf63623c3ce070bdbec8b763e6f897bafb73e2d7ffe0481fd6d402319a85c7518f1297740bf4be691ca1df4a60e6d9857f8527edbd26ac7f8aa7d711a7de259786d7da88f825c6594", 0x10001})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = dup(r10)
getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r12})
sendmsg$nl_route_sched_retired(r8, &(0x7f0000003880)={&(0x7f0000000140), 0xc, &(0x7f0000003840)={&(0x7f0000000180)=@newchain={0x369c, 0x64, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x2, 0x4}, {0xffff, 0xb}, {0x10, 0x4}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xe}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9bc4}]}}, @f_rsvp={{0x9}, {0x41c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x1, 0xb45d, 0x7, 0x8, 0x6, 0x3, 0x80000000, 0xff, 0x10000, 0x4, 0x80, 0x1, 0x4, 0x2, 0x2, 0x6, 0x78, 0xe, 0x3, 0x5, 0x4, 0x21, 0x372, 0xdc, 0xffffffff, 0x9ab, 0x6, 0x5, 0x7fff, 0x4, 0x3, 0x55, 0x1, 0x4, 0x800, 0xb8e9, 0x3, 0x7, 0x7, 0x80000001, 0x7, 0x8000, 0x400000, 0x7, 0x400, 0x8, 0x7, 0x5, 0x1000, 0x10, 0xb, 0x1, 0x7, 0x1, 0xfffffffc, 0x0, 0x10, 0x10, 0xfffffffd, 0x0, 0x2, 0x80000000, 0x393, 0x2, 0x7, 0x95, 0xe, 0x1, 0xfff, 0x4, 0x401, 0x1, 0xc, 0x4117, 0x4, 0x3, 0x3, 0xff, 0x80000001, 0x9, 0x6, 0xfffffff9, 0x9, 0x9, 0x7, 0x1, 0x7ff, 0xffffffff, 0x9, 0xd, 0x7, 0x8, 0x1, 0x7f, 0x52c1, 0xca, 0x4, 0x187, 0x5, 0x3, 0x7, 0xda, 0x9, 0xec, 0x9, 0x5, 0x1, 0xfffffffe, 0xfffffffc, 0x9, 0x2181, 0x0, 0x9, 0x9, 0x7fffffff, 0x1, 0x0, 0x3, 0xffffffff, 0xfffffffa, 0x1, 0x9, 0x5, 0x10, 0x4c1, 0x4, 0x41, 0x3, 0x7, 0x8000, 0x5, 0x8, 0x4, 0xf0, 0xffffffff, 0x78, 0x1, 0x0, 0x7, 0x9, 0x1, 0x8, 0x1, 0x1, 0x10001, 0x9, 0x4, 0xffff, 0x1000, 0x3, 0x0, 0x5, 0x5, 0x3, 0x3, 0xef9, 0x6, 0xe23, 0x43e39beb, 0x2, 0x5, 0x5, 0x1, 0x92ef, 0xfffffff7, 0x1000, 0x1, 0x6, 0x5, 0x81, 0x8, 0x6, 0x408, 0x4, 0x2, 0x400, 0x8000, 0x3, 0x9, 0x1, 0x8, 0x5, 0x7ff, 0xaff0, 0x3, 0x3ff, 0xdbc, 0xbb5e, 0x7, 0x8, 0xfff, 0xe00000, 0x7457, 0x0, 0xe2e1, 0x7, 0x5, 0x3, 0x6, 0x9, 0xfff, 0x8001, 0xe50d, 0x2, 0x1, 0xf, 0x7fffffff, 0x0, 0x30, 0x101, 0x8a, 0x4, 0xe0000, 0x4, 0x10000, 0x6, 0x100, 0x9, 0xf6, 0x1, 0x1, 0x10, 0x7bf, 0x8, 0x5, 0x5, 0x1, 0x3, 0x40, 0x4, 0xc0d8, 0xe, 0xe7, 0x3, 0x1ff, 0x4, 0x300000, 0x6, 0x2, 0x9, 0xfffffffa, 0xb, 0x7fff, 0x5, 0x80000000, 0xe1, 0x2, 0xaa10, 0x1, 0x4, 0x1, 0x1, 0x8, 0x9, 0xfffffffb]}]}]}}, @f_rsvp={{0x9}, {0xce4, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x3, 0x7}, {0xfffffeff, 0x6}, 0x29, 0x60, 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x54, 0x8e}, {0x12, 0x0, 0x7}, 0xff, 0xd, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x800, 0x2}, {0x8b49, 0x7, 0x199}, 0x88, 0x5}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_POLICE={0x1c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_POLICE={0xc54, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xae, 0x4, 0x8, 0xf, 0xfffff801, {0x14, 0x2, 0x7, 0x4, 0x6, 0x5}, {0x1, 0x0, 0x400, 0x7896, 0x3ff, 0x6}, 0xae7, 0xfffffffb}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xf, 0x6851, 0x8, 0x3ff, 0x5bd, 0x1, 0x2b, 0x2, 0xffff0000, 0x3, 0x1, 0x8, 0x2, 0x5, 0x9, 0x422, 0xa, 0x7, 0x5, 0x8, 0x7, 0xffffffff, 0x6, 0x6, 0xfffffffe, 0x6, 0x10, 0x7, 0x6, 0x4, 0x0, 0x0, 0x2, 0x3, 0xfffffff8, 0x7, 0x7, 0xbc, 0x10, 0x8000, 0xb9dc, 0x6, 0xb, 0x0, 0x2, 0xcf01, 0x8, 0x4, 0xffff, 0x80000000, 0xa, 0x80000001, 0x8, 0xc, 0x7, 0x1, 0x200, 0x5, 0xc, 0x60096a5a, 0x9, 0xffffffff, 0x2, 0x6, 0x0, 0x200, 0x8, 0x200, 0x6691, 0x3, 0x3ff, 0x6, 0x401, 0x961b, 0x7f, 0x401, 0x80008000, 0x9, 0xfffffffc, 0x0, 0xf, 0xf5, 0x7, 0xfffffffe, 0x0, 0x3a9, 0xe, 0x7, 0x40, 0xfff, 0x7f, 0x400, 0x2, 0x3, 0x6, 0x6, 0x9, 0x7fff, 0x8, 0x53, 0xc, 0x7, 0x3a18, 0x3, 0x3, 0x0, 0xff, 0xa8, 0x8, 0x4, 0x400, 0xffffffff, 0x2, 0x7, 0x2, 0x3c, 0x6, 0x40, 0x40, 0xacb, 0xaf8b, 0x10000, 0x9, 0x6b3, 0x8001, 0x2, 0x0, 0x2, 0x8, 0x80, 0x7, 0x9, 0x0, 0x65c5, 0x2, 0x2, 0x3384c731, 0x6, 0x1, 0x1, 0x9, 0x4, 0x0, 0x8, 0x7, 0x7fffffff, 0x64, 0x1, 0xff, 0x17e, 0x2, 0x0, 0x4d, 0x3, 0x8, 0x4, 0x10000, 0x5, 0x2, 0x7fffffff, 0x3, 0x5, 0x4, 0x0, 0x63b, 0x58b, 0xa000000, 0x8, 0x10001, 0x0, 0x7, 0x980, 0x800, 0xfffff511, 0x0, 0x3, 0x80000000, 0x80000001, 0xffff80dc, 0x1, 0x5, 0x9, 0x7, 0x4, 0x5fc, 0x4e2, 0x5, 0x7, 0x1f, 0x5, 0x8, 0x80000000, 0xffffffff, 0xb3b9, 0x80000000, 0x8, 0x4, 0x1, 0x4, 0x1, 0xe837, 0x3ff, 0x4f, 0xd8, 0x7, 0x6, 0x8, 0x5, 0x80000000, 0x8, 0xffff, 0x2, 0x1, 0x5, 0xfff, 0x40, 0x5, 0x5, 0x4, 0x0, 0x8, 0x6263a9d5, 0x2, 0x7, 0xa123efa9, 0xcf1d, 0x8cd7cdf, 0xaa4, 0x6, 0x37fc, 0x1ff, 0xaa5, 0x1, 0x5, 0x7, 0xa, 0x8, 0x3, 0xf, 0x9, 0x7, 0x1, 0x8, 0x5, 0x3, 0x8001, 0x75e3f983, 0x3, 0x9, 0x5, 0x3, 0x0, 0x0, 0x7e9, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f0a7a46, 0x6, 0x62a, 0x3, 0x8, 0x7, 0x2, 0xd3, 0x9, 0xc8, 0x6, 0xd00a, 0xe, 0x7, 0x9, 0xdc, 0x3a5, 0xffffffff, 0x12, 0xa, 0x43f6, 0xdae, 0x7fffffff, 0x9b6b, 0x8, 0x20b, 0x6, 0xc, 0x1, 0x3, 0x4, 0x5, 0x80009, 0xe9, 0x4, 0xc534, 0x8000, 0x2, 0x80000000, 0x5, 0x6, 0xff, 0x4, 0x52, 0x5, 0x7, 0x7, 0xf, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5, 0x7fff, 0x8, 0xffffff3c, 0xe, 0xffffffff, 0x8, 0x1, 0x4, 0x5, 0x401, 0x8, 0x911, 0x7, 0x2, 0x41, 0x80, 0x3, 0x2, 0x8001, 0x7, 0x1, 0x6, 0x10000, 0x9e4b, 0x0, 0x8, 0x9, 0x3, 0x1, 0x1, 0x9, 0xffff7537, 0x5, 0x81, 0x101, 0x85, 0x7, 0x7, 0x2, 0x400, 0x7, 0x52c5, 0x62, 0x4, 0x5, 0x17f, 0x6, 0x13cf0b9b, 0xffffffff, 0x24, 0x6, 0x10, 0xfffffff8, 0x6, 0xffd6, 0x7, 0x6, 0x0, 0xf, 0x5, 0x2b4, 0xe, 0x51c, 0x7f, 0x5, 0xfffffffb, 0x101, 0x7, 0xfff, 0xf, 0x0, 0xf47a, 0x7, 0x0, 0x4, 0xffff, 0x2, 0x4, 0x800, 0xfffffffe, 0xcebf, 0x9, 0x2, 0x8, 0x5f6, 0x4000f, 0x4, 0xa422, 0x7ad75c16, 0x7, 0x1, 0x3, 0x1, 0x3, 0xe19c, 0x1000, 0x2, 0x8, 0x7, 0x58, 0xff, 0x0, 0x8, 0x4916, 0x800, 0xf443, 0x2c1, 0x10, 0x0, 0x6, 0x8, 0x8000, 0x9, 0x31, 0x9, 0xfff, 0x3, 0xb, 0x3, 0x200, 0x7, 0x4, 0xf, 0x3e, 0x2, 0xe2, 0x5, 0x6, 0x0, 0x7, 0x10001, 0xffffffff, 0x1, 0x100000, 0x9, 0x3, 0x2, 0x27b8, 0x4, 0x9, 0x3, 0x8001, 0x97, 0x2, 0x9, 0x0, 0x3ff, 0x6, 0x3ff, 0x1, 0x400, 0x8d6, 0x10001, 0x2, 0x8, 0x1, 0xfffffff8, 0x0, 0x7c7, 0x6, 0x268, 0x3, 0x400, 0xfd87, 0x8, 0x8, 0x1, 0x8000, 0x6, 0x80000000, 0x7, 0x3, 0x101, 0xff88, 0x5, 0x0, 0x5, 0x8, 0x6, 0xa06, 0xfffffffc, 0x1, 0x7fffffff, 0x9, 0x40, 0x7, 0x80000001, 0xf, 0x0, 0x2, 0x4, 0x8, 0x2, 0xe214, 0x7, 0xd, 0x0, 0x1, 0x4, 0x5, 0x10000, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0x6, 0x400, 0x3, 0x80000000, 0x10, 0x1, 0x50, 0x6ce1, 0xfffffff9, 0xc, 0x800, 0x9df2, 0x8, 0x10001, 0x8, 0x4, 0x0, 0x7ff, 0x6, 0xffff4860, 0x10, 0x81, 0x80, 0x1, 0x47, 0x2, 0x2, 0xfffffffb, 0x8, 0x9, 0x4, 0x5, 0x8, 0xd4, 0x6, 0x2, 0x0, 0x1, 0x4, 0xd774, 0x8000, 0x0, 0x3, 0xe0, 0x4, 0xd, 0x1000, 0x9, 0x6, 0x4, 0xa8, 0x7, 0xc0, 0x4, 0x5, 0x5, 0x6, 0xc, 0x1, 0x7, 0x7, 0xa5, 0x100, 0x7fffffff, 0x778, 0x10000, 0x24, 0x80000000, 0x2, 0x3, 0x3, 0x0, 0x1, 0x291, 0x4, 0x1463, 0x0, 0x6, 0x7fff, 0x3f, 0x9, 0x24000000, 0x4, 0x400, 0x7, 0x6, 0x2cdefcc3, 0x7, 0x3, 0x6, 0xa, 0x6, 0x4, 0xffffff94, 0x3, 0x2, 0x1, 0xd, 0x6, 0x82f, 0x8, 0xe, 0x5, 0x1, 0x5, 0xdb, 0x4, 0xfffffff8, 0x9, 0x5, 0x1000, 0x8, 0x2, 0x7, 0x3d, 0x8, 0x7, 0x6, 0x3, 0x5, 0x7, 0x9, 0xfffffff9, 0x7, 0x7, 0x7, 0x0, 0x2, 0x8000, 0x7ff, 0x0, 0x466, 0x3ac, 0x9, 0x4, 0x5, 0x9, 0x7, 0x3, 0x2, 0x1, 0x800, 0x4, 0x4, 0x3, 0x400, 0x7, 0x600000, 0x8, 0x3, 0xefbb, 0x1, 0x5, 0x7, 0x6, 0x3, 0x2, 0x1, 0x0, 0x6, 0x7, 0x8, 0x7ff, 0x3ff, 0x5, 0x7f, 0x101, 0x40, 0x8001, 0xe5, 0x7, 0xe, 0x4, 0x6, 0x40, 0xbadd, 0x2, 0xfffffc00, 0x10001, 0x8, 0x1, 0x5, 0x7f, 0xff, 0x1, 0xe, 0x5, 0x9, 0x3, 0xfcc9, 0x5, 0x4, 0xfffff801, 0x10001, 0x5bd, 0x28, 0x275, 0x0, 0x6, 0x4, 0x6, 0x1, 0xcb, 0xb, 0x81, 0x2, 0xffff, 0x1, 0x3, 0xfffffff6, 0x7fff, 0x8, 0x50000, 0xc, 0x8917, 0x4, 0x7, 0xecb, 0x0, 0xfffffffc, 0x5, 0xe, 0x80000000, 0x2c70, 0x8, 0x4a0, 0x6, 0x2, 0x6, 0xfffffffb, 0x100, 0x56, 0x196f, 0x0, 0x4, 0xbb2, 0x1, 0xf, 0x3ff, 0x9, 0x9, 0xc6, 0xcf8, 0x2, 0xb, 0x4, 0x3, 0x5, 0x9d56, 0x4, 0x654, 0x5d5, 0x3c66, 0x3]}]}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @local}]}}, @f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0x9}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x6003}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}]}}, @f_rsvp6={{0xa}, {0x2494, 0x2, [@TCA_RSVP_POLICE={0x183c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x200000, 0x8, 0x3, 0x8, 0xc, 0x7, 0x7, 0xffffff7f, 0x52, 0x4dfb, 0x8, 0x8, 0x2, 0x1, 0x5, 0x1, 0x2, 0xc, 0xffffffff, 0xffff, 0x4, 0x9, 0x2, 0x6, 0x2, 0x71cf3da3, 0x6, 0x5, 0x40, 0xffffff98, 0x4, 0x7, 0x7f, 0x1ff, 0x0, 0x34, 0x7, 0x5, 0x9, 0x0, 0x0, 0x8, 0x5, 0x80000001, 0x3, 0xfffffff8, 0xfff, 0xfffffffc, 0x7, 0x7, 0x40, 0x100, 0x7, 0x80000001, 0x6, 0xaf, 0x2, 0x3, 0x5, 0x24000000, 0xfffffffc, 0x1, 0x7, 0x8, 0x9, 0xffffff33, 0x0, 0x40, 0x9, 0x4, 0x0, 0x8, 0xc, 0xb5, 0xe36a, 0x9, 0x0, 0x3, 0x8, 0x2, 0x7, 0x6797, 0x9, 0x1ff, 0x9, 0x1, 0x3, 0x0, 0x3, 0xf, 0x7, 0x81, 0x0, 0xb, 0x1af3, 0x1, 0x0, 0x6, 0x2, 0x215, 0x81, 0x101, 0x1, 0x10001, 0x1, 0x6, 0xe61, 0x64, 0x8, 0x2, 0x39, 0x4, 0x8, 0x8, 0xc1, 0x5, 0xed00, 0x1, 0x8, 0x7, 0xb, 0x1, 0x9, 0x6, 0x96b, 0x3cc4, 0x101, 0x1be4, 0x6, 0x9, 0x6, 0xf, 0xfff, 0x40, 0x0, 0xe, 0x0, 0x0, 0x10000, 0x3, 0xa, 0x80000000, 0xc, 0x0, 0x81, 0x80, 0x80000000, 0x4, 0x2, 0x6, 0x4, 0x1, 0x2e91, 0x3, 0x4, 0x6, 0x0, 0x200, 0x0, 0x42b, 0x2, 0x234b, 0x4, 0xffffff32, 0x4a, 0x71, 0x5, 0x573, 0xf, 0x5, 0x4, 0x9, 0x7f, 0x3, 0x4, 0xfffff801, 0x5, 0x8001, 0x1, 0x0, 0x4, 0x0, 0x7, 0x76, 0xfffff746, 0x400, 0xc39, 0x0, 0x9, 0xff, 0x0, 0x800, 0x8, 0x7, 0xf4, 0xe, 0x0, 0x800, 0x3, 0xff, 0x7, 0x8f4, 0x7, 0x84, 0x1, 0xf6, 0xa6c, 0x0, 0x0, 0x2, 0x5, 0x4, 0x7, 0xeadc, 0x8, 0x0, 0x99, 0x0, 0x4, 0x8, 0x80000, 0x7, 0x5, 0x74, 0x9, 0x1, 0xfffffa9f, 0x9, 0x1000, 0x8, 0xb, 0xa, 0x82, 0x60, 0x2, 0xd, 0x3, 0x2, 0x1, 0x8, 0x400, 0x5, 0xc37d, 0x1, 0x4, 0x4, 0x1, 0x10001, 0x0, 0x4, 0x9, 0x5, 0xdd, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffc1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x0, 0x11, 0x5, 0x8001, 0x80, 0x4, 0x4, 0x401, 0x9, 0x1, 0x6, 0x101, 0x9, 0x8001, 0x2, 0x3, 0x800, 0x34, 0x5, 0x66, 0x1ff, 0x7, 0x8, 0x547, 0x5, 0x749, 0x6, 0x0, 0x1, 0x5, 0x3, 0x0, 0xfffffffa, 0x0, 0x32, 0x0, 0xe, 0x6, 0x4, 0x80, 0x10, 0x6, 0x81, 0x81, 0x6, 0x9468, 0xab77, 0x55f2, 0x6, 0xf7, 0x8, 0x81cf, 0x9, 0x80000001, 0x7fff, 0x6, 0x9, 0x7, 0x3, 0x4c5b, 0xd, 0xfffffff9, 0x2, 0xd, 0xfe6, 0x101, 0x0, 0x7, 0x1, 0x40, 0x65b1, 0x9, 0xffff8001, 0x8, 0xc592, 0x4, 0x98, 0xa780, 0x400, 0x400, 0x3ff, 0x401, 0x3, 0x85e, 0xf, 0x25, 0x3, 0x4, 0x9, 0xf081, 0x1ff, 0x0, 0x10000, 0x401, 0x5, 0x2, 0x5ff8, 0x27f7, 0x8, 0x9, 0xfff, 0x0, 0x0, 0x5, 0x7, 0x7, 0x45, 0x9, 0x3ff, 0x3, 0x4, 0xd, 0x4, 0xdd, 0x483b, 0x5, 0x3, 0x7, 0x2, 0xfffffffb, 0x4c, 0x20d6, 0xa, 0x50f9, 0x8, 0x8001, 0x9, 0x72d, 0x81, 0x10000, 0xffff9594, 0x8, 0x1, 0x6, 0xf0000000, 0x5, 0x6, 0x8, 0x6, 0x9, 0x0, 0x0, 0xd8, 0x7, 0x200, 0x0, 0x7, 0x5, 0x1, 0x1, 0x1, 0x4, 0x3, 0x1, 0xf, 0x7, 0x3, 0x0, 0x9, 0x1, 0x9ce, 0x5, 0x52, 0x3ff, 0x80, 0x9, 0x1, 0x25, 0x3, 0x0, 0x24d8, 0x101, 0x400, 0xa7, 0xb422, 0x8, 0x80000001, 0x9, 0x1ff, 0xff, 0xf, 0x2f5d65e3, 0x9, 0x1000, 0xfff, 0x4, 0x2, 0x0, 0xd4a, 0x1ff, 0x19d, 0x593000, 0x5, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0xfffffffa, 0x9, 0x1, 0xfa, 0x4a4, 0x2, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x3, 0xfffffffe, 0x5, 0x84, 0x2, 0x2, 0x514, 0x6, 0x8, 0x5, 0xfffffffd, 0x7fff, 0x2, 0x1, 0x2, 0x7, 0xfffffff7, 0x800, 0x200, 0x3ff, 0x10, 0x2, 0x7, 0x1, 0x3, 0x10001, 0xfffffffc, 0x1, 0x59, 0x400, 0x5, 0x2, 0x3, 0x7, 0x6, 0x2, 0xfffff001, 0x5, 0x1, 0x7, 0x3, 0x9, 0x7, 0x101]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x7, 0x5, 0x1, 0x7, 0xd3, 0x1, 0xfffffff8, 0x8, 0xff, 0xfffffff7, 0x2, 0x400, 0x10000, 0x7, 0x8000, 0xd57, 0x3, 0x0, 0x3, 0x2, 0x1, 0x9, 0x8, 0xdc, 0x8a, 0xc3c4, 0x2, 0x2, 0x200, 0x1, 0x0, 0xfffffffa, 0x800, 0x9, 0x3, 0x8, 0x1000, 0x7, 0xf704, 0x876, 0xc9b5, 0xb9, 0x6, 0x2, 0x6, 0x0, 0x98, 0x9daa, 0x8, 0xfffffff8, 0x2, 0x7, 0x1, 0x8, 0x3, 0x0, 0xfffff327, 0x2, 0x3, 0x6, 0xe, 0x1, 0xf24, 0x7fff, 0xfbc0, 0xb6f, 0x6, 0x80000001, 0x73a, 0x8, 0x4, 0x1, 0x2, 0x6, 0x3, 0x6, 0xfffffffe, 0x0, 0xfffffffc, 0x2, 0x8000, 0x7fffffff, 0x8, 0x7fffffff, 0x7, 0x5, 0x9e70, 0x3, 0x7, 0x326b, 0x3, 0x8, 0xffffff06, 0x9, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x7, 0x2, 0x57d, 0x7, 0x6, 0x7, 0x10001, 0x0, 0x8d, 0x3, 0xfffffffe, 0x10, 0x40, 0x1, 0x6, 0x1, 0x3, 0x0, 0x4, 0x0, 0x2, 0x1, 0x1, 0x100, 0xa, 0x7f, 0x7fffffff, 0x9, 0x7ff, 0x40, 0x9, 0x2, 0x7, 0x6, 0x1, 0x3, 0x4, 0x3, 0xffff, 0x7ff, 0x1, 0x4, 0x2, 0x6, 0x3e, 0x9, 0x80, 0x83e, 0xff, 0x9, 0x4, 0x7, 0x9, 0x7, 0x7, 0x4, 0xff, 0x0, 0x5, 0x8, 0x1, 0x6a9, 0x7, 0xffffffff, 0xc7a2, 0x2, 0x4, 0x6, 0x7fffffff, 0xb, 0x400, 0x5, 0xbe, 0x8, 0x387c, 0x200, 0x3, 0xfffffffd, 0xffffffd8, 0x8000, 0x800, 0x6, 0x6, 0x80000000, 0x0, 0x4, 0xff, 0x7fff, 0x3, 0x0, 0x5, 0x101, 0x100, 0x7, 0xfffffffe, 0x9, 0x7, 0x8f, 0x0, 0xa, 0x7fffffff, 0x8, 0x3a, 0x7fff, 0x2, 0x9, 0x6, 0x1, 0xcb, 0x2, 0xffff705f, 0xffffff7f, 0x1, 0x86, 0x0, 0x1, 0x7, 0x6, 0x1, 0xfc2, 0x200, 0xfff, 0x40, 0x6, 0x10000, 0x400, 0x10001, 0x7, 0x9, 0x101, 0x7, 0x7, 0x4, 0xf66f, 0xd, 0x0, 0x3, 0x1, 0x4, 0x2, 0x7, 0x1, 0xc462, 0x6, 0x6, 0x0, 0x7, 0xffffffff, 0x1, 0xffffffff, 0x40, 0x10001, 0x90f7, 0xb]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x7, 0x0, 0x8, 0xe9, 0x80000000, 0x1, 0x6, 0xffffe6d8, 0x250f5a8f, 0x80000001, 0x1, 0x0, 0x9, 0xfffffff9, 0x3, 0x7fff, 0x4, 0x9, 0x7fff, 0x47a, 0x5, 0x3, 0x3, 0x87, 0xffff, 0xe5, 0x0, 0x6, 0x2, 0x5, 0x8, 0x7, 0xfffffff7, 0xfffffffb, 0x6, 0xd026, 0x9, 0x5, 0x8, 0x31, 0x0, 0x4000000, 0x80000001, 0x8, 0x7, 0xfffffffe, 0xe738, 0x10000, 0x472edba6, 0x3, 0x3, 0x10001, 0xfffff968, 0xffffff90, 0xc4, 0x3, 0xb0af, 0x6, 0x2, 0x5, 0x0, 0x0, 0x200, 0x4, 0xdcc, 0x4, 0x4, 0x5, 0x9, 0x10001, 0x1, 0x4, 0xfffffffd, 0x4, 0x1, 0x1, 0x4, 0xfffffffd, 0x7, 0x9, 0x1c, 0xff, 0x2c1673bb, 0x2, 0x217, 0x1, 0x0, 0x2, 0x4, 0x5, 0xd63, 0x2, 0x1, 0x4, 0xfffffffa, 0xb73, 0x4, 0x800, 0x2, 0x8, 0x81, 0x3, 0xfffffff9, 0x4, 0xb, 0x0, 0xfffffff7, 0x3, 0x0, 0x87, 0x5, 0x8, 0x9, 0xfffffffb, 0x27, 0x5, 0xffff, 0x8, 0x6, 0x3, 0x7, 0x3, 0xf, 0x5, 0x1, 0x800, 0x0, 0x3ff, 0x4, 0x1fb, 0x6, 0x6, 0x0, 0x4, 0xfffffff8, 0x4, 0xff, 0x5, 0x866, 0x2, 0xc, 0x101, 0xa74, 0x7, 0x3c50, 0xc, 0x5, 0x6, 0x7, 0x10b, 0x3, 0x9, 0x2, 0xb4, 0xfffffffd, 0x6, 0x1, 0x7, 0xc, 0x754a, 0x8000, 0x5, 0x10001, 0xadfe, 0x762de8e9, 0x4, 0x3, 0x7, 0x5, 0x405, 0x5, 0xfffffff8, 0x3, 0x8, 0x8, 0x9, 0x30c75a6e, 0xfffffff9, 0x9, 0xa1, 0xffffffff, 0x40000, 0x200, 0xe3, 0x64, 0x1, 0xff, 0x7, 0xa4, 0xfffffffb, 0xff, 0x9, 0xc6, 0x3, 0x2, 0xd, 0x8, 0x7, 0x9, 0x855, 0x77000, 0xffffffdd, 0x5, 0x2b, 0x9, 0x4, 0xf, 0x3, 0xfffffff9, 0xf, 0x1041, 0xffff8eeb, 0x80000, 0x800, 0x0, 0x24000000, 0xe5, 0x1, 0x3, 0x9, 0x7, 0xfffffffe, 0x10001, 0x6, 0xd, 0x40, 0x2, 0x6, 0xf3, 0xfffffff7, 0x6, 0x1, 0x4, 0x7fffffff, 0x8001, 0x1, 0x7, 0x1c8, 0x3ff, 0xad0b, 0x1, 0x5, 0x4, 0x6, 0xd, 0x6, 0x97, 0xffff7fff, 0x5, 0x1, 0xd9, 0x56f, 0x0, 0x6, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x240000, 0x4, 0x3, 0x496, 0x7, 0xffff, 0x9, 0x1, 0xdb4, 0x0, 0x200, 0x7, 0x80000000, 0x81, 0x9, 0x0, 0x7, 0x1, 0x4, 0x5, 0x445, 0x7, 0x40, 0xd, 0x0, 0x5, 0x7, 0x3, 0x3, 0x1, 0x7, 0x7, 0x5, 0x3, 0x3, 0x40, 0x5, 0x6, 0x6, 0x0, 0x3, 0x22c, 0x6, 0x9, 0x100, 0x8, 0x9, 0x6, 0x3, 0x2, 0x9, 0x200, 0x1, 0x4, 0x2, 0x6, 0x300, 0x2, 0x6, 0x3, 0x4, 0x3, 0x7, 0x8, 0x7, 0x3a, 0x8, 0xfffffffe, 0x0, 0x9, 0x26000, 0x9, 0x10001, 0xfffffff6, 0x1ff, 0x4, 0x3, 0x4, 0x1, 0xf6e, 0x2, 0x2, 0xd47c, 0x7fffffff, 0x26d, 0x1, 0x9, 0x1, 0x1020, 0x8, 0x4a8f, 0x6, 0x100, 0x80000000, 0x1, 0x9, 0x6, 0x3, 0x5, 0x447, 0x10, 0x1, 0x1ff, 0x1, 0xfffff7fb, 0x8, 0x2, 0x3ffe, 0x6, 0x9, 0x7, 0x7, 0x80000001, 0x81, 0x7ff, 0x8, 0x0, 0x1000, 0x6, 0x6, 0x3, 0x5a7, 0x2, 0x6, 0x168a, 0xff, 0xff, 0x6, 0x5, 0x7fff, 0x1000, 0x3, 0x9, 0xca, 0x4, 0x30e4, 0x8d8, 0x0, 0x7fffffff, 0x5, 0x8, 0x1, 0x6, 0x4, 0x9, 0x10, 0x7c, 0x9, 0x6, 0xfffffffc, 0x300000, 0x5, 0xd, 0x8, 0x0, 0x7, 0x6, 0x9, 0x5, 0xff, 0x7, 0x6, 0x6, 0x4, 0x1, 0x6e8, 0x60a9, 0x3, 0x7, 0xd474, 0x8, 0x4, 0x1, 0x20, 0x6, 0x3, 0xe0e, 0x4, 0x2, 0x4479, 0x78b, 0xf, 0xa, 0x5, 0xe, 0x7aeb, 0x1, 0x3, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x4, 0x6, 0x5, 0xfffff0d5, 0x4, 0xb, 0x5, 0xd, 0x5, 0x1, 0x4, 0x5, 0x4298, 0x6, 0x3, 0xa72, 0x10001, 0x320ee077, 0x7, 0x7fffffff, 0x1, 0x6, 0x3, 0x3, 0x8000, 0x0, 0x1, 0x3, 0x5, 0x2, 0x1822, 0x2, 0xe, 0xffffffff, 0x7, 0x4e, 0x5a5, 0x8, 0x6, 0x9, 0x3, 0x101, 0x4, 0x7, 0x0, 0x51, 0xffff9ee1, 0x9, 0xe, 0x7, 0xff, 0xff, 0x4, 0x2, 0x5, 0x2, 0x7, 0x10, 0x46, 0x8000, 0xa2fc, 0x3ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0xe, 0x8, 0x6, 0x0, 0x1, 0x68, 0x4, 0x1, 0x5, 0x8000, 0x10, 0x80, 0x6, 0x3, 0x1000, 0x1ff, 0x8000, 0x3, 0xe, 0x1, 0x0, 0x5, 0x4, 0x9, 0x5, 0x477, 0x80000000, 0x2, 0x1ff, 0xe, 0x2, 0x5, 0x4, 0x4, 0x5, 0x20, 0x7, 0x101, 0x2, 0x9, 0x5, 0x3, 0x7f, 0xff, 0x7, 0x6, 0x3, 0x10001, 0x8001, 0x1, 0xd6d, 0x80000000, 0x7, 0x4, 0x4, 0x4, 0xd664, 0x2f, 0xb, 0x0, 0x81, 0x8, 0x0, 0x9c, 0x9, 0xffffffff, 0x400, 0x6, 0x7, 0x6, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x8, 0x4478dfee, 0x9, 0x80000000, 0x80000001, 0x1, 0x7f17, 0x19, 0x80000000, 0x6, 0xd, 0xfffffff9, 0x2, 0x80000000, 0x1000, 0x3, 0x8, 0x2, 0x4, 0x4, 0xa4f, 0x1, 0x1, 0x2, 0xfffffffd, 0x200, 0x1, 0x958a, 0x76, 0x0, 0x9dc0, 0x1, 0xc5eb, 0xffffffaf, 0xa, 0x1, 0x100002, 0x3, 0xaf93, 0x9, 0x3, 0x8000, 0xfff, 0x4, 0x9, 0x7fff, 0x9, 0x8001, 0x4, 0xfffffff8, 0x1d, 0x8, 0xffffffea, 0x9, 0x8, 0x0, 0x9, 0x6, 0x7, 0x1, 0xebb, 0x6, 0x3, 0xd5, 0x53, 0x2, 0x1, 0x8, 0x1, 0x7e5, 0x4, 0x5, 0x7, 0x81, 0x800, 0x0, 0xa6, 0x6, 0x6, 0x3, 0x101, 0x8, 0x1, 0x401, 0x4, 0x1, 0x1ff, 0x3, 0x6, 0x3, 0x2, 0x4981, 0x16, 0x9, 0xcc, 0x6, 0xbc, 0x7, 0x1, 0x5, 0x5, 0x6, 0x2, 0x1, 0x5, 0x1, 0x5, 0x4, 0x0, 0xca, 0x5, 0x7fff, 0x825f, 0x8, 0x2008, 0x5, 0xffffffff, 0x164, 0x400, 0x10001, 0x1, 0x10009, 0x4, 0x6, 0x4, 0x0, 0x8001, 0x200, 0x8, 0x7, 0xfffffff7, 0x458, 0x7, 0x4, 0x0, 0x2, 0x5, 0x3, 0xfffffff0, 0x60000, 0xe4e, 0x5f930622, 0x1, 0x7fffffff, 0x7, 0x0, 0x5, 0x7fffffff, 0x1000, 0x3, 0x6, 0x1, 0x3, 0x0, 0x9, 0xfffffffd, 0x80, 0x1, 0x7, 0xcc, 0x2b0, 0x0, 0x1, 0x3, 0x10, 0x9, 0x2, 0x9, 0x7, 0x1, 0xfffffffb, 0xe19, 0x4, 0x5, 0x8000, 0xd0c, 0xffff7fff, 0x4, 0x6]}]}, @TCA_RSVP_POLICE={0x424, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3ff, 0xc00, 0x7, 0x1, 0x1e, 0x3ff, 0x5, 0x0, 0xffffffff, 0x0, 0x40, 0x8, 0x2, 0x265, 0xfffffff2, 0x8, 0xd45, 0x1, 0xe00000, 0x5, 0x4cc, 0x7ff, 0x7fffffff, 0xa79, 0x0, 0x2, 0x1, 0x9, 0x4, 0x2, 0x1, 0x1ff, 0x1, 0x9, 0x6, 0x91, 0x7, 0x1, 0xfffffff7, 0x30, 0x2, 0x7, 0x1, 0xfffeffff, 0x5, 0x4, 0x10, 0x6, 0x8, 0x40, 0x10000, 0xc9e9, 0x7, 0xed45, 0x8, 0x8, 0x6, 0x50, 0xdef, 0x8, 0x8, 0x4e2, 0xffffffff, 0xed24, 0x1004000, 0x8000, 0xc2, 0x4, 0x2a, 0xfffffff0, 0x0, 0x6, 0x9, 0x81, 0x4, 0x101, 0x60000000, 0x5, 0x6, 0xfffffff7, 0x400, 0x9, 0x322, 0x5, 0x4000000, 0x5, 0x4, 0xfffffffb, 0x7, 0x81, 0x2, 0x8, 0x80, 0x2, 0x2, 0x9, 0x5, 0xc, 0x2, 0x80, 0x2, 0xd, 0x6, 0xce9ef1a, 0x8, 0xa, 0x80000000, 0x6, 0x2, 0x7, 0x3, 0x81, 0xc, 0xffffffff, 0x29654835, 0x4, 0x6e07, 0x5, 0x800, 0x7fffffff, 0x1000, 0x115, 0x6, 0xb, 0x10000, 0x8, 0x1ff, 0x101, 0xb444, 0xe4f, 0x6, 0x6, 0x99, 0x1, 0x9, 0xeb, 0x4, 0x0, 0x1, 0x7, 0x5, 0x3, 0x5e, 0x7f, 0x40000, 0x3, 0x0, 0x7, 0x8000, 0x0, 0x5, 0x1, 0x4, 0x1, 0x7, 0x101, 0x80000, 0x1, 0x3, 0x8, 0x7, 0x0, 0x8000000, 0x7fffffff, 0x10001, 0x3, 0x9, 0x8000, 0x29, 0x7fffffff, 0x6, 0x6, 0x6, 0x7f, 0x2, 0xe, 0xd989, 0x5, 0xff, 0x4, 0x1, 0x0, 0x9, 0x5389, 0x100, 0x3, 0x1, 0xc3, 0xfff, 0x2, 0x71c3, 0x7ff, 0x9, 0x0, 0x89, 0x5, 0x4, 0x3, 0x10001, 0x9d, 0x5, 0x6, 0x9, 0x1000, 0x6, 0xb88, 0x1, 0x42db, 0x3, 0x12, 0x8, 0x1000, 0x7, 0x6, 0x0, 0x8, 0x7, 0xc34, 0x4, 0xc5, 0x3, 0xa49, 0x2, 0x65b, 0x5, 0x80, 0x5, 0xf08, 0xa, 0x7, 0x2, 0x4, 0x10, 0xffffff00, 0x6, 0x1, 0x143c, 0x5, 0x7ff, 0x4, 0xe3a3, 0x80000000, 0xad, 0x2, 0x5, 0xfffffff9, 0x3, 0x81, 0xffffffff, 0x10001, 0x2, 0x0, 0xfffffffa, 0x4, 0x7fffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_RSVP_POLICE={0x830, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0x8, 0x0, 0x9, 0x6, 0x6, 0x20000000, 0x2, 0xa48c, 0xa70, 0x10, 0x8, 0x55af, 0x400, 0x1, 0xfffffffd, 0x5, 0x43d, 0x0, 0x1, 0xff, 0xb, 0x1, 0x401, 0x80000000, 0x0, 0x4, 0x2, 0xfffffffa, 0x0, 0x0, 0x7fc, 0xfffffbff, 0x4ff3, 0xfffffff8, 0xfffffffd, 0x8, 0x5f41, 0xffffff06, 0x27, 0x8, 0x5755, 0xfffffffa, 0x0, 0x2, 0x26, 0x4, 0x9, 0x3, 0xfffffffd, 0x1, 0x6, 0xed, 0x8, 0x400, 0x3, 0x8, 0x6, 0x2, 0x4, 0x489f, 0x3, 0x8001, 0x1, 0x8, 0x1, 0xe, 0xed, 0x1000, 0x0, 0x8, 0x80000000, 0x10001, 0x6, 0x40, 0x7, 0x7ff, 0x3, 0x5, 0x3, 0x5bb4f1d8, 0xfff, 0x3, 0xc, 0xfff, 0x80000000, 0x5, 0x69, 0x3ff, 0x5, 0x2, 0x101, 0x3a46, 0x4, 0x8, 0x200, 0x3, 0xd, 0xd, 0x3, 0x9, 0x1, 0x2, 0xd, 0xe, 0x9, 0x8, 0x8833, 0x10000, 0x6, 0xffffffff, 0xffff7fff, 0x5, 0x1, 0x3, 0x6595, 0x9, 0x2, 0x401, 0x8, 0x4e0, 0x5, 0x200, 0x3b7, 0x6, 0x8, 0xffff, 0x6, 0xe6d, 0xa1d, 0xfffffffc, 0x9, 0x6, 0x6, 0x2, 0x400, 0x5, 0x7, 0x10, 0x56, 0x7, 0x2, 0x1, 0x40, 0xfffffffd, 0x4c, 0x0, 0xfffffff9, 0x8, 0x0, 0x3, 0x9713, 0x81, 0x8, 0x6, 0x0, 0x7, 0x7fff, 0x7283, 0xa, 0xffff52f7, 0x28, 0x7, 0x1, 0xa513, 0x9, 0x200, 0x3, 0xc, 0x100, 0x7, 0x8, 0x5, 0x1, 0x2a, 0x7, 0x4, 0x5, 0x6, 0x4, 0x3, 0xfffffffd, 0x3, 0x9, 0x7fffffff, 0x753, 0x7, 0x3, 0x3a56, 0x1, 0x7, 0xfffff5f9, 0x5, 0x4, 0x5, 0x6, 0x9, 0x2, 0x6, 0x2, 0xb, 0x5, 0x0, 0x4, 0x9, 0x4, 0xff, 0x800, 0x64, 0x3eaf, 0x6, 0x6f, 0xffff8000, 0xa2, 0x7, 0x8, 0x1, 0x2, 0x6, 0xfffffff8, 0x4, 0x0, 0x7f, 0x3, 0x6, 0x1ff, 0x2, 0x9, 0xc000000, 0x2, 0x10000, 0x3, 0x72, 0x0, 0x5, 0x200, 0x800, 0x6, 0x4, 0x2, 0x2, 0x40, 0x3cf7, 0x5, 0x0, 0xc, 0x75, 0x5, 0x400, 0x9, 0x4, 0x6, 0x6a8, 0x8, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff67b, 0x7, 0xb, 0x2, 0x5, 0xfff, 0x3b8e, 0x3fffc000, 0x6, 0x6, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0xd, 0xfffffffa, 0x3, 0x3, 0x380, 0xd5ae, 0xb666, 0x20000000, 0x5, 0xd35b, 0x6, 0x0, 0x3, 0x4d, 0x1, 0x2, 0xfbe, 0x4, 0x5, 0x2, 0x0, 0x2, 0x5e, 0x0, 0x9, 0x8, 0x4, 0x2, 0x3, 0xac, 0x1, 0x81, 0x8, 0x9, 0x0, 0x80000000, 0xe65, 0x80000001, 0x4, 0x780, 0x4b86, 0x5, 0x4, 0xff, 0x0, 0x10, 0xf, 0x1, 0xdd6, 0xc, 0xffff, 0x2, 0x5, 0x9, 0x1, 0x10001, 0x8001, 0x5, 0x8, 0x7, 0x5, 0x1, 0x2, 0x6, 0x839, 0x10000, 0x4, 0x8, 0x3, 0x2, 0x8, 0x100, 0x3, 0x0, 0x80000000, 0x6, 0x9, 0x5, 0x7, 0x5, 0x1, 0x9, 0x1, 0x0, 0x0, 0x2, 0x1000, 0x1, 0x80000001, 0x199ba283, 0x99, 0x7, 0x5, 0x8, 0x7fffffff, 0x7, 0x80000000, 0xb, 0x2, 0xff, 0xfffffff8, 0x8, 0x7fffffff, 0x3, 0x0, 0x9, 0xfffffff8, 0x2, 0x0, 0x4, 0x10000, 0x12b, 0x6, 0x7, 0x97, 0x6, 0x108c, 0x10, 0x40, 0x10000, 0x200, 0xf05, 0x7ff, 0x40, 0x4, 0x10, 0x4, 0x3, 0x6, 0x0, 0xfff, 0x95, 0x0, 0x3, 0x1, 0x9, 0x5, 0xf51e, 0x7, 0x7, 0x9, 0x5, 0x781, 0x5, 0x3, 0xb, 0x6, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2, 0x7f, 0x7fffffff, 0x8106, 0x80, 0x3ff, 0x3, 0x5, 0xfffffff9, 0x8, 0x0, 0x5, 0xabe4, 0x9bbb, 0x1, 0x0, 0x7, 0x5, 0xdc, 0x5, 0x38ea, 0x7f, 0x0, 0x81, 0x7, 0xd, 0x7, 0x1, 0x8, 0x5, 0x1, 0x6, 0x5, 0x1, 0x8, 0x101, 0x3, 0x8, 0x1, 0x4, 0x1, 0x1, 0x9, 0x8, 0x0, 0x9, 0x3, 0xb322, 0x3, 0x2, 0x0, 0xe, 0x2450, 0x5, 0x146, 0x3, 0x5, 0xb, 0x1, 0x7fff, 0x6cc8, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x7, 0x2, 0x30, 0x7f, 0x9d, 0x7, 0xa741726, 0x7fff, 0x5, 0x1, 0x5, 0x5, 0x8, 0x8, 0x6, 0xa, 0x3, 0x1, 0x4, 0x3, 0xffff3ccb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xff, 0x3, 0x5}, {0x0, 0x5}, 0x4, 0x8, 0xb}}]}}]}, 0x369c}}, 0x20004881)
syz_open_dev$dri(&(0x7f00000038c0), 0xfe8, 0x40002)

6m15.099936841s ago: executing program 2 (id=1198):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x406, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x80, 0x7, 0x1, 0x0, 0x7995}, 0x8, 0x3, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000380))
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$getownex(r0, 0x10, 0x0)
ptrace$cont(0x1f, 0x0, 0x100, 0x4)
r5 = socket(0x1e, 0x803, 0x0)
sendto(r5, &(0x7f0000000340)="7210ec0e65eb18223831eba89a2803de2dcb34275c34ee5fb91b5a3d089fb591400abfb7115a689bcdbfd9d6ca0323d77b384c6c1ed4792543388ada5ef7b168ff79aee65d99acc3a670bda266a634067d0ef22cb36f1a7e25ad567e31a88e4fbdeedba2d3477436a6ecbae8e742ddd805ffc1deca47e4f6878ba808f64b12d149e94997d60a496d1468f1f57d801704ca621097fdd248bed678dfddfacbdfc8bb66e165560580d731b3e40a4ba0405eed96bf6a9788cc54998061f06c6cb2647c33c70168561dfcd3c8ec3bb0db", 0xce, 0x20040000, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
unshare(0x2a060c00)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

6m13.822919769s ago: executing program 2 (id=1204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x600}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

6m13.567508218s ago: executing program 2 (id=1207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = inotify_init1(0x0)
r3 = inotify_add_watch(r2, 0x0, 0x400)
r4 = dup(r2)
inotify_rm_watch(r4, r3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

6m13.200705143s ago: executing program 32 (id=1207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = inotify_init1(0x0)
r3 = inotify_add_watch(r2, 0x0, 0x400)
r4 = dup(r2)
inotify_rm_watch(r4, r3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

9.148968429s ago: executing program 5 (id=2618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$clear(0x3, 0xfffffffffffffffc)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2=0x7f000001}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

8.805059622s ago: executing program 1 (id=2620):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$kcm(0x21, 0x0, 0x2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000004}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040814)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=<r5=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
socket$alg(0x26, 0x5, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080000000000069078ac14140dac1414aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cc0000009078000002041000080a0000613100009145000ca2898405704b"], 0x0)

8.750225467s ago: executing program 5 (id=2621):
io_setup(0x3, &(0x7f0000000180)=<r0=>0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
io_submit(r0, 0x2, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x63, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x400, r1, &(0x7f0000005d40)="754f00a14b42c9aa7d5dfacc37351ba861cae7bac4bb9142d243551d87e02e725e6b93329307d8d3c3b4270978ef9e5abb2209d31a40276b47b0d5cf7cca9670698bd7e1bacdeec8e471c3bac44aef3bc07994", 0x53, 0x4, 0x0, 0x3}])
r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x4, 0xd, 0x4})
socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xc8c4049c, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @mcast2, 0x6}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r4, &(0x7f0000005c00)=[{{&(0x7f0000000500)=@caif=@rfm, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/89, 0x59}, {&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000640)=""/11, 0xb}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000740)=""/118, 0x76}], 0x5}, 0x8}, {{&(0x7f0000000bc0)=@un=@abs, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/7, 0x7}], 0x1, &(0x7f0000000d80)=""/145, 0x91}, 0xc}, {{&(0x7f0000000cc0)=@nl=@proc, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/23, 0x17}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/96, 0x60}, {&(0x7f0000000f00)=""/58, 0x3a}], 0x4, &(0x7f0000000f80)=""/103, 0x67}, 0x2}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/25, 0x19}, {&(0x7f00000010c0)=""/91, 0x5b}, {&(0x7f0000001140)=""/140, 0x8c}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000001200)=""/19, 0x13}, {&(0x7f0000001240)=""/243, 0xf3}], 0x6, &(0x7f00000013c0)=""/13, 0xd}, 0x9}, {{&(0x7f0000001400)=@ax25={{}, [@null, @rose, @remote, @null, @bcast, @default, @default, @null]}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000004780)=""/209, 0xd1}, {&(0x7f0000004880)=""/95, 0x5f}, {&(0x7f0000004900)=""/159, 0x9f}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/126, 0x7e}, {&(0x7f0000005a40)=""/195, 0xc3}], 0x6, &(0x7f0000005bc0)=""/18, 0x12}, 0x6}], 0x5, 0x12043, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f0000000000)='Q')
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000801)
sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[], 0x320}}], 0x2, 0x2000c0c5)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x1288, 0x10c8, 0x8, 0xfa04, 0x10c8, 0x6c02, 0x11f0, 0x194, 0x194, 0x11f0, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'wlan1\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x2}, 0x0, 0x10a0, 0x10c8, 0x0, {0x0, 0x74020000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup/syz1\x00', 0xcc}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x0, 0x23}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@addrtype={{0x30}, {0x218, 0x11}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x0, 0x3, 0x4, 0x2], 0x1, 0x6}, {0x0, [0x3, 0x5, 0x6, 0x2, 0x0, 0x6], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12e8)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00'})

6.717202498s ago: executing program 1 (id=2630):
r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x12, 0x1})
io_uring_enter(r0, 0x118f, 0xd06b, 0x2, &(0x7f0000000080), 0x8)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x3e)

6.171782993s ago: executing program 4 (id=2635):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

6.12521406s ago: executing program 1 (id=2636):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004000000000000000eb0f000085000000690000009500"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xb, &(0x7f0000000200)=""/11, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffddf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r4 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) (async)
ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) (async)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000280))
socket$nl_generic(0x10, 0x3, 0x10)
connect$tipc(0xffffffffffffffff, 0x0, 0x0) (async)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x1c)
syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

5.260137564s ago: executing program 3 (id=2640):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(0x0)
splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50)

5.021738653s ago: executing program 5 (id=2642):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004050)

4.900025463s ago: executing program 5 (id=2644):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000dc0)=[{{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r2, r3, r1, r0, 0xffffffffffffffff, r0]}}], 0x48}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a40)="ce0ccd15ea6baae74e6a363c529e94a0fff70abb36298882f95a2dda3aca4e90ebddfbc4b55f20dc282a6994bd341eacdc906b81fbcab0887bc4134c31a83819be6f9204edd98ee56100d3762129a42788efce69a303aee8ce2186ec08f6f23ce8ce65171ee43f43df0df26bc23763c12ab3c973a9aec81e1e15c5f1b9e5a4948dfc5ee39631a38e28cad59be6dd7837450e550f252af06f5e7960c0d8f5f1f9ae37f5525ee44b84c6fdb6", 0xab}, {&(0x7f0000000b00)="d3a20c001640079374b2bd4e235b14952d2204c1e0c613d35fb989eb06e7141aad073e6851a512a8e394b5f4f8bd0f7d895e21b312185154b8b38efde62a68f7a370fbc14dfba71de3b9e69cd58098d979a3f437c51b6dc01cee534cb7176d2a24ee1c5f48149419fb58a73668963f1f94db54edd83eb99833567a8826d32686a4032255f43f54333c82c341e803757a2195c2c20e1e47444a", 0x99}, {&(0x7f0000000bc0)="33fbc36b9029e0a76df6999b57cd6b0622b59bbda9349604fc0db57044b83c3b083aecf387bbbfe6f9059de662b361dc039286b7fd44f5ccbf243566995da6cd71ac8d4969a2c7629d158b0306b9f91b9ef1204ae94116cc044b204ddeba58aa5edae72a5793413a25fd298b0446056ddb3ef5e00c6d0cf9b00b9ac3ba46fa235ba06679f9e549c132a57849eb019faa2ccb5d3d31d577de74cceda6df2bd42d1e83e0e52019a6", 0xa7}, {&(0x7f0000000c80)="1a2e7b18d81a25c3f06b5cbb3f2679d1a2de3ab2c3c1f667c81c457e922734ec3abb056b39427159becb680558b3d49dfc72e88b5b6ede1bd9b8b9c520fe028278f72063432e55a1d4bb685d6ca8623550d5e11a3eee28", 0x57}], 0x4, &(0x7f0000000d80)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c}}], 0x38, 0x44081}}], 0x2, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x5, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x1}, 0x94)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x2, 0xfa11, 0x80200001}, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1)
r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x9}, {0x6, 0xfc, 0xa, 0x1}]})
write$ppp(r6, &(0x7f00000005c0)='6\x00', 0x2)
r7 = fsmount(r5, 0x0, 0x1)
fchdir(r7)
getdents(r7, 0x0, 0x41)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

4.387895186s ago: executing program 3 (id=2645):
fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0)

3.023123389s ago: executing program 5 (id=2648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1, 0xfff5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x40}}, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x103000, 0x10d)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x38, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0f4b3570a92b57602c022f93f50f9a6d41b85e87ab39e36b"}]]}, 0x38}}, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xb0c, 0x0, 0x4}]})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @hoplimit_2292={{0xfe, 0x29, 0x8, 0x3}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hoplimit_2292={{0x0, 0x29, 0x8, 0x3}}], 0x78}}], 0x1, 0x4810)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4801)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x81)

2.907675167s ago: executing program 1 (id=2650):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d0003002e332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)
r1 = creat(&(0x7f0000000940)='./file1\x00', 0x130)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@ipv4_newnexthop={0x18, 0x68, 0x5, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x2}}, 0x18}}, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003020002082505a1a440000102030109024400010101f4070904000000020600000024060000002400000000240f01c593f04100000000000905820200000000000905030200000000008e7196383201a37b38d9e6b73f36d4dfce58b607226e2741bacfe8aed610e35d38050d7f6063e97e"], 0x0)
read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000980)={0xc8, 0x1, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x5e3}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0xc8}}, 0x8814)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x3, 0x6, 0x4, 0x1, 0x8, {}, {0x1, 0x0, 0x4, 0xf, 0x0, 0xb1, "ae60922a"}, 0xa1d, 0x4, {0x0}, 0xbf4})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e001073"], 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x1fffffbf, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

2.801733416s ago: executing program 3 (id=2652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200040000000800170001000000800000000000", @ANYRES32=0x1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0100"/28], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = socket$rxrpc(0x21, 0x2, 0x2) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async)
write$dsp(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r8 = syz_io_uring_setup(0x10ab, &(0x7f00000000c0)={0x0, 0x7496, 0x800, 0x3, 0x411001f7}, &(0x7f0000000380)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x5, {0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}})
io_uring_enter(r8, 0x351a, 0x0, 0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003704000000070000000000000000", @ANYRES32=r11, @ANYBLOB="83040500000000002800128008000100736974001c00028006000f0001000000060011004e24000008000300ac1414aa"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

2.519956659s ago: executing program 3 (id=2653):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044804)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x6, 0x4cd}, 0x5}}]}, {0x1}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x5dc}], 0x1}, 0x4)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000))
r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r11, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x8, 0x64, 0x9})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r12, 0xffffffff80000902, r14, &(0x7f0000000280))
sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYRES8=r11], 0x3c}, 0x1, 0x0, 0x0, 0x842}, 0x4000812)

2.51721876s ago: executing program 5 (id=2654):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x108000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0xffff8000, 0x9, 0x4f, 0x8, 0x7, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
kexec_load(0x0, 0x0, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2000)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r5, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14cefffc62d", 0x21, 0x40, 0x0, 0x0)
lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r7, 0x5608, 0x1)
r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6, 0x0, 0x0, 0x3, 0x1, 0xe4ffffffffffffff, 0x85, 0x5c})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_usb_control_io$uac1(r0, 0x0, 0x0)

2.122953531s ago: executing program 4 (id=2656):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x980)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000380)=[<r2=>0x0]})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, r2, 0x0, 0x2, 0x7, 0x9, 0xfffffffb, {0x8, 0xbd60, 0x9, 0x0, 0x5b8a, 0x2, 0x4, 0x200, 0x3, 0x1, 0x8, 0x4, 0x400, 0x200, "62ffb534b06ad9b80e89305cd7c8bd71ab7370e47d084bfde117d562d75afa61"}})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = eventfd2(0xe5c, 0x80000)
r4 = eventfd2(0x4001, 0x800)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000300)={r4, 0x0, 0x2, r3})
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0x1, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]})
r6 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={r6, 0x0, 0x3, r3})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x4004)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000009000000000000000000000000000000000000007f00ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff07000000010000000000000000004000"/112], 0xb8}}, 0x10)

2.068488237s ago: executing program 3 (id=2657):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x820, 0xc, @private1, 0x9}]}, &(0x7f0000003180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r4, 0x10, 0x10, 0x1ff, 0x7f}, &(0x7f0000000180)=0x18)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002680)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x4)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r10 = accept$alg(r9, 0x0, 0x0)
sendmmsg$alg(r10, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r8, 0x7e423000)
read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x3d2)

1.965318094s ago: executing program 4 (id=2658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000910000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1.829747567s ago: executing program 4 (id=2659):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@xdp, &(0x7f00000002c0)=0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)

1.447900047s ago: executing program 0 (id=2660):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x105, 0x0, 0x400000000000a, 0x4, 0x5, 0x2, 0xfffffffffffffffa, 0x80000000}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@xdp, &(0x7f00000002c0)=0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)

1.412187942s ago: executing program 4 (id=2661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000340)={0x0, 0x2710}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0x7}, {0x0, 0xfff1}, {0x7, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$inet_sctp(0x2, 0x0, 0x84)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x334, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)='team0\x00', 0x3, 0x4, 0x3128})
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r7)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000380001800c0001006269747769736500280002800800034000000004080001401f00001408000240000000120400058008000640000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0x10c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x54240, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.169590389s ago: executing program 1 (id=2662):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'user.', './cgroup.cpu/syz1\xd7'}, 0x0, 0x0, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

1.027352879s ago: executing program 3 (id=2663):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x8, 0x0, 0x0}}, 0x10)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) (async)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
syz_io_uring_setup(0x691, &(0x7f0000000400)={0x0, 0x7866, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) (async)
r4 = syz_io_uring_setup(0x691, &(0x7f0000000400)={0x0, 0x7866, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0x30a, &(0x7f0000000680)={0x0, 0x80334c, 0x400, 0x2, 0x3d3, 0x0, r4}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000300))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) (async)
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
syz_io_uring_submit(r7, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40, 0x0, 0x12345})
io_uring_enter(r4, 0x627, 0xc1040000, 0x43, 0x0, 0x0)
r9 = socket(0x10, 0x803, 0x0)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffe, {0x0, 0x0, 0x0, r10, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) (async)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffe, {0x0, 0x0, 0x0, r10, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delqdisc={0x34, 0x25, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0x3, 0x7}, {0xa, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r11, 0x0, 0x0)
syz_usb_control_io$hid(r11, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '\f\"'}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @global=@item_4={0x3, 0x1, 0x2, "c6dc64b9"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x3, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e0503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @local=@item_4={0x3, 0x2, 0x5, 'c^,-'}]}}, 0x0}, 0x0)

876.598766ms ago: executing program 1 (id=2664):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000006c0)={&(0x7f0000000680)=[{0x5, 0x8200, 0x6b, &(0x7f00000004c0)="8ad60084b4ca093e6434ea6dfa221f8a0c3e23801b6adb6be5e3e4ee0ade2a167c84f3e990709fa80a01fce41d6feed609d578a524fe3739843bc145b9b55ee2e576d5c03bf06c547250efcf0d26b7791d6dae23a29ca62f3f8117262796b744d807a81e242153de128898"}, {0x7, 0x9200, 0x0, 0x0}], 0x2})

862.339086ms ago: executing program 0 (id=2665):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x219}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x4050)

808.90548ms ago: executing program 4 (id=2666):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_usb_disconnect(r1)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

511.903159ms ago: executing program 0 (id=2667):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x6000)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0x4100})

448.739391ms ago: executing program 0 (id=2668):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x980)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000380)=[0x0]})
r2 = eventfd2(0x4001, 0x800)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000300)={r2, 0x0, 0x2})
r3 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={r3, 0x0, 0x3})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x4004)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000300000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000009000000000000000000000000000000000000007f00ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff07000000010000000000000000004000"/112], 0xb8}}, 0x10)

209.786799ms ago: executing program 0 (id=2669):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x0, 0x68221}}}}}}]}, 0x48}, 0x1, 0x2000, 0x20, 0x40}, 0x24048880)

0s ago: executing program 0 (id=2670):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8)
splice(r2, 0x0, r5, 0x0, 0x80, 0x8)
timer_settime(r1, 0x0, 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50)

kernel console output (not intermixed with test programs):

SB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.856447][T13313] usb 6-1: Product: 䌎貈㋎轨譲�䲦ˮ��锈뗨匴闥섦و킗狈胂拶﬇��ฦ��꫉⤬ὢ蠩භ욺괕ӎ蒩�ὀ�⋨�殣Ĵ稤�켇�믴릿悬韺╕⥔�ꋆ硴ᾭ꼯묖拗鮜㊪䄵罦댩�პ�詄��衦값짡弢㈥�쓞寣ḻꗼ৕䪲忰튛俎Ӱ筶鸓ꡟ�纲䎧鈧騼⾹ꄰרּ
[  618.889437][T13313] usb 6-1: Manufacturer: ꣬濹㥆�ᢨ릈췣�暊啩㗾ςĔ瞂⦜䠤틶�猌囎宊䮭囖䛩Ⅎ쑧�퟽纬㰶ꩉDz￟�蹓沋쒟츋郰ꔚ䘀璴䲹픷乗��춗ણ힌
[  618.909542][T13313] usb 6-1: SerialNumber: syz
[  619.123886][T13603] netlink: 'syz.5.2310': attribute type 3 has an invalid length.
[  619.149862][T13313] option 6-1:3.6: GSM modem (1-port) converter detected
[  619.190761][T13313] usb 6-1: USB disconnect, device number 42
[  619.204802][T13313] option 6-1:3.6: device disconnected
[  619.292789][T13611] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  619.868607][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[  619.964652][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[  620.078926][T13623] vlan2: entered promiscuous mode
[  620.085026][T13623] bridge0: entered promiscuous mode
[  620.100954][T13629] bridge0: port 3(hsr0) entered blocking state
[  620.115924][T13629] bridge0: port 3(hsr0) entered disabled state
[  620.126226][T13629] hsr0: entered allmulticast mode
[  620.163320][T13629] hsr_slave_0: entered allmulticast mode
[  620.205531][T13629] hsr_slave_1: entered allmulticast mode
[  620.444350][T13629] hsr0: entered promiscuous mode
[  620.714034][T13629] bridge0: port 3(hsr0) entered blocking state
[  620.720440][T13629] bridge0: port 3(hsr0) entered forwarding state
[  620.996988][T13633] FAULT_INJECTION: forcing a failure.
[  620.996988][T13633] name failslab, interval 1, probability 0, space 0, times 0
[  621.020978][T13633] CPU: 1 UID: 0 PID: 13633 Comm: syz.1.2320 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  621.021019][T13633] Tainted: [L]=SOFTLOCKUP
[  621.021030][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  621.021045][T13633] Call Trace:
[  621.021056][T13633]  <TASK>
[  621.021068][T13633]  dump_stack_lvl+0xe8/0x150
[  621.021109][T13633]  should_fail_ex+0x412/0x560
[  621.021147][T13633]  should_failslab+0xa8/0x100
[  621.021181][T13633]  __kmalloc_cache_noprof+0x88/0x660
[  621.021211][T13633]  ? sctp_add_bind_addr+0x8c/0x370
[  621.021255][T13633]  sctp_add_bind_addr+0x8c/0x370
[  621.021301][T13633]  sctp_copy_local_addr_list+0x314/0x4f0
[  621.021339][T13633]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  621.021371][T13633]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  621.021408][T13633]  ? sctp_v4_is_any+0x35/0x60
[  621.021439][T13633]  ? sctp_copy_one_addr+0x93/0x360
[  621.021474][T13633]  sctp_bind_addr_copy+0xb3/0x3c0
[  621.021504][T13633]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  621.021532][T13633]  sctp_connect_new_asoc+0x2ff/0x6b0
[  621.021584][T13633]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  621.021624][T13633]  ? __local_bh_enable_ip+0xd0/0x130
[  621.021652][T13633]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  621.021679][T13633]  ? security_sctp_bind_connect+0x7e/0x2c0
[  621.021714][T13633]  sctp_sendmsg+0x1528/0x2c10
[  621.021749][T13633]  ? __pfx_sctp_sendmsg+0x10/0x10
[  621.021775][T13633]  ? aa_sk_perm+0x6d5/0x900
[  621.021800][T13633]  ? __pfx_aa_sk_perm+0x10/0x10
[  621.021821][T13633]  ? sock_rps_record_flow+0x19/0x400
[  621.021838][T13633]  ? __pfx_inet_sendmsg+0x10/0x10
[  621.021862][T13633]  ? inet_sendmsg+0x2f4/0x370
[  621.021877][T13633]  ? __pfx_inet_sendmsg+0x10/0x10
[  621.021893][T13633]  __sys_sendto+0x5de/0x710
[  621.021920][T13633]  ? __pfx___sys_sendto+0x10/0x10
[  621.021941][T13633]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  621.021967][T13633]  ? __fget_files+0x3a0/0x420
[  621.021998][T13633]  ? ksys_write+0x242/0x270
[  621.022017][T13633]  ? __pfx_ksys_write+0x10/0x10
[  621.022038][T13633]  __x64_sys_sendto+0xde/0x100
[  621.022063][T13633]  do_syscall_64+0x14d/0xf80
[  621.022087][T13633]  ? trace_irq_disable+0x3b/0x150
[  621.022110][T13633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.022126][T13633]  ? clear_bhb_loop+0x40/0x90
[  621.022145][T13633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.022161][T13633] RIP: 0033:0x7f92a0b9c799
[  621.022177][T13633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.022191][T13633] RSP: 002b:00007f92a1989028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  621.022208][T13633] RAX: ffffffffffffffda RBX: 00007f92a0e15fa0 RCX: 00007f92a0b9c799
[  621.022220][T13633] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000004
[  621.022230][T13633] RBP: 00007f92a1989090 R08: 0000200000000280 R09: 0000000000000010
[  621.022241][T13633] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002
[  621.022250][T13633] R13: 00007f92a0e16038 R14: 00007f92a0e15fa0 R15: 00007f92a0f3fa48
[  621.022277][T13633]  </TASK>
[  621.653264][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  621.653283][   T30] audit: type=1326 audit(1772775765.102:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  621.723138][   T30] audit: type=1326 audit(1772775765.102:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  621.805687][   T30] audit: type=1326 audit(1772775765.102:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  621.858386][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2318'.
[  621.883668][T13641] openvswitch: netlink: Invalid VLAN frame
[  621.895358][   T30] audit: type=1326 audit(1772775765.102:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  622.170468][   T30] audit: type=1326 audit(1772775765.102:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  622.258910][   T30] audit: type=1326 audit(1772775765.102:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  622.408512][   T30] audit: type=1326 audit(1772775765.102:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  622.448152][   T30] audit: type=1326 audit(1772775765.102:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  622.519777][   T30] audit: type=1326 audit(1772775765.102:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  622.622976][   T30] audit: type=1326 audit(1772775765.102:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fefefd9c799 code=0x7ffc0000
[  622.808402][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'.
[  623.208660][T13655] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  624.342722][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  624.349236][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  625.317493][T13309] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[  625.468842][T13309] usb 6-1: not running at top speed; connect to a high speed hub
[  625.484343][T13309] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  625.501537][T13309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.517011][T13309] usb 6-1: Product: syz
[  625.525210][T13309] usb 6-1: Manufacturer: syz
[  625.533276][T13309] usb 6-1: SerialNumber: syz
[  625.964852][T13698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.985503][T13698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.013904][T13309] usb 6-1: USB disconnect, device number 43
[  626.057738][T13301] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  626.136206][T13391] udevd[13391]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  626.249255][T13301] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  626.380077][T13301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  626.441157][T13301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  626.538327][T13301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.562607][T13301] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  626.590361][T13301] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  626.654476][T13301] usb 2-1: Product: syz
[  626.662798][T13301] usb 2-1: Manufacturer: syz
[  626.738845][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  626.967573][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  627.028176][T13301] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  627.034141][T13301] cdc_wdm 2-1:1.0: Unknown control protocol
[  627.052330][T13714] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  627.155429][T13301] usb 2-1: USB disconnect, device number 87
[  627.365854][T13721] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  627.687478][T13301] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  628.029513][T13301] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  628.041576][T13301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  628.052050][T13301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  628.062204][T13301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  628.080028][T13301] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  628.089999][T13301] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  628.100281][T13301] usb 2-1: Product: syz
[  628.120026][T13301] usb 2-1: Manufacturer: syz
[  628.164654][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  628.186600][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  628.217604][T13301] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  628.272598][T13301] cdc_wdm 2-1:1.0: Unknown control protocol
[  628.727019][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'.
[  629.193305][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.199983][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.206993][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.213657][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.220178][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.226900][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.233415][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.240099][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.246448][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.253129][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.259474][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.266119][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.272511][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.279164][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.285516][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.292155][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.299034][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.305683][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.312276][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  629.318927][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  629.328330][T13301] usb 2-1: USB disconnect, device number 88
[  629.328404][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  629.482151][T13745] bridge_slave_0: invalid flags given to default FDB implementation
[  629.984131][T13758] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  631.563756][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'.
[  632.780427][T13786] FAULT_INJECTION: forcing a failure.
[  632.780427][T13786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.047467][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.5.2362 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  633.047504][T13786] Tainted: [L]=SOFTLOCKUP
[  633.047513][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  633.047526][T13786] Call Trace:
[  633.047536][T13786]  <TASK>
[  633.047546][T13786]  dump_stack_lvl+0xe8/0x150
[  633.047585][T13786]  should_fail_ex+0x412/0x560
[  633.047610][T13786]  _copy_from_user+0x2d/0xb0
[  633.047636][T13786]  ___sys_sendmsg+0x1c6/0x360
[  633.047655][T13786]  ? __pfx____sys_sendmsg+0x10/0x10
[  633.047694][T13786]  ? __fget_files+0x2a/0x420
[  633.047718][T13786]  ? __fget_files+0x3a0/0x420
[  633.047775][T13786]  __x64_sys_sendmsg+0x1bd/0x2a0
[  633.047807][T13786]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  633.047838][T13786]  ? __pfx_ksys_write+0x10/0x10
[  633.047877][T13786]  do_syscall_64+0x14d/0xf80
[  633.047901][T13786]  ? trace_irq_disable+0x3b/0x150
[  633.047925][T13786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.047941][T13786]  ? clear_bhb_loop+0x40/0x90
[  633.047960][T13786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.047977][T13786] RIP: 0033:0x7fa2f879c799
[  633.047993][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.048007][T13786] RSP: 002b:00007fa2f96e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  633.048024][T13786] RAX: ffffffffffffffda RBX: 00007fa2f8a15fa0 RCX: 00007fa2f879c799
[  633.048036][T13786] RDX: 000000000000c804 RSI: 0000200000000740 RDI: 0000000000000003
[  633.048047][T13786] RBP: 00007fa2f96e1090 R08: 0000000000000000 R09: 0000000000000000
[  633.048057][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.048067][T13786] R13: 00007fa2f8a16038 R14: 00007fa2f8a15fa0 R15: 00007fa2f8b3fa48
[  633.048090][T13786]  </TASK>
[  633.847482][T11306] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  634.016639][T13801] loop4: detected capacity change from 0 to 7
[  634.025071][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.035833][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.117141][T13802] Invalid logical block size (4)
[  634.130729][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.147504][T11306] usb 5-1: Using ep0 maxpacket: 8
[  634.149343][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.187574][T11306] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  634.187744][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.251849][T11306] usb 5-1: config 0 has no interface number 0
[  634.272717][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.291768][T11306] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  634.300118][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.329033][T13467] ldm_validate_partition_table(): Disk read failed.
[  634.344679][T11306] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  634.352110][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.402743][T11306] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  634.406312][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.454333][T13467] Buffer I/O error on dev loop4, logical block 0, async page read
[  634.488505][T13467] Dev loop4: unable to read RDB block 0
[  634.512538][T13467]  loop4: unable to read partition table
[  634.514102][T11306] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  634.549120][T13467] loop4: partition table beyond EOD, truncated
[  634.555061][T11306] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  634.567609][T13801] ldm_validate_partition_table(): Disk read failed.
[  634.580842][T13801] Dev loop4: unable to read RDB block 0
[  634.586577][T13801]  loop4: unable to read partition table
[  634.589249][T11306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.611897][T13801] loop4: partition table beyond EOD, truncated
[  634.625071][T13801] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü�¾SêjºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[  634.699236][T11306] usb 5-1: config 0 descriptor??
[  634.749023][T11306] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  634.880184][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  634.901972][T13817] bridge_slave_0: entered promiscuous mode
[  634.916821][T13817] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  635.257544][T11306] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  635.429983][T11306] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[  635.465248][T11306] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[  635.465291][T11306] usb 2-1: config 0 interface 0 has no altsetting 0
[  635.481430][T11306] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  635.481471][T11306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.481920][T11306] usb 2-1: Product: syz
[  635.481942][T11306] usb 2-1: Manufacturer: syz
[  635.481960][T11306] usb 2-1: SerialNumber: syz
[  635.513350][T11306] usb 2-1: config 0 descriptor??
[  635.532364][T11306] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  635.532851][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  635.587796][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  635.588822][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  635.588916][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  635.589034][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  635.589148][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  635.603749][T11306] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  635.616531][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  635.616660][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3
[  635.616774][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  635.616888][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  635.616974][T11306] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  635.627564][T11306] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  635.737749][T13300] usb 2-1: USB disconnect, device number 89
[  635.742923][T13300] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  635.746795][T13300] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  635.747583][T13300] keyspan 2-1:0.0: device disconnected
[  636.750884][T11306] usb 5-1: USB disconnect, device number 92
[  636.932356][T11306] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  637.050121][ T5917] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  637.082689][T13838] bridge3: the hash_elasticity option has been deprecated and is always 16
[  637.101532][T13838] bridge3: entered promiscuous mode
[  637.227567][ T5917] usb 2-1: device descriptor read/64, error -71
[  637.980370][ T5917] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  638.137582][ T5917] usb 2-1: device descriptor read/64, error -71
[  638.257935][ T5917] usb usb2-port1: attempt power cycle
[  638.627526][ T5917] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  638.658903][ T5917] usb 2-1: device descriptor read/8, error -71
[  638.917713][ T5917] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  638.933425][T13846] FAULT_INJECTION: forcing a failure.
[  638.933425][T13846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  638.966885][T13846] CPU: 1 UID: 0 PID: 13846 Comm: syz.4.2378 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  638.966923][T13846] Tainted: [L]=SOFTLOCKUP
[  638.966932][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  638.966946][T13846] Call Trace:
[  638.966956][T13846]  <TASK>
[  638.966966][T13846]  dump_stack_lvl+0xe8/0x150
[  638.967004][T13846]  should_fail_ex+0x412/0x560
[  638.967038][T13846]  core_sys_select+0x8dd/0xc30
[  638.967087][T13846]  ? __pfx_core_sys_select+0x10/0x10
[  638.967142][T13846]  ? __pfx_set_user_sigmask+0x10/0x10
[  638.967189][T13846]  __se_sys_pselect6+0x267/0x320
[  638.967226][T13846]  ? __pfx___se_sys_pselect6+0x10/0x10
[  638.967256][T13846]  ? __pfx_ksys_write+0x10/0x10
[  638.967285][T13846]  ? __x64_sys_pselect6+0x21/0xf0
[  638.967318][T13846]  do_syscall_64+0x14d/0xf80
[  638.967355][T13846]  ? trace_irq_disable+0x3b/0x150
[  638.967386][T13846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.967408][T13846]  ? clear_bhb_loop+0x40/0x90
[  638.967433][T13846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.967455][T13846] RIP: 0033:0x7f7dc879c799
[  638.967476][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.967495][T13846] RSP: 002b:00007f7dc9639028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  638.967519][T13846] RAX: ffffffffffffffda RBX: 00007f7dc8a16090 RCX: 00007f7dc879c799
[  638.967536][T13846] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040
[  638.967550][T13846] RBP: 00007f7dc9639090 R08: 0000000000000000 R09: 0000000000000000
[  638.967564][T13846] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001
[  638.967578][T13846] R13: 00007f7dc8a16128 R14: 00007f7dc8a16090 R15: 00007f7dc8b3fa48
[  638.967611][T13846]  </TASK>
[  638.983969][ T5917] usb 2-1: device descriptor read/8, error -71
[  639.368062][ T5917] usb usb2-port1: unable to enumerate USB device
[  639.809836][T13865] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  640.536379][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2387'.
[  640.886023][T13880] 8021q: adding VLAN 0 to HW filter on device batadv2
[  640.949441][T13880] batadv2: entered promiscuous mode
[  640.984759][T13880] team0: Port device batadv2 added
[  641.356761][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b980400: rx timeout, send abort
[  641.366336][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b980400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  641.747607][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2392'.
[  643.349818][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2398'.
[  644.227862][T13301] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  644.403124][T13301] usb 6-1: Using ep0 maxpacket: 32
[  644.546515][T13301] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  644.570065][T13921] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  644.638381][T13301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.651090][T13301] usb 6-1: config 0 descriptor??
[  644.682369][T13301] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  645.028146][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2403'.
[  645.071219][T13928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2403'.
[  645.309671][T13301] gspca_vc032x: reg_r err -110
[  645.318269][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.325708][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.333380][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.340588][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.372776][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.391756][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.412575][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.429062][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.445003][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.462877][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.541981][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.560716][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.590478][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.612962][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.630754][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.636105][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.712974][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.718875][T13301] gspca_vc032x: I2c Bus Busy Wait 00
[  645.724214][T13301] gspca_vc032x: Unknown sensor...
[  645.786982][T13301] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  646.033643][T13301] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  646.216506][T13301] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  646.234381][T13301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  646.262462][T13301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  646.282016][T13301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.307315][T13301] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  646.322902][T13301] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  646.331207][T13301] usb 5-1: Product: syz
[  646.335510][T13301] usb 5-1: Manufacturer: syz
[  646.366380][T13301] cdc_wdm 5-1:1.0: skipping garbage
[  646.377520][T13301] cdc_wdm 5-1:1.0: skipping garbage
[  646.422116][T13301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  646.813130][T13301] cdc_wdm 5-1:1.0: Unknown control protocol
[  646.901696][T13301] usb 5-1: USB disconnect, device number 93
[  647.333972][T13300] usb 6-1: USB disconnect, device number 44
[  647.407938][T13301] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  647.602872][T13301] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  647.622013][T13301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  647.677575][T13301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  647.712681][T13301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.731978][T13301] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  647.744271][T13301] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  647.764316][T13301] usb 5-1: Product: syz
[  647.773161][T13301] usb 5-1: Manufacturer: syz
[  647.801805][T13301] cdc_wdm 5-1:1.0: skipping garbage
[  647.843808][T13301] cdc_wdm 5-1:1.0: skipping garbage
[  647.851921][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  647.851934][   T30] audit: type=1326 audit(1772775791.322:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  647.888102][T13301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  647.898006][T13301] cdc_wdm 5-1:1.0: Unknown control protocol
[  647.957437][   T30] audit: type=1326 audit(1772775791.322:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.031441][   T30] audit: type=1326 audit(1772775791.322:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.104140][   T30] audit: type=1326 audit(1772775791.322:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.186031][   T30] audit: type=1326 audit(1772775791.322:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.237774][   T30] audit: type=1326 audit(1772775791.322:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.277489][T13301] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[  648.300457][   T30] audit: type=1326 audit(1772775791.322:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.369786][   T30] audit: type=1326 audit(1772775791.322:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.407840][   T30] audit: type=1326 audit(1772775791.322:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.438578][   T30] audit: type=1326 audit(1772775791.322:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a0b9c799 code=0x7ffc0000
[  648.492140][T13301] usb 2-1: config 8 has an invalid interface number: 80 but max is 0
[  648.500627][T13301] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  648.510895][T13301] usb 2-1: config 8 has no interface number 0
[  648.519513][T13301] usb 2-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  648.532767][T13301] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  648.542166][T13301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.560991][T13301] usb 2-1: NFC: intf ffff88807f374000 id ffffffff8f1d1b80
[  648.685844][T13964] FAULT_INJECTION: forcing a failure.
[  648.685844][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  648.701127][T13964] CPU: 1 UID: 0 PID: 13964 Comm: syz.0.2412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  648.701174][T13964] Tainted: [L]=SOFTLOCKUP
[  648.701183][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  648.701198][T13964] Call Trace:
[  648.701208][T13964]  <TASK>
[  648.701218][T13964]  dump_stack_lvl+0xe8/0x150
[  648.701258][T13964]  should_fail_ex+0x412/0x560
[  648.701293][T13964]  strncpy_from_user+0x36/0x2b0
[  648.701321][T13964]  ? io_fgetxattr_prep+0x18f/0x290
[  648.701500][T13964]  import_xattr_name+0x22/0x70
[  648.701535][T13964]  io_fgetxattr_prep+0x1c1/0x290
[  648.701571][T13964]  io_submit_sqes+0xb35/0x2370
[  648.701685][T13964]  __se_sys_io_uring_enter+0x2cc/0x18c0
[  648.701723][T13964]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  648.701751][T13964]  ? __fget_files+0x3a0/0x420
[  648.701788][T13964]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  648.701822][T13964]  ? fput+0xa0/0xd0
[  648.701854][T13964]  ? ksys_write+0x242/0x270
[  648.701881][T13964]  ? __pfx_ksys_write+0x10/0x10
[  648.701911][T13964]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  648.701949][T13964]  do_syscall_64+0x14d/0xf80
[  648.701982][T13964]  ? trace_irq_disable+0x3b/0x150
[  648.702014][T13964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.702038][T13964]  ? clear_bhb_loop+0x40/0x90
[  648.702067][T13964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.702090][T13964] RIP: 0033:0x7f3570f9c799
[  648.702112][T13964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.702132][T13964] RSP: 002b:00007f3571de7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  648.702157][T13964] RAX: ffffffffffffffda RBX: 00007f3571215fa0 RCX: 00007f3570f9c799
[  648.702175][T13964] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000004
[  648.702189][T13964] RBP: 00007f3571de7090 R08: 0000000000000000 R09: 0000000000000000
[  648.702204][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.702218][T13964] R13: 00007f3571216038 R14: 00007f3571215fa0 R15: 00007f357133fa48
[  648.702253][T13964]  </TASK>
[  648.919311][    C0] wdm_int_callback: 17 callbacks suppressed
[  648.919336][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  648.932060][    C0] wdm_int_callback: 17 callbacks suppressed
[  648.932085][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  648.943453][T13301] usb 5-1: USB disconnect, device number 94
[  648.944120][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  649.021425][T13965] QAT: Device 3 not found
[  650.043844][T13974] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  650.790157][T13301] usb 2-1: USB disconnect, device number 94
[  651.200788][T13988] program syz.1.2418 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  651.392406][T13997] FAULT_INJECTION: forcing a failure.
[  651.392406][T13997] name failslab, interval 1, probability 0, space 0, times 0
[  651.457842][T13997] CPU: 0 UID: 0 PID: 13997 Comm: syz.4.2421 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  651.457879][T13997] Tainted: [L]=SOFTLOCKUP
[  651.457888][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  651.457901][T13997] Call Trace:
[  651.457911][T13997]  <TASK>
[  651.457920][T13997]  dump_stack_lvl+0xe8/0x150
[  651.457958][T13997]  should_fail_ex+0x412/0x560
[  651.458001][T13997]  should_failslab+0xa8/0x100
[  651.458031][T13997]  __kmalloc_noprof+0xe8/0x760
[  651.458055][T13997]  ? snd_interval_refine+0x609/0xa50
[  651.458148][T13997]  ? snd_pcm_hw_refine+0x9b1/0x1710
[  651.458289][T13997]  snd_pcm_hw_refine+0x9b1/0x1710
[  651.458317][T13997]  ? kasan_save_track+0x4f/0x80
[  651.458342][T13997]  ? snd_pcm_hw_param_near+0x7f/0x4d0
[  651.458370][T13997]  ? snd_pcm_oss_release+0xff/0x250
[  651.458396][T13997]  ? fput_close_sync+0x11f/0x240
[  651.458428][T13997]  ? do_syscall_64+0x14d/0xf80
[  651.458460][T13997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.458484][T13997]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  651.458551][T13997]  snd_pcm_hw_param_last+0x3ad/0xb70
[  651.458614][T13997]  snd_pcm_hw_param_near+0x329/0x4d0
[  651.458653][T13997]  snd_pcm_oss_change_params_locked+0x1fed/0x3e00
[  651.458731][T13997]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  651.458760][T13997]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  651.458789][T13997]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  651.458821][T13997]  ? snd_pcm_kernel_ioctl+0x28e/0x9a0
[  651.458844][T13997]  ? snd_pcm_action_nonatomic+0x289/0x2e0
[  651.458884][T13997]  snd_pcm_oss_sync+0x43a/0xfc0
[  651.458921][T13997]  snd_pcm_oss_release+0xff/0x250
[  651.458950][T13997]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  651.458986][T13997]  __fput+0x44f/0xa70
[  651.459029][T13997]  fput_close_sync+0x11f/0x240
[  651.459061][T13997]  ? __pfx_fput_close_sync+0x10/0x10
[  651.459105][T13997]  __x64_sys_close+0x7e/0x110
[  651.459139][T13997]  do_syscall_64+0x14d/0xf80
[  651.459171][T13997]  ? trace_irq_disable+0x3b/0x150
[  651.459202][T13997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.459224][T13997]  ? clear_bhb_loop+0x40/0x90
[  651.459250][T13997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.459273][T13997] RIP: 0033:0x7f7dc879c799
[  651.459310][T13997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.459330][T13997] RSP: 002b:00007f7dc965a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  651.459354][T13997] RAX: ffffffffffffffda RBX: 00007f7dc8a15fa0 RCX: 00007f7dc879c799
[  651.459370][T13997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  651.459384][T13997] RBP: 00007f7dc965a090 R08: 0000000000000000 R09: 0000000000000000
[  651.459398][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  651.459411][T13997] R13: 00007f7dc8a16038 R14: 00007f7dc8a15fa0 R15: 00007f7dc8b3fa48
[  651.459446][T13997]  </TASK>
[  651.910903][T14001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2420'.
[  652.066529][T13995] kvm: pic: non byte write
[  652.133417][T14009] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  652.140407][T14009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  652.157541][T14009] vhci_hcd vhci_hcd.0: Device attached
[  652.164152][T14007] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6)
[  652.170737][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  652.180941][T14009] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5)
[  652.187538][T14009] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  652.199051][T14009] vhci_hcd vhci_hcd.0: Device attached
[  652.249750][T14007] vhci_hcd vhci_hcd.0: Device attached
[  652.325329][T14017] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  652.331957][T14017] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  652.347620][T14017] vhci_hcd vhci_hcd.0: Device attached
[  652.408392][T13308] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  652.657702][T13301] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  652.865372][T13301] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  652.879881][T13301] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  652.890856][T13301] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  652.917218][T14027] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  652.934429][T13301] usb 5-1: config 220 has no interface number 2
[  652.942249][T13301] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  652.959031][T13301] usb 5-1: config 220 interface 0 has no altsetting 0
[  652.966811][T13301] usb 5-1: config 220 interface 76 has no altsetting 0
[  653.027438][T13301] usb 5-1: config 220 interface 1 has no altsetting 0
[  653.088963][T13301] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  653.125692][T13301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.166669][T13301] usb 5-1: Product: syz
[  653.187467][T13301] usb 5-1: Manufacturer: syz
[  653.196681][T13301] usb 5-1: SerialNumber: syz
[  653.552506][T14018] vhci_hcd: connection closed
[  653.557763][T14012] vhci_hcd: connection closed
[  653.558274][T14010] vhci_hcd: connection reset by peer
[  653.563068][T14014] vhci_hcd: connection closed
[  653.598046][T13301] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  653.607521][   T59] vhci_hcd vhci_hcd.4: stop threads
[  653.615410][T13301] uvcvideo 5-1:220.0: No valid video chain found.
[  653.622462][   T59] vhci_hcd vhci_hcd.4: release socket
[  653.640091][T13301] usb 5-1: selecting invalid altsetting 0
[  653.696946][   T59] vhci_hcd vhci_hcd.4: disconnect device
[  653.701894][T13301] usb 5-1: selecting invalid altsetting 0
[  653.711390][T13301] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  653.732607][T13301] usb 5-1: USB disconnect, device number 95
[  653.768075][   T59] vhci_hcd vhci_hcd.4: stop threads
[  653.773931][   T59] vhci_hcd vhci_hcd.4: release socket
[  653.808887][   T59] vhci_hcd vhci_hcd.4: disconnect device
[  653.817542][T13299] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  653.837626][   T59] vhci_hcd vhci_hcd.4: stop threads
[  653.857996][   T59] vhci_hcd vhci_hcd.4: release socket
[  653.876539][   T59] vhci_hcd vhci_hcd.4: disconnect device
[  653.953150][   T59] vhci_hcd vhci_hcd.4: stop threads
[  653.969210][   T59] vhci_hcd vhci_hcd.4: release socket
[  653.979448][T13299] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  653.997533][T13299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  654.007967][   T59] vhci_hcd vhci_hcd.4: disconnect device
[  654.028368][T13299] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  654.066063][T13299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.130646][T13299] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  654.178683][T13299] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  654.201611][T13299] usb 6-1: Product: syz
[  654.205826][T13299] usb 6-1: Manufacturer: syz
[  654.237925][T13299] cdc_wdm 6-1:1.0: skipping garbage
[  654.244199][T13299] cdc_wdm 6-1:1.0: skipping garbage
[  654.302753][T13299] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  654.314819][T13299] cdc_wdm 6-1:1.0: Unknown control protocol
[  654.457511][T13301] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  654.478366][T13313] usb 6-1: USB disconnect, device number 45
[  654.629163][T13301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.652411][T13301] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  654.695954][T13301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.724164][T13301] usb 5-1: config 0 descriptor??
[  654.773962][T13301] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  654.997521][T13313] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  655.007282][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.037563][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.080996][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.105270][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.144881][T14051] syzkaller1: entered promiscuous mode
[  655.154155][T13301] usb 5-1: USB disconnect, device number 96
[  655.161615][T14051] syzkaller1: entered allmulticast mode
[  655.173113][T13313] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  655.210759][T13313] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  655.225346][T13313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  655.237898][T13313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.269494][T13313] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  655.285429][T13313] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  655.294280][T13313] usb 6-1: Product: syz
[  655.299174][T13313] usb 6-1: Manufacturer: syz
[  655.323059][T13313] cdc_wdm 6-1:1.0: skipping garbage
[  655.328804][T13313] cdc_wdm 6-1:1.0: skipping garbage
[  655.336512][T13313] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  655.343714][T13313] cdc_wdm 6-1:1.0: Unknown control protocol
[  656.104152][T14069] netlink: 'syz.4.2439': attribute type 13 has an invalid length.
[  656.112306][T14069] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2439'.
[  656.493931][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.500611][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.507997][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.514652][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.521714][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.528370][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.534717][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.541352][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.552194][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.558808][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.565217][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.571830][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.578368][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.584976][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.591706][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.598361][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.605021][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.611913][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.618450][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  656.625061][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  656.634193][T11306] usb 6-1: USB disconnect, device number 46
[  656.640343][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  657.807636][T13308] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  657.909316][T14078] netlink: 'syz.0.2442': attribute type 6 has an invalid length.
[  659.160940][ T5917] usb usb42-port1: attempt power cycle
[  659.647592][T13301] usb 6-1: new low-speed USB device number 47 using dummy_hcd
[  659.778426][ T5917] usb usb42-port1: unable to enumerate USB device
[  659.809019][T13301] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  659.824192][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  659.877485][T13301] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  659.917474][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  659.961017][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  659.988621][T13301] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  660.077803][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  660.110295][T13301] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  660.167653][T14111] FAULT_INJECTION: forcing a failure.
[  660.167653][T14111] name failslab, interval 1, probability 0, space 0, times 0
[  660.178255][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  660.256067][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  660.314157][T14111] CPU: 0 UID: 0 PID: 14111 Comm: syz.1.2453 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.314192][T14111] Tainted: [L]=SOFTLOCKUP
[  660.314201][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  660.314215][T14111] Call Trace:
[  660.314210][T13301] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  660.314225][T14111]  <TASK>
[  660.314236][T14111]  dump_stack_lvl+0xe8/0x150
[  660.314323][T14111]  should_fail_ex+0x412/0x560
[  660.314431][T14111]  should_failslab+0xa8/0x100
[  660.314513][T14111]  ? do_getname+0x2e/0x250
[  660.314594][T14111]  kmem_cache_alloc_noprof+0x87/0x650
[  660.314681][T14111]  do_getname+0x2e/0x250
[  660.314753][T14111]  ? getname_flags+0x11/0x20
[  660.314833][T14111]  __se_sys_statx+0xd7/0x2a0
[  660.314937][T14111]  ? __pfx___se_sys_statx+0x10/0x10
[  660.315024][T14111]  ? __fget_files+0x3a0/0x420
[  660.315120][T14111]  ? fput+0xa0/0xd0
[  660.315196][T14111]  ? ksys_write+0x242/0x270
[  660.315261][T14111]  ? __pfx_ksys_write+0x10/0x10
[  660.315335][T14111]  ? __x64_sys_statx+0x20/0xc0
[  660.315421][T14111]  do_syscall_64+0x14d/0xf80
[  660.315515][T14111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.315571][T14111]  ? clear_bhb_loop+0x40/0x90
[  660.315653][T14111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.315708][T14111] RIP: 0033:0x7f92a0b9c799
[  660.315785][T14111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.315858][T14111] RSP: 002b:00007f92a1989028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  660.315920][T14111] RAX: ffffffffffffffda RBX: 00007f92a0e15fa0 RCX: 00007f92a0b9c799
[  660.315962][T14111] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  660.316003][T14111] RBP: 00007f92a1989090 R08: 0000000000000000 R09: 0000000000000000
[  660.316042][T14111] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  660.316077][T14111] R13: 00007f92a0e16038 R14: 00007f92a0e15fa0 R15: 00007f92a0f3fa48
[  660.316166][T14111]  </TASK>
[  660.854123][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  660.913849][T13301] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  660.937553][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  660.957843][T13301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  661.010733][T13301] usb 6-1: string descriptor 0 read error: -22
[  661.017113][T13301] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  661.026613][T13301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.071330][T13301] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  661.509378][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  661.527132][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.623345][ T5917] usb 6-1: USB disconnect, device number 47
[  664.207702][T11306] usb 6-1: new low-speed USB device number 48 using dummy_hcd
[  664.387796][T11306] usb 6-1: Invalid ep0 maxpacket: 64
[  664.576065][T11306] usb 6-1: new low-speed USB device number 49 using dummy_hcd
[  664.900435][T11306] usb 6-1: Invalid ep0 maxpacket: 64
[  665.033213][T11306] usb usb6-port1: attempt power cycle
[  665.528606][T11306] usb 6-1: new low-speed USB device number 50 using dummy_hcd
[  665.587927][T11306] usb 6-1: Invalid ep0 maxpacket: 64
[  665.727487][T11306] usb 6-1: new low-speed USB device number 51 using dummy_hcd
[  665.748166][T11306] usb 6-1: Invalid ep0 maxpacket: 64
[  665.754857][T11306] usb usb6-port1: unable to enumerate USB device
[  666.230232][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.267803][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.399712][T14199] input: syz1 as /devices/virtual/input/input44
[  666.505930][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'.
[  666.546982][T14201] usb 1-1: USB disconnect, device number 31
[  666.598813][T14201] hub 1-0:1.0: USB hub found
[  666.605201][T14201] hub 1-0:1.0: 1 port detected
[  666.857639][T11306] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  667.007535][T11306] usb 1-1: Using ep0 maxpacket: 16
[  667.016138][T11306] usb 1-1: config 127 has an invalid interface number: 124 but max is 0
[  667.025896][T11306] usb 1-1: config 127 has no interface number 0
[  667.034785][T11306] usb 1-1: config 127 interface 124 has no altsetting 0
[  667.046702][T11306] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  667.056343][T11306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.065085][T11306] usb 1-1: Product: syz
[  667.069787][T11306] usb 1-1: Manufacturer: syz
[  667.074642][T11306] usb 1-1: SerialNumber: syz
[  667.307486][T13308] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  667.529352][T13308] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  667.538530][T13308] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  667.549200][T13308] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  667.558726][T13308] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.621214][T13308] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  667.632216][T13308] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  667.642913][T13308] usb 6-1: Product: syz
[  667.652635][T13308] usb 6-1: Manufacturer: syz
[  667.673216][T13308] cdc_wdm 6-1:1.0: skipping garbage
[  667.680292][T13308] cdc_wdm 6-1:1.0: skipping garbage
[  667.693055][T13308] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  667.702437][T13308] cdc_wdm 6-1:1.0: Unknown control protocol
[  667.880475][T13308] usb 6-1: USB disconnect, device number 52
[  668.190930][T11306] usb 1-1: USB disconnect, device number 32
[  668.367758][T13299] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  668.509505][T14218] bond0: entered promiscuous mode
[  668.530061][T13299] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  668.547476][T14218] 
@ÿ: entered promiscuous mode
[  668.552974][T13299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  668.567651][T14218] bond_slave_1: entered promiscuous mode
[  668.580416][T13299] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  668.592880][T13299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  668.630503][T13299] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  668.657653][T13299] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  668.689579][T13299] usb 6-1: Product: syz
[  668.698845][T13299] usb 6-1: Manufacturer: syz
[  668.724209][T14217] bond0: left promiscuous mode
[  668.729127][T14217] 
@ÿ: left promiscuous mode
[  668.738789][T13299] cdc_wdm 6-1:1.0: skipping garbage
[  668.745799][T13299] cdc_wdm 6-1:1.0: skipping garbage
[  668.755203][T14217] bond_slave_1: left promiscuous mode
[  668.763851][T13299] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  668.781169][T13299] cdc_wdm 6-1:1.0: Unknown control protocol
[  669.587439][T13308] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  669.787610][T13308] usb 2-1: Using ep0 maxpacket: 32
[  669.799230][T13308] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  669.827688][T13308] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  669.863964][T13308] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  669.875448][T13308] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  669.888981][T13308] usb 2-1: config 0 interface 0 has no altsetting 0
[  669.902076][T13308] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  669.918365][T13308] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  669.927144][T13308] usb 2-1: Product: syz
[  669.931586][T13308] usb 2-1: Manufacturer: syz
[  669.936285][T13308] usb 2-1: SerialNumber: syz
[  669.960593][T13308] usb 2-1: config 0 descriptor??
[  669.976802][    C0] wdm_int_callback: 8 callbacks suppressed
[  669.976826][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  669.989296][    C0] wdm_int_callback: 8 callbacks suppressed
[  669.989312][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.001538][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.008149][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.014430][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.021046][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.027357][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.034038][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.040377][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.046978][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.053726][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.060545][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.067139][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.073765][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.080061][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.086753][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.093249][T11306] usb 6-1: USB disconnect, device number 53
[  670.099669][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  670.099701][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  670.099714][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  670.134012][T13308] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  670.174047][T13308] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  670.351871][T13299] usb 2-1: USB disconnect, device number 95
[  670.358013][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  670.376812][T13299] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  670.553453][T14234] ldusb: No device or device unplugged -19
[  670.792252][   T30] kauditd_printk_skb: 1042 callbacks suppressed
[  670.792279][   T30] audit: type=1326 audit(1772775814.262:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  670.880684][T14250] vivid-007: =================  START STATUS  =================
[  670.888739][T14250] vivid-007: Generate PTS: true
[  670.893768][T14250] vivid-007: Generate SCR: true
[  670.896379][   T30] audit: type=1326 audit(1772775814.302:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  670.915280][T14250] tpg source WxH: 320x240 (Y'CbCr)
[  670.932417][T14250] tpg field: 1
[  670.939999][T14250] tpg crop: (0,0)/320x240
[  670.944625][T14250] tpg compose: (0,0)/320x240
[  670.949979][T14250] tpg colorspace: 8
[  670.953973][T14250] tpg transfer function: 0/0
[  670.959071][T14250] tpg Y'CbCr encoding: 0/0
[  670.963753][T14250] tpg quantization: 0/0
[  670.982545][T14250] tpg RGB range: 0/2
[  670.986652][T14250] vivid-007: ==================  END STATUS  ==================
[  671.021357][   T30] audit: type=1326 audit(1772775814.312:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  671.100567][   T30] audit: type=1326 audit(1772775814.312:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  671.166417][   T30] audit: type=1326 audit(1772775814.312:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  671.518480][   T30] audit: type=1326 audit(1772775814.322:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  671.600439][   T30] audit: type=1326 audit(1772775814.322:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  671.628333][T14263] FAULT_INJECTION: forcing a failure.
[  671.628333][T14263] name failslab, interval 1, probability 0, space 0, times 0
[  671.643507][T14263] CPU: 0 UID: 0 PID: 14263 Comm: syz.3.2497 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  671.643541][T14263] Tainted: [L]=SOFTLOCKUP
[  671.643550][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  671.643564][T14263] Call Trace:
[  671.643574][T14263]  <TASK>
[  671.643583][T14263]  dump_stack_lvl+0xe8/0x150
[  671.643620][T14263]  should_fail_ex+0x412/0x560
[  671.643663][T14263]  should_failslab+0xa8/0x100
[  671.643694][T14263]  __kmalloc_noprof+0xe8/0x760
[  671.643719][T14263]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  671.643752][T14263]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  671.643783][T14263]  genl_family_rcv_msg_doit+0xd9/0x330
[  671.643814][T14263]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  671.643873][T14263]  ? apparmor_capable+0x126/0x170
[  671.643910][T14263]  ? bpf_lsm_capable+0x9/0x20
[  671.643940][T14263]  ? security_capable+0x7e/0x2c0
[  671.643968][T14263]  genl_rcv_msg+0x61c/0x7a0
[  671.643991][T14263]  ? __pfx_genl_rcv_msg+0x10/0x10
[  671.644007][T14263]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  671.644131][T14263]  ? __pfx_nl80211_set_interface+0x10/0x10
[  671.644152][T14263]  ? __pfx_nl80211_post_doit+0x10/0x10
[  671.644170][T14263]  ? __lock_acquire+0x6b5/0x2cf0
[  671.644201][T14263]  netlink_rcv_skb+0x232/0x4b0
[  671.644226][T14263]  ? __pfx_genl_rcv_msg+0x10/0x10
[  671.644244][T14263]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  671.644280][T14263]  ? down_read+0x272/0x2e0
[  671.644297][T14263]  ? genl_rcv+0xd/0x40
[  671.644315][T14263]  genl_rcv+0x28/0x40
[  671.644330][T14263]  netlink_unicast+0x80f/0x9b0
[  671.644357][T14263]  ? __pfx_netlink_unicast+0x10/0x10
[  671.644380][T14263]  ? netlink_sendmsg+0x650/0xb40
[  671.644402][T14263]  ? skb_put+0x11b/0x210
[  671.644435][T14263]  netlink_sendmsg+0x813/0xb40
[  671.644467][T14263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  671.644494][T14263]  ? aa_sock_msg_perm+0xf1/0x1b0
[  671.644518][T14263]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  671.644540][T14263]  ____sys_sendmsg+0x972/0x9f0
[  671.644576][T14263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  671.644610][T14263]  ? import_iovec+0x73/0xa0
[  671.644650][T14263]  ___sys_sendmsg+0x2a5/0x360
[  671.644672][T14263]  ? __pfx____sys_sendmsg+0x10/0x10
[  671.644720][T14263]  ? __fget_files+0x2a/0x420
[  671.644748][T14263]  ? __fget_files+0x3a0/0x420
[  671.644785][T14263]  __x64_sys_sendmsg+0x1bd/0x2a0
[  671.644806][T14263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  671.644832][T14263]  ? __pfx_ksys_write+0x10/0x10
[  671.644861][T14263]  do_syscall_64+0x14d/0xf80
[  671.644889][T14263]  ? trace_irq_disable+0x3b/0x150
[  671.644916][T14263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.644934][T14263]  ? clear_bhb_loop+0x40/0x90
[  671.644956][T14263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.644974][T14263] RIP: 0033:0x7fefefd9c799
[  671.644993][T14263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.645008][T14263] RSP: 002b:00007feff0bd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  671.645028][T14263] RAX: ffffffffffffffda RBX: 00007feff0015fa0 RCX: 00007fefefd9c799
[  671.645042][T14263] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  671.645053][T14263] RBP: 00007feff0bd6090 R08: 0000000000000000 R09: 0000000000000000
[  671.645065][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.645076][T14263] R13: 00007feff0016038 R14: 00007feff0015fa0 R15: 00007feff013fa48
[  671.645103][T14263]  </TASK>
[  672.006924][   T30] audit: type=1326 audit(1772775814.322:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  672.029537][   T30] audit: type=1326 audit(1772775814.322:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  672.051884][   T30] audit: type=1326 audit(1772775814.322:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.0.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  673.217544][T13308] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  673.367476][T13308] usb 6-1: device descriptor read/64, error -71
[  673.638071][T13308] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  673.797440][T13308] usb 6-1: device descriptor read/64, error -71
[  673.919346][T13308] usb usb6-port1: attempt power cycle
[  673.989098][T13301] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  674.150179][T13301] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  674.159747][T13301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  674.187569][T13301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  674.205016][T13301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.218643][T13301] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  674.228290][T13301] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  674.236492][T13301] usb 2-1: Product: syz
[  674.305739][T13308] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  674.323862][T13301] usb 2-1: Manufacturer: syz
[  674.346752][T13308] usb 6-1: device descriptor read/8, error -71
[  674.367204][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  674.373068][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  674.381697][T13301] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  674.389406][T13301] cdc_wdm 2-1:1.0: Unknown control protocol
[  674.574204][T13301] usb 2-1: USB disconnect, device number 96
[  674.607959][T13308] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  674.662190][T13308] usb 6-1: device descriptor read/8, error -71
[  674.787885][T13308] usb usb6-port1: unable to enumerate USB device
[  675.137540][T13301] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  675.411059][T13301] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  675.423411][T13301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  675.448439][T13301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  675.482112][T13301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.498630][T13301] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  675.512127][T13301] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  675.520838][T13301] usb 2-1: Product: syz
[  675.525226][T13301] usb 2-1: Manufacturer: syz
[  675.543466][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  675.555274][T13301] cdc_wdm 2-1:1.0: skipping garbage
[  675.588193][T13301] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  675.606321][T13301] cdc_wdm 2-1:1.0: Unknown control protocol
[  675.686725][T11306] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  675.897679][T11306] usb 1-1: Using ep0 maxpacket: 16
[  675.914972][T11306] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  675.924462][T11306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.937622][T11306] usb 1-1: Product: syz
[  675.941830][T11306] usb 1-1: Manufacturer: syz
[  675.974811][T11306] usb 1-1: SerialNumber: syz
[  675.982648][T11306] usb 1-1: config 0 descriptor??
[  676.002623][T11306] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  676.157458][T13301] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  676.218132][T11306] usb 1-1: clie_3_5_startup: get config number failed: -71
[  676.225693][T11306] visor 1-1:0.0: probe with driver visor failed with error -71
[  676.319538][T13301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  676.352797][T13301] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c
[  676.366237][T11306] usb 1-1: USB disconnect, device number 33
[  676.392425][T13301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.439243][T13301] usb 5-1: config 0 descriptor??
[  676.445791][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2511'.
[  676.568489][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  676.570422][T13299] usb 2-1: USB disconnect, device number 97
[  676.575155][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  676.575177][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  676.667835][T14313] netlink: 'syz.3.2511': attribute type 10 has an invalid length.
[  676.690073][T14313] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  676.750765][T13301] usb 5-1: string descriptor 0 read error: -71
[  677.297638][T13301] usb 5-1: reset high-speed USB device number 97 using dummy_hcd
[  677.530247][T13301] usb 5-1: device firmware changed
[  677.547463][T13301] usb 5-1: USB disconnect, device number 97
[  677.707458][T13301] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  677.868908][T13301] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  677.877513][T13301] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  677.901189][T13301] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  677.932699][T13301] usb 5-1: config 220 has no interface number 2
[  677.987646][T13301] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  678.005247][T13301] usb 5-1: config 220 interface 0 has no altsetting 0
[  678.015372][T13301] usb 5-1: config 220 interface 76 has no altsetting 0
[  678.025531][T13301] usb 5-1: config 220 interface 1 has no altsetting 0
[  678.048381][T13301] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  678.066184][T13301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.077405][T13301] usb 5-1: Product: syz
[  678.108930][T13301] usb 5-1: Manufacturer: syz
[  678.136687][T13301] usb 5-1: SerialNumber: syz
[  678.518851][T13301] usb 5-1: selecting invalid altsetting 0
[  678.527905][T13301] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  678.565152][T13301] uvcvideo 5-1:220.0: No valid video chain found.
[  678.627270][T13301] usb 5-1: selecting invalid altsetting 0
[  678.640526][T13301] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  678.678275][T13301] usb 5-1: USB disconnect, device number 98
[  679.657526][T13301] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  679.807758][T13299] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  679.827432][T13301] usb 2-1: Using ep0 maxpacket: 32
[  679.828987][T13301] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  679.829011][T13301] usb 2-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config
[  679.829027][T13301] usb 2-1: config 0 has no interface number 0
[  679.829056][T13301] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  679.829077][T13301] usb 2-1: config 0 interface 184 has no altsetting 0
[  679.831121][T13301] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  679.831143][T13301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.831158][T13301] usb 2-1: Product: syz
[  679.831170][T13301] usb 2-1: Manufacturer: syz
[  679.831182][T13301] usb 2-1: SerialNumber: syz
[  679.838535][T13301] usb 2-1: config 0 descriptor??
[  679.840715][T13301] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  679.840871][T13301] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  680.025385][T13299] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  680.025420][T13299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  680.025440][T13299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  680.025457][T13299] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  680.047557][T13299] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  680.047593][T13299] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  680.047618][T13299] usb 5-1: Manufacturer: syz
[  680.077544][T13299] usb 5-1: config 0 descriptor??
[  680.138300][T13301] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  680.344846][T13301] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  680.344871][T13301] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  680.344889][T13301] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  680.344939][T13301] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  680.346924][T13301] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  680.346947][T13301] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  680.346963][T13301] usb 6-1: Product: syz
[  680.346975][T13301] usb 6-1: Manufacturer: syz
[  680.362689][T13301] cdc_wdm 6-1:1.0: skipping garbage
[  680.362707][T13301] cdc_wdm 6-1:1.0: skipping garbage
[  680.364480][T13301] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  680.364496][T13301] cdc_wdm 6-1:1.0: Unknown control protocol
[  680.468853][T14360] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  680.468919][T14360] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  680.469034][T14360] vhci_hcd vhci_hcd.0: Device attached
[  680.510245][T13299] hid_parser_main: 2 callbacks suppressed
[  680.510263][T13299] appleir 0003:05AC:8243.001F: unknown main item tag 0x0
[  680.526083][T13299] appleir 0003:05AC:8243.001F: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  680.572858][T11306] usb 6-1: USB disconnect, device number 58
[  680.792127][T13308] usb 34-1: SetAddress Request (2) to port 0
[  680.792215][T13308] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  681.043359][T14367] xt_CT: You must specify a L4 protocol and not use inversions on it
[  681.060397][T14367] libceph: resolve '4' (ret=-3): failed
[  681.067480][T11306] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  681.219542][T11306] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  681.231606][T11306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.242500][T11306] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  681.253331][T11306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.269045][T11306] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  681.279783][T11306] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  681.289077][T14361] vhci_hcd: connection reset by peer
[  681.296353][   T12] vhci_hcd vhci_hcd.0: stop threads
[  681.304476][   T12] vhci_hcd vhci_hcd.0: release socket
[  681.311654][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  681.337483][T11306] usb 6-1: Product: syz
[  681.342847][T11306] usb 6-1: Manufacturer: syz
[  681.364268][T11306] cdc_wdm 6-1:1.0: skipping garbage
[  681.401163][T11306] cdc_wdm 6-1:1.0: skipping garbage
[  681.440388][T11306] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  681.447230][T11306] cdc_wdm 6-1:1.0: Unknown control protocol
[  681.516213][T14370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.552847][T14370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.861957][T14373] FAULT_INJECTION: forcing a failure.
[  681.861957][T14373] name failslab, interval 1, probability 0, space 0, times 0
[  681.875239][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.0.2526 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  681.875274][T14373] Tainted: [L]=SOFTLOCKUP
[  681.875282][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  681.875304][T14373] Call Trace:
[  681.875314][T14373]  <TASK>
[  681.875322][T14373]  dump_stack_lvl+0xe8/0x150
[  681.875358][T14373]  should_fail_ex+0x412/0x560
[  681.875389][T14373]  should_failslab+0xa8/0x100
[  681.875417][T14373]  __kmalloc_cache_noprof+0x88/0x660
[  681.875441][T14373]  ? basic_init+0x50/0x130
[  681.875552][T14373]  basic_init+0x50/0x130
[  681.875577][T14373]  tcf_proto_create+0x248/0x330
[  681.875669][T14373]  tc_new_tfilter+0x12ff/0x1780
[  681.875728][T14373]  ? __pfx_tc_new_tfilter+0x10/0x10
[  681.875759][T14373]  ? is_bpf_text_address+0x26/0x2b0
[  681.875816][T14373]  ? __pfx_tc_new_tfilter+0x10/0x10
[  681.875867][T14373]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  681.875984][T14373]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  681.876014][T14373]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.876048][T14373]  ? __lock_acquire+0x6b5/0x2cf0
[  681.876087][T14373]  netlink_rcv_skb+0x232/0x4b0
[  681.876118][T14373]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.876150][T14373]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.876194][T14373]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.876232][T14373]  netlink_unicast+0x80f/0x9b0
[  681.876268][T14373]  ? __pfx_netlink_unicast+0x10/0x10
[  681.876305][T14373]  ? netlink_sendmsg+0x650/0xb40
[  681.876333][T14373]  ? skb_put+0x11b/0x210
[  681.876369][T14373]  netlink_sendmsg+0x813/0xb40
[  681.876410][T14373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.876444][T14373]  ? aa_sock_msg_perm+0xf1/0x1b0
[  681.876476][T14373]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  681.876506][T14373]  ____sys_sendmsg+0x972/0x9f0
[  681.876550][T14373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  681.876595][T14373]  ? import_iovec+0x73/0xa0
[  681.876633][T14373]  ___sys_sendmsg+0x2a5/0x360
[  681.876661][T14373]  ? __pfx____sys_sendmsg+0x10/0x10
[  681.876721][T14373]  ? __fget_files+0x2a/0x420
[  681.876753][T14373]  ? __fget_files+0x3a0/0x420
[  681.876795][T14373]  __x64_sys_sendmsg+0x1bd/0x2a0
[  681.876821][T14373]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  681.876854][T14373]  ? __pfx_ksys_write+0x10/0x10
[  681.876891][T14373]  do_syscall_64+0x14d/0xf80
[  681.876925][T14373]  ? trace_irq_disable+0x3b/0x150
[  681.876957][T14373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.876980][T14373]  ? clear_bhb_loop+0x40/0x90
[  681.877008][T14373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.877031][T14373] RIP: 0033:0x7f3570f9c799
[  681.877053][T14373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.877073][T14373] RSP: 002b:00007f3571de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.877097][T14373] RAX: ffffffffffffffda RBX: 00007f3571215fa0 RCX: 00007f3570f9c799
[  681.877113][T14373] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  681.877127][T14373] RBP: 00007f3571de7090 R08: 0000000000000000 R09: 0000000000000000
[  681.877141][T14373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.877153][T14373] R13: 00007f3571216038 R14: 00007f3571215fa0 R15: 00007f357133fa48
[  681.877184][T14373]  </TASK>
[  682.345359][T11306] usb 2-1: USB disconnect, device number 98
[  682.596970][T14383] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  682.926586][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  682.933249][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  682.935947][T13309] usb 6-1: USB disconnect, device number 59
[  682.939357][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  683.227463][T13299] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  683.500549][T13299] usb 2-1: Using ep0 maxpacket: 32
[  683.551090][T13301] usb 5-1: USB disconnect, device number 99
[  683.567571][T13299] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  683.618257][T13299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.678928][T13299] usb 2-1: config 0 descriptor??
[  683.730896][T13299] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  684.275201][T14398] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2534'.
[  684.580566][T14398] netlink: 'syz.5.2534': attribute type 7 has an invalid length.
[  684.620986][T14398] netlink: 'syz.5.2534': attribute type 8 has an invalid length.
[  684.694640][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2534'.
[  684.791751][T14398] ip6gretap0: entered promiscuous mode
[  684.800108][T14398] syz_tun: entered promiscuous mode
[  684.808208][T14398] gretap0: entered promiscuous mode
[  684.814593][T14398] debugfs: 'hsr1' already exists in 'hsr'
[  684.823695][T14398] Cannot create hsr debugfs directory
[  685.367217][T14409] netlink: 'syz.4.2537': attribute type 1 has an invalid length.
[  685.465076][T13299] gspca_vc032x: reg_w err -71
[  685.470036][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.486863][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.507473][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.553642][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.589458][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.603146][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.616872][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.632528][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.657503][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.679348][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2536'.
[  685.688379][T14417] openvswitch: netlink: Invalid VLAN frame
[  685.707066][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.722648][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.734949][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.767098][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.777157][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.790259][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  685.796816][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  685.845186][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.856211][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.864392][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.869813][T13308] usb 34-1: device descriptor read/8, error -110
[  685.870786][T13299] gspca_vc032x: I2c Bus Busy Wait 00
[  685.907452][T13299] gspca_vc032x: Unknown sensor...
[  685.977569][T13299] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  686.044384][T13299] usb 2-1: USB disconnect, device number 99
[  686.209024][T13309] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  686.269097][T13308] usb usb34-port1: attempt power cycle
[  686.391383][T13309] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  686.408482][T13309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.462957][T13309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  686.484480][T13309] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.511970][T13309] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  686.521534][T13309] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  686.548196][T13309] usb 5-1: Product: syz
[  686.557056][T13309] usb 5-1: Manufacturer: syz
[  686.595001][T13309] cdc_wdm 5-1:1.0: skipping garbage
[  686.607143][T13309] cdc_wdm 5-1:1.0: skipping garbage
[  686.629479][T13309] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  686.643852][T13309] cdc_wdm 5-1:1.0: Unknown control protocol
[  686.802626][T13309] usb 5-1: USB disconnect, device number 100
[  686.849363][T13308] usb usb34-port1: unable to enumerate USB device
[  687.120098][T14870] netlink: 'syz.0.2548': attribute type 6 has an invalid length.
[  687.317481][T13309] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  687.529519][T13309] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  687.538038][T13301] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  687.562915][T13309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  687.628255][T13309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  687.647557][T13309] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.681094][T13309] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  687.696347][T13309] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  687.741937][T13301] usb 1-1: config 0 has an invalid interface number: 81 but max is 2
[  687.759274][T13301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  687.771266][T13309] usb 5-1: Product: syz
[  687.780925][T13309] usb 5-1: Manufacturer: syz
[  687.796561][T13301] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  687.849564][T13301] usb 1-1: config 0 has no interface number 0
[  687.855742][T13301] usb 1-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  687.910724][T13309] cdc_wdm 5-1:1.0: skipping garbage
[  687.917531][T13309] cdc_wdm 5-1:1.0: skipping garbage
[  687.970729][T13301] usb 1-1: config 0 interface 81 has no altsetting 0
[  687.995968][T13301] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a
[  688.044587][T13301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.096141][T13301] usb 1-1: config 0 descriptor??
[  688.138654][T14884] FAULT_INJECTION: forcing a failure.
[  688.138654][T14884] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.159241][T13309] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  688.194891][T14884] CPU: 1 UID: 0 PID: 14884 Comm: syz.1.2551 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  688.194928][T14884] Tainted: [L]=SOFTLOCKUP
[  688.194938][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  688.194953][T14884] Call Trace:
[  688.194961][T14884]  <TASK>
[  688.194972][T14884]  dump_stack_lvl+0xe8/0x150
[  688.195015][T14884]  should_fail_ex+0x412/0x560
[  688.195052][T14884]  _copy_from_user+0x2d/0xb0
[  688.195095][T14884]  snd_seq_write+0x309/0x820
[  688.195222][T14884]  ? __pfx_snd_seq_write+0x10/0x10
[  688.195266][T14884]  ? bpf_lsm_file_permission+0x9/0x20
[  688.195295][T14884]  ? security_file_permission+0x75/0x260
[  688.195323][T14884]  ? rw_verify_area+0x255/0x4d0
[  688.195347][T14884]  ? __pfx_snd_seq_write+0x10/0x10
[  688.195376][T14884]  vfs_write+0x29a/0xb90
[  688.195408][T14884]  ? __pfx_vfs_write+0x10/0x10
[  688.195435][T14884]  ? __fget_files+0x2a/0x420
[  688.195469][T14884]  ? __fget_files+0x2a/0x420
[  688.195498][T14884]  ? __fget_files+0x3a0/0x420
[  688.195530][T14884]  ? __fget_files+0x2a/0x420
[  688.195571][T14884]  ksys_write+0x150/0x270
[  688.195597][T14884]  ? __pfx_ksys_write+0x10/0x10
[  688.195632][T14884]  do_syscall_64+0x14d/0xf80
[  688.195666][T14884]  ? trace_irq_disable+0x3b/0x150
[  688.195698][T14884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.195722][T14884]  ? clear_bhb_loop+0x40/0x90
[  688.195750][T14884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.195772][T14884] RIP: 0033:0x7f92a0b9c799
[  688.195794][T14884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.195814][T14884] RSP: 002b:00007f92a1989028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  688.195838][T14884] RAX: ffffffffffffffda RBX: 00007f92a0e15fa0 RCX: 00007f92a0b9c799
[  688.195855][T14884] RDX: 00000000fffffee4 RSI: 00002000000000c0 RDI: 0000000000000003
[  688.195869][T14884] RBP: 00007f92a1989090 R08: 0000000000000000 R09: 0000000000000000
[  688.195883][T14884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.195896][T14884] R13: 00007f92a0e16038 R14: 00007f92a0e15fa0 R15: 00007f92a0f3fa48
[  688.195931][T14884]  </TASK>
[  688.206753][T13309] cdc_wdm 5-1:1.0: Unknown control protocol
[  688.571563][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'.
[  688.573456][T14886] sock: sock_set_timeout: `syz.5.2550' (pid 14886) tries to set negative timeout
[  688.901860][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  688.906955][T13309] usb 5-1: USB disconnect, device number 101
[  688.908528][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  688.908551][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  690.161545][T13301] usb 1-1: string descriptor 0 read error: -71
[  690.172333][T13301] cdc_ether 1-1:0.81: skipping garbage
[  690.188840][T13301] cdc_ether 1-1:0.81: skipping garbage
[  690.194330][T13301] usb 1-1: bad CDC descriptors
[  690.234289][T13301] usb 1-1: unsupported MDLM descriptors
[  690.260977][T13301] usb 1-1: USB disconnect, device number 34
[  690.515020][T14903] netlink: 'syz.0.2556': attribute type 7 has an invalid length.
[  690.621430][T14907] veth0: entered promiscuous mode
[  690.670776][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'.
[  690.679861][T14905] openvswitch: netlink: Invalid VLAN frame
[  690.867467][T13309] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  691.028623][T13309] usb 1-1: Using ep0 maxpacket: 8
[  691.035783][T13309] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  691.046830][T13309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.082908][T13309] pvrusb2: Hardware description: Terratec Grabster AV400
[  691.100434][T13309] pvrusb2: **********
[  691.104510][T13309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  691.141350][T13309] pvrusb2: Important functionality might not be entirely working.
[  691.167572][T13309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  691.218015][T13309] pvrusb2: **********
[  691.294000][ T2346] pvrusb2: Invalid write control endpoint
[  691.331260][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'.
[  691.391899][T14920] FAULT_INJECTION: forcing a failure.
[  691.391899][T14920] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  691.416744][T14920] CPU: 0 UID: 0 PID: 14920 Comm: syz.3.2560 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.416786][T14920] Tainted: [L]=SOFTLOCKUP
[  691.416794][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  691.416809][T14920] Call Trace:
[  691.416818][T14920]  <TASK>
[  691.416828][T14920]  dump_stack_lvl+0xe8/0x150
[  691.416866][T14920]  should_fail_ex+0x412/0x560
[  691.416900][T14920]  _copy_to_user+0x31/0xb0
[  691.416937][T14920]  simple_read_from_buffer+0xe1/0x170
[  691.416974][T14920]  proc_fail_nth_read+0x1bb/0x230
[  691.417009][T14920]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  691.417045][T14920]  ? rw_verify_area+0x2a6/0x4d0
[  691.417067][T14920]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  691.417101][T14920]  vfs_read+0x20c/0xa70
[  691.417123][T14920]  ? fdget_pos+0x246/0x320
[  691.417160][T14920]  ? __pfx___mutex_lock+0x10/0x10
[  691.417184][T14920]  ? __pfx_vfs_read+0x10/0x10
[  691.417209][T14920]  ? __fget_files+0x2a/0x420
[  691.417245][T14920]  ? __fget_files+0x3a0/0x420
[  691.417273][T14920]  ? __fget_files+0x2a/0x420
[  691.417311][T14920]  ksys_read+0x150/0x270
[  691.417339][T14920]  ? __pfx_ksys_read+0x10/0x10
[  691.417376][T14920]  do_syscall_64+0x14d/0xf80
[  691.417408][T14920]  ? trace_irq_disable+0x3b/0x150
[  691.417441][T14920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.417464][T14920]  ? clear_bhb_loop+0x40/0x90
[  691.417492][T14920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.417514][T14920] RIP: 0033:0x7fefefd5cfce
[  691.417534][T14920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  691.417554][T14920] RSP: 002b:00007feff0bd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  691.417578][T14920] RAX: ffffffffffffffda RBX: 00007feff0bd66c0 RCX: 00007fefefd5cfce
[  691.417594][T14920] RDX: 000000000000000f RSI: 00007feff0bd60a0 RDI: 0000000000000006
[  691.417608][T14920] RBP: 00007feff0bd6090 R08: 0000000000000000 R09: 0000000000000000
[  691.417622][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.417636][T14920] R13: 00007feff0016038 R14: 00007feff0015fa0 R15: 00007feff013fa48
[  691.417671][T14920]  </TASK>
[  691.783225][T14902] veth0: left promiscuous mode
[  691.788688][T13299] usb 1-1: USB disconnect, device number 35
[  691.841139][ T2346] pvrusb2: Invalid write control endpoint
[  691.861082][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  691.889227][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  691.917293][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  691.957493][ T2346] pvrusb2: Device being rendered inoperable
[  691.966692][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  691.993562][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  692.037437][T13309] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  692.094683][ T2346] pvrusb2: Attached sub-driver cx25840
[  692.145328][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  692.169511][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  692.237423][T13309] usb 5-1: Using ep0 maxpacket: 32
[  692.290353][T13309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.317407][T13309] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  692.347065][T13309] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  692.427970][T13309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.465188][T13309] usb 5-1: Product: syz
[  692.493657][T13309] usb 5-1: Manufacturer: syz
[  692.508810][T13309] usb 5-1: SerialNumber: syz
[  692.527864][T13309] usb 5-1: config 0 descriptor??
[  693.333868][T14941] gretap1: entered promiscuous mode
[  693.757446][T13309] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  693.919512][T13309] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  693.928848][T13309] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  693.952519][T13309] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  693.972438][T13309] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.986665][T13309] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  693.998584][T13309] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  694.007715][T13309] usb 2-1: Product: syz
[  694.012256][T13309] usb 2-1: Manufacturer: syz
[  694.027497][T13309] cdc_wdm 2-1:1.0: skipping garbage
[  694.032909][T13309] cdc_wdm 2-1:1.0: skipping garbage
[  694.041782][T13309] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  694.048568][T13309] cdc_wdm 2-1:1.0: Unknown control protocol
[  694.167175][T14947] sctp: [Deprecated]: syz.0.2566 (pid 14947) Use of int in max_burst socket option.
[  694.167175][T14947] Use struct sctp_assoc_value instead
[  694.232676][T13309] usb 2-1: USB disconnect, device number 100
[  694.411682][T13299] usb 5-1: USB disconnect, device number 102
[  694.697797][T13308] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  695.313600][T13308] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  695.342027][T13308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  695.393962][T13308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  695.458016][T13308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.488966][T13308] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  695.507421][T13308] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  695.534078][T13308] usb 2-1: Product: syz
[  695.564406][T13308] usb 2-1: Manufacturer: syz
[  695.592055][T13308] cdc_wdm 2-1:1.0: skipping garbage
[  695.637497][T13308] cdc_wdm 2-1:1.0: skipping garbage
[  695.671697][T13308] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  695.713196][T13308] cdc_wdm 2-1:1.0: Unknown control protocol
[  696.449874][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  696.449894][   T30] audit: type=1326 audit(1772775839.922:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  696.534173][   T30] audit: type=1326 audit(1772775839.922:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  696.609189][   T30] audit: type=1326 audit(1772775839.922:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  696.639310][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.645980][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.652886][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.659527][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.666107][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.672745][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.680143][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.686809][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.693711][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.700443][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.707218][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.713863][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.720584][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.727230][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.733819][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.740462][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.747755][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.754410][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.761137][T13308] usb 2-1: USB disconnect, device number 101
[  696.767450][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  696.774092][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  696.780294][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  696.799227][   T30] audit: type=1326 audit(1772775839.922:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  696.877157][   T30] audit: type=1326 audit(1772775839.922:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  696.947556][T13299] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  697.014942][   T30] audit: type=1326 audit(1772775839.922:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  697.055754][   T30] audit: type=1326 audit(1772775839.922:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  697.079740][   T30] audit: type=1326 audit(1772775839.922:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  697.107507][   T30] audit: type=1326 audit(1772775839.922:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  697.130740][   T30] audit: type=1326 audit(1772775839.922:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  697.151215][T13299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.288863][T13299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.329824][T13299] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  697.363399][T13299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.396566][T13299] usb 5-1: config 0 descriptor??
[  698.177950][T13300] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  698.360570][T13300] usb 1-1: Using ep0 maxpacket: 32
[  698.371948][T13300] usb 1-1: unable to get BOS descriptor or descriptor too short
[  698.392289][T13300] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40
[  698.401896][T13300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.410832][T13300] usb 1-1: Product: syz
[  698.415939][T13300] usb 1-1: Manufacturer: syz
[  698.422899][T13300] usb 1-1: SerialNumber: syz
[  698.681571][T15001] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  698.689578][T15001] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  698.708522][T14998] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  698.714920][T14998] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  698.761712][T15001] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  698.776760][T14998] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  698.787674][T15001] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  698.797616][T14998] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  698.805802][T15001] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  698.812981][T15001] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  698.819329][T14998] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  698.825368][T14998] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  698.878963][T13300] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  698.896375][T13300] usb 1-1: MIDIStreaming interface descriptor not found
[  699.180280][T13300] usb 1-1: USB disconnect, device number 36
[  699.264432][T13390] udevd[13390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  699.296204][T14998] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  699.325177][T14998] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  699.454730][T14998] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  699.487915][T14998] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  700.248010][T13299] usbhid 5-1:0.0: can't add hid device: -71
[  700.254017][T13299] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  700.354669][T13299] usb 5-1: USB disconnect, device number 103
[  700.593162][T15043] syzkaller0: entered promiscuous mode
[  700.598782][T15043] syzkaller0: entered allmulticast mode
[  700.737502][T13299] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  700.959346][T13299] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  700.986146][T13299] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  701.026823][T13299] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  701.106086][T13299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.149273][T13299] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  701.186908][T13299] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  701.219676][T13299] usb 5-1: Product: syz
[  701.238218][T13299] usb 5-1: Manufacturer: syz
[  701.286084][T13299] cdc_wdm 5-1:1.0: skipping garbage
[  701.302815][T15065] netlink: 'syz.1.2591': attribute type 21 has an invalid length.
[  701.312573][T13299] cdc_wdm 5-1:1.0: skipping garbage
[  701.348871][T15065] IPv6: NLM_F_CREATE should be specified when creating new route
[  701.350092][T13299] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  701.389983][T13299] cdc_wdm 5-1:1.0: Unknown control protocol
[  701.410056][T15065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  701.417385][T15065] IPv6: NLM_F_CREATE should be set when creating new route
[  701.424759][T15065] IPv6: NLM_F_CREATE should be set when creating new route
[  701.432062][T15065] IPv6: NLM_F_CREATE should be set when creating new route
[  701.464937][T15068] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  701.505361][T13308] usb 5-1: USB disconnect, device number 104
[  701.577452][T13309] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  701.611576][T15068] macsec1: entered allmulticast mode
[  701.651912][T15068] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  701.764655][T13309] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  701.787401][T13309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.817398][T13309] usb 6-1: Product: syz
[  701.839615][T13309] usb 6-1: Manufacturer: syz
[  701.844290][T13309] usb 6-1: SerialNumber: syz
[  701.985745][T15075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2594'.
[  702.020883][T13308] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  702.021548][T15075] netlink: 'syz.1.2594': attribute type 7 has an invalid length.
[  702.077570][T15075] netlink: 'syz.1.2594': attribute type 8 has an invalid length.
[  702.117462][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'.
[  702.178980][T15075] ip6gretap0: entered promiscuous mode
[  702.197766][T15075] syz_tun: entered promiscuous mode
[  702.228365][T15075] gretap0: entered promiscuous mode
[  702.231545][T13308] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  702.298141][T13308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.318610][T13308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  702.330549][T13309] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  702.353507][T13308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.385351][T13309] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  702.409096][T13308] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  702.421842][T13308] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  702.440367][T13308] usb 5-1: Product: syz
[  702.446131][T13308] usb 5-1: Manufacturer: syz
[  702.526775][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  702.541607][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  702.623122][T13308] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  702.650504][T13308] cdc_wdm 5-1:1.0: Unknown control protocol
[  702.773209][T13309] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  702.840585][T13309] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  702.871771][T13309] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  702.908364][T13309] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  702.938287][T13309] usb 6-1: USB disconnect, device number 60
[  704.034970][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2605'.
[  704.177819][T15121] netlink: 'syz.0.2605': attribute type 7 has an invalid length.
[  704.207782][T15121] netlink: 'syz.0.2605': attribute type 8 has an invalid length.
[  704.227489][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'.
[  704.287921][T15121] ip6gretap0: entered promiscuous mode
[  704.307864][T15121] syz_tun: entered promiscuous mode
[  704.337725][T15121] gretap0: entered promiscuous mode
[  704.362806][T15121] debugfs: 'hsr1' already exists in 'hsr'
[  704.389899][T15121] Cannot create hsr debugfs directory
[  704.403711][T15121] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  704.439991][T15121] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  704.469815][T15121] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network
[  704.630773][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  704.637442][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  704.643883][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  704.650566][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  704.656887][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  704.663544][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  704.670145][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  704.676788][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  704.683153][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  704.689789][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  704.696094][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  704.702738][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  704.704822][T13300] usb 5-1: USB disconnect, device number 105
[  704.708838][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  704.873997][T15130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2607'.
[  704.896425][T15130] netlink: 'syz.5.2607': attribute type 7 has an invalid length.
[  704.970181][T15130] netlink: 'syz.5.2607': attribute type 8 has an invalid length.
[  705.005180][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2607'.
[  706.166440][T15162] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2614'.
[  706.467719][T13300] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  706.627391][T13300] usb 1-1: Using ep0 maxpacket: 32
[  706.641562][T13300] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  706.661235][T13300] usb 1-1: config 0 has no interface number 0
[  706.689033][T13300] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  706.705094][T13300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.724428][T13300] usb 1-1: Product: syz
[  706.733837][T13300] usb 1-1: Manufacturer: syz
[  706.745864][T13300] usb 1-1: SerialNumber: syz
[  706.771866][T13300] usb 1-1: config 0 descriptor??
[  706.925013][T15185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.956520][T15185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.015462][T13300] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  707.039698][T13300] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  707.205842][T15185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.219053][T13300] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  707.234482][T15185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.249446][T13300] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  707.370225][T13299] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  707.390557][T13300] usb 1-1: USB disconnect, device number 37
[  707.547549][T13299] usb 6-1: Using ep0 maxpacket: 16
[  709.178554][T13299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  709.204273][T13299] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  709.235474][T13299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.248679][T13299] usb 6-1: config 0 descriptor??
[  709.400357][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  709.400378][   T30] audit: type=1326 audit(1772775852.872:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.467604][   T30] audit: type=1326 audit(1772775852.872:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.520903][   T30] audit: type=1326 audit(1772775852.872:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.575735][T15246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.619679][   T30] audit: type=1326 audit(1772775852.872:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.629375][T15246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.706258][T15245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  709.737545][   T30] audit: type=1326 audit(1772775852.872:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.802635][   T30] audit: type=1326 audit(1772775852.872:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.872511][   T30] audit: type=1326 audit(1772775852.872:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.901528][   T30] audit: type=1326 audit(1772775852.872:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.924499][   T30] audit: type=1326 audit(1772775852.872:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  709.959875][T13313] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  709.978086][   T30] audit: type=1326 audit(1772775852.872:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3570f9c799 code=0x7ffc0000
[  710.014600][T15189] xt_TCPMSS: Only works on TCP SYN packets
[  710.027498][T13308] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  710.050690][T13299] usbhid 6-1:0.0: can't add hid device: -71
[  710.056842][T13299] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  710.076949][T13299] usb 6-1: USB disconnect, device number 61
[  710.098463][T13313] usb 2-1: device descriptor read/64, error -71
[  710.179585][T13308] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  710.197535][T13308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.208821][T13308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  710.227666][T13308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  710.249667][T13308] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  710.258909][T13308] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  710.266945][T13308] usb 5-1: Product: syz
[  710.277594][T13308] usb 5-1: Manufacturer: syz
[  710.295805][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  710.307523][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  710.315384][T13308] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  710.325042][T13308] cdc_wdm 5-1:1.0: Unknown control protocol
[  710.349897][T13313] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  710.487495][T13313] usb 2-1: device descriptor read/64, error -71
[  710.501366][T13308] usb 5-1: USB disconnect, device number 106
[  710.598041][T13313] usb usb2-port1: attempt power cycle
[  710.741186][T15270] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2642'.
[  710.937506][T13313] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  710.967951][T13313] usb 2-1: device descriptor read/8, error -71
[  710.987969][T13308] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  711.159725][T13308] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  711.172486][T13308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  711.192091][T13308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  711.214307][T13308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  711.227591][T13313] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  711.239673][T13308] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  711.251265][T13308] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  711.266140][T13308] usb 5-1: Product: syz
[  711.269407][T13313] usb 2-1: device descriptor read/8, error -71
[  711.277877][T13308] usb 5-1: Manufacturer: syz
[  711.319614][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  711.331004][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  711.340091][T13308] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  711.346141][T13308] cdc_wdm 5-1:1.0: Unknown control protocol
[  711.378605][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  711.397824][T13313] usb usb2-port1: unable to enumerate USB device
[  713.011301][T15300] syzkaller0: entered promiscuous mode
[  713.017637][T15300] syzkaller0: entered allmulticast mode
[  713.127543][T13313] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  713.223892][T15309] syzkaller0: entered promiscuous mode
[  713.230463][T15309] syzkaller0: entered allmulticast mode
[  713.239922][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'.
[  713.251038][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'.
[  713.262440][T15309] 0: reclassify loop, rule prio 0, protocol 800
[  713.287447][T13313] usb 2-1: Using ep0 maxpacket: 32
[  713.311508][T13313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  713.358568][T13313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  713.369523][T13313] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  713.379252][T13313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.391872][T13313] usb 2-1: config 0 descriptor??
[  713.399825][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.406488][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.408738][T13313] hub 2-1:0.0: USB hub found
[  713.413424][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.423863][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.431731][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.438376][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.446153][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.452798][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.459379][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.466020][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.473004][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.479650][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.486092][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.492731][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.499197][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.505841][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.512331][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.518975][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.525689][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  713.532336][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  713.548981][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  713.557802][T13308] usb 5-1: USB disconnect, device number 107
[  713.667784][ T5917] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  713.693409][T15298] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2650'.
[  713.705349][T15298] .30ªX¹¦D: renamed from gretap0 (while UP)
[  713.719763][T15298] .30ªX¹¦D: entered allmulticast mode
[  713.726053][T15298] A link change request failed with some changes committed already. Interface .30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  713.747138][T15298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.772899][T15298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.837688][ T5917] usb 6-1: Using ep0 maxpacket: 16
[  713.858404][ T5917] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  713.882068][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.911245][ T5917] usb 6-1: Product: syz
[  713.926427][ T5917] usb 6-1: Manufacturer: syz
[  713.938749][ T5917] usb 6-1: SerialNumber: syz
[  713.953281][T13313] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  713.963898][ T5917] usb 6-1: config 0 descriptor??
[  714.020368][T13313] usbhid 2-1:0.0: can't add hid device: -71
[  714.033242][T13313] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  714.069629][T13313] usb 2-1: USB disconnect, device number 106
[  714.339607][T15333] program syz.5.2654 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  714.897792][ T5917] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110
[  715.098135][ T5917] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  715.218559][T13308] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  715.257516][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  715.265247][ T5917] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  715.278055][ T5917] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  715.287808][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.295942][ T5917] usb 2-1: Product: syz
[  715.301629][ T5917] usb 2-1: Manufacturer: syz
[  715.306565][ T5917] usb 2-1: SerialNumber: syz
[  715.315747][ T5917] usb 2-1: config 0 descriptor??
[  715.325655][ T5917] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  715.334544][ T5917] usb 2-1: setting power ON
[  715.339461][ T5917] dvb-usb: bulk message failed: -22 (2/0)
[  715.349648][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  715.364615][ T5917] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  715.374898][ T5917] usb 2-1: media controller created
[  715.382879][T13308] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  715.397740][T13308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.411942][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  715.420726][T13308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  715.437426][T13308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.462321][ T5917] usb 2-1: selecting invalid altsetting 6
[  715.478304][ T5917] usb 2-1: digital interface selection failed (-22)
[  715.485876][T13308] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  715.495087][ T5917] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  715.506709][T13308] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  715.516233][T13308] usb 5-1: Product: syz
[  715.520843][T13308] usb 5-1: Manufacturer: syz
[  715.525730][ T5917] usb 2-1: setting power OFF
[  715.535058][ T5917] dvb-usb: bulk message failed: -22 (2/0)
[  715.563689][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  715.578868][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  715.586820][T13308] cdc_wdm 5-1:1.0: skipping garbage
[  715.592553][ T5917] (NULL device *): no alternate interface
[  715.601215][T13308] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  715.634943][T13308] cdc_wdm 5-1:1.0: Unknown control protocol
[  715.645306][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  715.686612][ T5917] usb 2-1: USB disconnect, device number 107
[  715.782024][T13313] usb 5-1: USB disconnect, device number 108
[  715.857650][   T31] INFO: task kworker/1:0:12004 blocked for more than 143 seconds.
[  715.865547][   T31]       Tainted: G             L      syzkaller #0
[  715.872169][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  715.881528][   T31] task:kworker/1:0     state:D stack:22760 pid:12004 tgid:12004 ppid:2      task_flags:0x4288060 flags:0x00080000
[  715.893679][   T31] Workqueue: usb_hub_wq hub_event
[  715.899327][   T31] Call Trace:
[  715.902774][   T31]  <TASK>
[  715.905779][   T31]  __schedule+0x15dd/0x52d0
[  715.911241][   T31]  ? __pfx___schedule+0x10/0x10
[  715.916190][   T31]  ? __pfx___schedule+0x10/0x10
[  715.922967][   T31]  ? schedule+0x90/0x360
[  715.927493][   T31]  schedule+0x164/0x360
[  715.931885][   T31]  schedule_timeout+0xc3/0x2c0
[  715.936747][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  715.942142][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  715.947604][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  715.952796][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  715.959033][   T31]  ? wait_for_completion+0x274/0x5e0
[  715.964385][   T31]  wait_for_completion+0x2cc/0x5e0
[  715.969689][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  715.975654][   T31]  i2c_del_adapter+0x5c0/0x790
[  715.980693][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  715.986264][   T31]  ? rcu_is_watching+0x15/0xb0
[  715.993529][   T31]  ? devres_log+0x10e/0x360
[  715.998367][   T31]  ? devres_release_group+0x305/0x350
[  716.003975][   T31]  devres_release_group+0x2fd/0x350
[  716.009702][   T31]  ? __pfx_devres_release_group+0x10/0x10
[  716.015740][   T31]  ? enable_work+0x1fd/0x230
[  716.021308][   T31]  ? __pfx_mcp2221_remove+0x10/0x10
[  716.026700][   T31]  hid_device_remove+0x250/0x370
[  716.035230][   T31]  ? __pfx_hid_device_remove+0x10/0x10
[  716.041751][   T31]  device_release_driver_internal+0x46f/0x860
[  716.048416][   T31]  bus_remove_device+0x34d/0x440
[  716.053481][   T31]  device_del+0x527/0x8f0
[  716.058171][   T31]  ? __pfx_device_del+0x10/0x10
[  716.067428][   T31]  hid_destroy_device+0x6b/0x1b0
[  716.077831][   T31]  usbhid_disconnect+0x9f/0xc0
[  716.087137][   T31]  usb_unbind_interface+0x26e/0x910
[  716.093763][   T31]  ? __pfx_usb_unbind_interface+0x10/0x10
[  716.101721][   T31]  device_release_driver_internal+0x4d9/0x860
[  716.108077][   T31]  bus_remove_device+0x34d/0x440
[  716.113213][   T31]  device_del+0x527/0x8f0
[  716.118373][   T31]  ? __pfx_device_del+0x10/0x10
[  716.123291][   T31]  ? kobject_put+0x51d/0x560
[  716.129028][   T31]  usb_disable_device+0x3d4/0x8d0
[  716.134214][   T31]  usb_disconnect+0x32f/0x990
[  716.140288][   T31]  hub_event+0x1cc9/0x4f30
[  716.144833][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  716.150558][   T31]  ? __pfx_hub_event+0x10/0x10
[  716.155438][   T31]  ? process_scheduled_works+0xa25/0x1830
[  716.161380][   T31]  ? process_scheduled_works+0xa25/0x1830
[  716.167162][   T31]  process_scheduled_works+0xb02/0x1830
[  716.173071][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  716.179376][   T31]  ? assign_work+0x3d5/0x5e0
[  716.184031][   T31]  worker_thread+0xa50/0xfc0
[  716.188965][   T31]  kthread+0x388/0x470
[  716.193109][   T31]  ? __pfx_worker_thread+0x10/0x10
[  716.199192][   T31]  ? __pfx_kthread+0x10/0x10
[  716.204733][   T31]  ret_from_fork+0x51e/0xb90
[  716.209889][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  716.215072][   T31]  ? __switch_to+0xc7d/0x1450
[  716.219896][   T31]  ? __pfx_kthread+0x10/0x10
[  716.224533][   T31]  ret_from_fork_asm+0x1a/0x30
[  716.229466][   T31]  </TASK>
[  716.232911][   T31] 
[  716.232911][   T31] Showing all locks held in the system:
[  716.241032][   T31] 1 lock held by khungtaskd/31:
[  716.245952][   T31]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  716.257127][   T31] 4 locks held by kworker/u8:3/49:
[  716.262168][ T5917] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  716.269166][   T31] 2 locks held by getty/5583:
[  716.275146][   T31]  #0: ffff88803231e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  716.285502][   T31]  #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  716.295970][   T31] 6 locks held by kworker/0:6/5917:
[  716.301232][   T31]  #0: ffff88823bfa8f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  716.312673][   T31]  #1: ffffc90004187c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  716.324709][   T31]  #2: ffff88802914f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  716.333728][   T31]  #3: ffff8880291a7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[  716.352888][   T31]  #4: ffff888028ad3c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[  716.370994][   T31]  #5: ffffffff8f4745d0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840
[  716.388747][T13313] usb 6-1: USB disconnect, device number 62
[  716.406221][   T31] 1 lock held by syz-executor/9706:
[  716.411685][   T31] 6 locks held by kworker/1:0/12004:
[  716.418522][   T31]  #0: ffff88823bfa8f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  716.433019][   T31]  #1: ffffc90004e9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  716.445654][   T31]  #2: ffff888029125198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  716.448286][ T5917] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  716.455173][   T31]  #3: 
[  716.463756][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  716.477256][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  716.484953][   T31] ffff88807d855198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990
[  716.498953][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.513611][ T5917] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  716.517531][   T31]  #4: ffff88807e56d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860
[  716.523998][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  716.541631][   T31]  #5: ffff888042fd1a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860
[  716.541719][   T31] 3 locks held by kworker/1:15/13313:
[  716.541735][   T31]  #0: ffff88823bfa8f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  716.556406][ T5917] usb 5-1: Product: syz
[  716.559003][   T31]  #1: 
[  716.571604][ T5917] usb 5-1: Manufacturer: syz
[  716.578818][   T31] ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  716.591935][   T31]  #2: ffffffff9a2b7508 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x200
[  716.605034][   T31] 3 locks held by syz.0.2670/15374:
[  716.611145][   T31] 
[  716.613600][   T31] =============================================
[  716.613600][   T31] 
[  716.631183][   T31] NMI backtrace for cpu 1
[  716.631204][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.631235][   T31] Tainted: [L]=SOFTLOCKUP
[  716.631243][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  716.631258][   T31] Call Trace:
[  716.631267][   T31]  <TASK>
[  716.631277][   T31]  dump_stack_lvl+0xe8/0x150
[  716.631314][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  716.631416][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  716.631454][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  716.631486][   T31]  sys_info+0x135/0x170
[  716.631509][   T31]  watchdog+0xfd9/0x1030
[  716.631547][   T31]  ? watchdog+0x21a/0x1030
[  716.631589][   T31]  kthread+0x388/0x470
[  716.631610][   T31]  ? __pfx_watchdog+0x10/0x10
[  716.631641][   T31]  ? __pfx_kthread+0x10/0x10
[  716.631664][   T31]  ret_from_fork+0x51e/0xb90
[  716.631696][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  716.631723][   T31]  ? __switch_to+0xc7d/0x1450
[  716.631752][   T31]  ? __pfx_kthread+0x10/0x10
[  716.631775][   T31]  ret_from_fork_asm+0x1a/0x30
[  716.631822][   T31]  </TASK>
[  716.631831][   T31] Sending NMI from CPU 1 to CPUs 0:
[  716.679864][ T5917] cdc_wdm 5-1:1.0: skipping garbage
[  716.683674][    C0] NMI backtrace for cpu 0
[  716.683693][    C0] CPU: 0 UID: 0 PID: 5917 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.683718][    C0] Tainted: [L]=SOFTLOCKUP
[  716.683725][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  716.683737][    C0] Workqueue: usb_hub_wq hub_event
[  716.683761][    C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x32/0x120
[  716.683795][    C0] Code: 53 65 8b 0d 60 dd 70 11 b0 01 f7 c1 00 00 f0 00 0f 85 d5 00 00 00 83 3d df a2 66 0e 00 0f 84 c8 00 00 00 65 ff 05 3e dd 70 11 <e8> a9 e9 02 0a 89 c3 83 f8 08 0f 83 c7 00 00 00 49 be 00 00 00 00
[  716.683811][    C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00000082
[  716.683826][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080010003
[  716.683838][    C0] RDX: 00000000ad839568 RSI: ffffffff8c27b260 RDI: ffffffff8c27b220
[  716.683852][    C0] RBP: 0000000000000000 R08: ffffffff81981cce R09: ffffffff8e7602e0
[  716.683865][    C0] R10: dffffc0000000000 R11: ffffffff81981980 R12: 0000000000000000
[  716.683878][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e1ac790
[  716.683892][    C0] FS:  0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000
[  716.683907][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  716.683925][    C0] CR2: 00007f35711e6158 CR3: 000000004329a000 CR4: 00000000003526f0
[  716.683942][    C0] Call Trace:
[  716.683950][    C0]  <IRQ>
[  716.683959][    C0]  rcu_read_lock_any_held+0x1e/0x90
[  716.683989][    C0]  select_task_rq_fair+0x264b/0x4320
[  716.684015][    C0]  ? select_task_rq_fair+0x34e/0x4320
[  716.684036][    C0]  try_to_wake_up+0x4db/0x1390
[  716.684060][    C0]  hrtimer_wakeup+0x4e/0x60
[  716.684087][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  716.684114][    C0]  __hrtimer_run_queues+0x53a/0xcc0
[  716.684150][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  716.684175][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  716.684202][    C0]  hrtimer_interrupt+0x42b/0x1010
[  716.684234][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  716.684265][    C0]  __sysvec_apic_timer_interrupt+0x102/0x460
[  716.684294][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  716.684323][    C0]  </IRQ>
[  716.684330][    C0]  <TASK>
[  716.684337][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  716.684357][    C0] RIP: 0010:vprintk_emit+0x45d/0x560
[  716.684384][    C0] Code: 0f 84 44 ff ff ff e8 32 2d 21 00 fb eb 44 e8 2a 2d 21 00 e8 45 56 09 0a 4d 85 f6 74 94 e8 1b 2d 21 00 fb 48 c7 c7 20 27 75 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 cb 16
[  716.684400][    C0] RSP: 0018:ffffc90004186820 EFLAGS: 00000287
[  716.684415][    C0] RAX: ffffffff81a46c55 RBX: ffffffff81a46acf RCX: 0000000000100000
[  716.684430][    C0] RDX: ffffc9001a589000 RSI: 000000000003816e RDI: ffffffff8e752720
[  716.684444][    C0] RBP: ffffc900041868d0 R08: ffffffff901194b7 R09: 1ffffffff2023296
[  716.684458][    C0] R10: dffffc0000000000 R11: fffffbfff2023297 R12: 0000000000000000
[  716.684471][    C0] R13: 0000000000000021 R14: 0000000000000200 R15: 1ffff92000830d08
[  716.684486][    C0]  ? vprintk_emit+0x2cf/0x560
[  716.684513][    C0]  ? vprintk_emit+0x455/0x560
[  716.684545][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  716.684577][    C0]  dev_vprintk_emit+0x355/0x420
[  716.684605][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  716.684639][    C0]  dev_printk_emit+0xee/0x140
[  716.684662][    C0]  ? sysfs_do_create_link_sd+0x83/0x110
[  716.684687][    C0]  ? driver_sysfs_add+0xec/0x210
[  716.684707][    C0]  ? really_probe+0x14f/0xaf0
[  716.684731][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  716.684757][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  716.684782][    C0]  ? __dev_printk+0x131/0x190
[  716.684803][    C0]  _dev_err+0x11e/0x180
[  716.684830][    C0]  ? __pfx__dev_err+0x10/0x10
[  716.684856][    C0]  ? __mutex_trylock_common+0x158/0x260
[  716.684884][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  716.684922][    C0]  cdc_parse_cdc_header+0x49f/0x910
[  716.684951][    C0]  wdm_probe+0x12b/0x310
[  716.685067][    C0]  ? __pfx_wdm_probe+0x10/0x10
[  716.685100][    C0]  ? usb_disable_lpm+0x77/0x3e0
[  716.685130][    C0]  usb_probe_interface+0x668/0xc90
[  716.685155][    C0]  ? __pfx_usb_probe_interface+0x10/0x10
[  716.685174][    C0]  really_probe+0x267/0xaf0
[  716.685198][    C0]  __driver_probe_device+0x18c/0x320
[  716.685220][    C0]  driver_probe_device+0x4f/0x240
[  716.685243][    C0]  __device_attach_driver+0x2d4/0x4c0
[  716.685266][    C0]  bus_for_each_drv+0x258/0x2f0
[  716.685292][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[  716.685313][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[  716.685339][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  716.685366][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  716.685394][    C0]  __device_attach+0x2c5/0x450
[  716.685415][    C0]  ? __pfx___device_attach+0x10/0x10
[  716.685438][    C0]  ? _raw_spin_unlock+0x28/0x50
[  716.685463][    C0]  device_initial_probe+0xa1/0xd0
[  716.685484][    C0]  bus_probe_device+0x12a/0x220
[  716.685508][    C0]  ? device_add+0x726/0xb70
[  716.685527][    C0]  device_add+0x7b6/0xb70
[  716.685546][    C0]  usb_set_configuration+0x1a87/0x2110
[  716.685579][    C0]  usb_generic_driver_probe+0x8d/0x150
[  716.685654][    C0]  usb_probe_device+0x1c4/0x3b0
[  716.685675][    C0]  ? __pfx_usb_probe_device+0x10/0x10
[  716.685693][    C0]  really_probe+0x267/0xaf0
[  716.685717][    C0]  __driver_probe_device+0x18c/0x320
[  716.685739][    C0]  driver_probe_device+0x4f/0x240
[  716.685762][    C0]  __device_attach_driver+0x2d4/0x4c0
[  716.685786][    C0]  bus_for_each_drv+0x258/0x2f0
[  716.685811][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[  716.685833][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[  716.685859][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  716.685886][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  716.685920][    C0]  __device_attach+0x2c5/0x450
[  716.685941][    C0]  ? __pfx___device_attach+0x10/0x10
[  716.685963][    C0]  ? _raw_spin_unlock+0x28/0x50
[  716.685989][    C0]  device_initial_probe+0xa1/0xd0
[  716.686009][    C0]  bus_probe_device+0x12a/0x220
[  716.686034][    C0]  ? device_add+0x726/0xb70
[  716.686053][    C0]  device_add+0x7b6/0xb70
[  716.686072][    C0]  usb_new_device+0xa08/0x16f0
[  716.686103][    C0]  ? __pfx_usb_new_device+0x10/0x10
[  716.686131][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  716.686157][    C0]  hub_event+0x2a1c/0x4f30
[  716.686200][    C0]  ? __pfx_hub_event+0x10/0x10
[  716.686222][    C0]  ? process_scheduled_works+0xa25/0x1830
[  716.686245][    C0]  ? process_scheduled_works+0xa25/0x1830
[  716.686269][    C0]  process_scheduled_works+0xb02/0x1830
[  716.686306][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  716.686333][    C0]  ? assign_work+0x3d5/0x5e0
[  716.686357][    C0]  worker_thread+0xa50/0xfc0
[  716.686394][    C0]  kthread+0x388/0x470
[  716.686411][    C0]  ? __pfx_worker_thread+0x10/0x10
[  716.686435][    C0]  ? __pfx_kthread+0x10/0x10
[  716.686452][    C0]  ret_from_fork+0x51e/0xb90
[  716.686477][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  716.686500][    C0]  ? __switch_to+0xc7d/0x1450
[  716.686522][    C0]  ? __pfx_kthread+0x10/0x10
[  716.686539][    C0]  ret_from_fork_asm+0x1a/0x30
[  716.686574][    C0]  </TASK>
[  716.744479][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  716.744550][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.744633][   T31] Tainted: [L]=SOFTLOCKUP
[  716.744656][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  716.744696][   T31] Call Trace:
[  716.744718][   T31]  <TASK>
[  716.744749][   T31]  vpanic+0x56c/0xa60
[  716.744876][   T31]  ? __pfx___schedule+0x10/0x10
[  716.744964][   T31]  ? __pfx_vpanic+0x10/0x10
[  716.745061][   T31]  panic+0xc5/0xd0
[  716.745141][   T31]  ? __pfx_panic+0x10/0x10
[  716.745224][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  716.745326][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  716.745427][   T31]  watchdog+0x1023/0x1030
[  716.745531][   T31]  ? watchdog+0x21a/0x1030
[  716.745636][   T31]  kthread+0x388/0x470
[  716.745691][   T31]  ? __pfx_watchdog+0x10/0x10
[  716.745772][   T31]  ? __pfx_kthread+0x10/0x10
[  716.745833][   T31]  ret_from_fork+0x51e/0xb90
[  716.745910][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  716.745984][   T31]  ? __switch_to+0xc7d/0x1450
[  716.746058][   T31]  ? __pfx_kthread+0x10/0x10
[  716.746128][   T31]  ret_from_fork_asm+0x1a/0x30
[  716.746252][   T31]  </TASK>
[  716.746869][   T31] Kernel Offset: disabled