last executing test programs:

20.393517491s ago: executing program 3 (id=767):
syz_80211_inject_frame(0x0, 0x0, 0x262)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x20, 0x0, 0x0, 0x0}, 0x50)

19.989985193s ago: executing program 0 (id=768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f00000000c0)='./control\x00', 0x0)
r3 = inotify_init()
r4 = epoll_create(0x200008)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9f4}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080))
r6 = inotify_add_watch(r3, &(0x7f00000001c0)='./control\x00', 0xa2000396)
inotify_rm_watch(r3, r6)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xb000001d})
epoll_wait(r4, &(0x7f0000000100)=[{}, {}], 0x2, 0x0)

17.741418803s ago: executing program 3 (id=771):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket(0x1d, 0x2, 0x6) (async)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3, {}, 0xd42b92040cc4da37}, 0x18)
sendmmsg$unix(r1, &(0x7f0000001080)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="1a", 0x1}], 0x1, 0x0, 0x0, 0x4000010}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2000c040}}], 0x2, 0x80) (async)
sendmmsg$unix(r1, &(0x7f0000001080)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="1a", 0x1}], 0x1, 0x0, 0x0, 0x4000010}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2000c040}}], 0x2, 0x80)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r4, 0x4048aec9, &(0x7f0000000040)={0x6, 0x0, 0x80000000, 0x0, 0x40004})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0xb, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x40, 0xa, 0x40, {0x40, 0x21, "e4d500584200ccfecba936e7d898c7f7957a3fd674e5b8d842b3934d4ca11d19508fc2b7b5600f60c6d128cb713dcabd3e0b9fede92e863d70f62aceb763"}}, &(0x7f0000000280)={0x0, 0x3, 0x69, @string={0x69, 0x3, "26894bd346f452571c98cbd456364a0a83f6592da5dabd657c80af111c875a76239efa0593bf00d88cf9b71929fe1e7aa101d175b61aebcfbec3a3fa7a84ee1f1c3d4c75c7537af33d231b6a394791652679b6d30c77a8b34b945c4123ad10460dfcf8c2470a7a"}}, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x4, "cd51"}, @local=@item_012={0x2, 0x2, 0x5, "b3f9"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0xd27}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0xc0, 0x0, 0xd6, "19742d78f63db82b10a30f6ca32a19d60dc70eb41b329a7e9a49cf3ef1b9cbff48cdd7e25ce3759933d5471f5805609b12e5fd27e6981ac60d7b234740e51a2a8ac756648abaa9eabd4c5cb5ac98eb3fd6be5e1c2482ed200a7fb78599c1c50214eb03f34ed22fcf7775bb4fc68cc5e245b501fd34317bc4c12307a1fe3f50ea36d0d72f4d91e9057182495a80624bc2aabc8b1b0dec99d01a9bcbc1f8c4bb2e10ec692ef36a17ce13a105107176c2849c1bd8a5fb8436c2a9d518be2fc7b71dad2813ab73cf39c9b6093d92f09968f0c9abc8649a00"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x76}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)=ANY=[@ANYBLOB="20013600000018fb6ad5d1d41ed3f78056b3384cd24654b91e4889dd9eb3006584d136065906c3d61a6b1a4887598ae5c291cf4656479d1d3d585e754c05c3cddf1d68f02edc458fbab80203bd98ed2c339d5c3a2f33cd465c68b10ed052f171f4e980c4f162b97aec38e06455934fe07101f458d5b670ad785548df9c2579abda99ef880c3f12bbdab103a653cb61d193"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x2}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x40, 0xa, 0x40, {0x40, 0x21, "e4d500584200ccfecba936e7d898c7f7957a3fd674e5b8d842b3934d4ca11d19508fc2b7b5600f60c6d128cb713dcabd3e0b9fede92e863d70f62aceb763"}}, &(0x7f0000000280)={0x0, 0x3, 0x69, @string={0x69, 0x3, "26894bd346f452571c98cbd456364a0a83f6592da5dabd657c80af111c875a76239efa0593bf00d88cf9b71929fe1e7aa101d175b61aebcfbec3a3fa7a84ee1f1c3d4c75c7537af33d231b6a394791652679b6d30c77a8b34b945c4123ad10460dfcf8c2470a7a"}}, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x4, "cd51"}, @local=@item_012={0x2, 0x2, 0x5, "b3f9"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0xd27}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0xc0, 0x0, 0xd6, "19742d78f63db82b10a30f6ca32a19d60dc70eb41b329a7e9a49cf3ef1b9cbff48cdd7e25ce3759933d5471f5805609b12e5fd27e6981ac60d7b234740e51a2a8ac756648abaa9eabd4c5cb5ac98eb3fd6be5e1c2482ed200a7fb78599c1c50214eb03f34ed22fcf7775bb4fc68cc5e245b501fd34317bc4c12307a1fe3f50ea36d0d72f4d91e9057182495a80624bc2aabc8b1b0dec99d01a9bcbc1f8c4bb2e10ec692ef36a17ce13a105107176c2849c1bd8a5fb8436c2a9d518be2fc7b71dad2813ab73cf39c9b6093d92f09968f0c9abc8649a00"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x76}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)=ANY=[@ANYBLOB="20013600000018fb6ad5d1d41ed3f78056b3384cd24654b91e4889dd9eb3006584d136065906c3d61a6b1a4887598ae5c291cf4656479d1d3d585e754c05c3cddf1d68f02edc458fbab80203bd98ed2c339d5c3a2f33cd465c68b10ed052f171f4e980c4f162b97aec38e06455934fe07101f458d5b670ad785548df9c2579abda99ef880c3f12bbdab103a653cb61d193"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x2}})

17.694829328s ago: executing program 0 (id=772):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
read$rfkill(r0, &(0x7f0000000040), 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
open(&(0x7f0000000000)='./file0\x00', 0x159441, 0x2)
pread64(r0, &(0x7f0000000080)=""/82, 0x52, 0x3)

16.575282297s ago: executing program 0 (id=777):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x20, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}, @ringbuf_query], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = getpid() (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
listen(r3, 0x4) (async, rerun: 64)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) (rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/11, 0xfffffffffffffde1}}], 0x400000000000179, 0x10022, 0x0) (async)
capset(0x0, 0x0) (async, rerun: 32)
unshare(0x28020480) (async, rerun: 32)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r7}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @loopback}, r7}}, 0x48) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r2, 0xb, &(0x7f0000000100)={0xe, 0x4}, &(0x7f0000000140))

15.040985922s ago: executing program 1 (id=780):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getpriority(0x1, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

15.022532446s ago: executing program 3 (id=781):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40004)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
chdir(&(0x7f0000000540)='./cgroup\x00')
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
mmap(&(0x7f0000ab9000/0x2000)=nil, 0x2000, 0x2, 0x1010, r0, 0xe197e000)
unlink(&(0x7f0000000080)='./cgroup\x00')
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ptrace(0x11, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000002740)=[{&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/5, 0x5}], 0x9, &(0x7f0000002800)=""/4096, 0x1000}}, {{&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003800)=""/94, 0x5e}, {&(0x7f0000003880)=""/19, 0x13}, {&(0x7f00000038c0)=""/16, 0x10}, {&(0x7f0000003900)=""/41, 0x29}], 0x4, &(0x7f0000003980)=""/98, 0x62}, 0x3}, {{&(0x7f0000003a00), 0x80, &(0x7f0000003c40)=[{&(0x7f0000003a80)=""/182, 0xb6}, {&(0x7f0000003b40)=""/252, 0xfc}], 0x2, &(0x7f0000003c80)=""/69, 0x45}, 0x401}, {{&(0x7f0000003d00)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003d80)=""/94, 0x5e}], 0x1, &(0x7f0000003e40)=""/107, 0x6b}, 0x8}, {{&(0x7f0000003ec0)=@l2tp6, 0x80, &(0x7f0000004100)=[{&(0x7f0000003f40)=""/127, 0x7f}, {&(0x7f0000003fc0)=""/99, 0x63}, {&(0x7f0000004040)=""/133, 0x85}], 0x3, &(0x7f0000004140)=""/43, 0x2b}, 0xfd4}, {{&(0x7f0000004180)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000004200)=""/139, 0x8b}, {&(0x7f00000042c0)=""/225, 0xe1}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/106, 0x6a}, {&(0x7f0000005440)=""/167, 0xa7}, {&(0x7f0000005500)=""/205, 0xcd}, {&(0x7f0000005600)=""/219, 0xdb}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/160, 0xa0}], 0x9}, 0xfff}], 0x6, 0x2, 0x0)
bind$qrtr(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBLED(r5, 0x4b65, 0xa)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000700000008000a0004000100080017"], 0x3c}}, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')

13.743752248s ago: executing program 1 (id=783):
syz_emit_ethernet(0x134, &(0x7f00000002c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x4305, @igmp={{0x1b, 0x4, 0x1, 0x2, 0x126, 0x67, 0x0, 0x6, 0x2, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x1f, 0xa4, [@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xdf, 0x3, 0x2, [{@loopback, 0x7}, {@loopback}]}, @end, @generic={0x7, 0xc, "7b57865c933fc5e0aa6f"}, @lsrr={0x83, 0x17, 0x72, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @private=0xa010100]}]}}, {0x15, 0x1, 0x0, @rand_addr=0x64010101, "186777362fafdf2770fb2405c01db072cdc3587a243e99aaf7f98a4b62fe004a480f333c1a4d2d50be65c6fd0026a89d4ce37edb2b584a74e8e13ab71f669df2299def1049f83b35a1cfc9d5b85846690ab709cff698acd7e4f2e2757240d4a0037bb12742cb8351964a32d50ff0a73a2685c2bc820c5a7039f1288ef01e51b9fd2ab6ed8cefbafb65bdcd8ca10e89e277c56d11590d485dc82dab9de404b9a9358e588299e1b2b7dcf2acfc56b676e9384f"}}}}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
getsockopt(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=""/125, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x1)
syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000540)={"d6a6e29fbfaea47968736d858a0ff6d947e11b1037d2c86ca582e1ca5dc1", 0x2, 0x1, 0x0, 0x7, 0xffffffff, 0x67, 0x0, 0x4, [0x3, 0x4d8f, 0xfffffff7, 0x8001, 0x9, 0x5, 0x72c1c00, 0x20000000, 0xe, 0xa, 0x10, 0xb0, 0x4, 0x9859, 0x1, 0x0, 0x10001, 0x0, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0x6, 0xff, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7, 0xf0, 0x95, 0x8, 0x0, 0x47da, 0x2, 0x7f, 0xa1, 0xff, 0xaf, '\x00', 0xc, 0x7d8})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0x5, 0xfffffffffffffffb, 0x3e10000000000000, 0x7fffffff, 0x7, 0x9, 0x7]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000009cfd00054400048018000180080001006f6166000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a3000000000bb283039b8230900020073797a32000000001400000011000100000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000280)=0x80)

12.588494834s ago: executing program 1 (id=785):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x10, 0x0, 0x0)
listen(r6, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8}]}, 0x40}}, 0x0)

11.197047321s ago: executing program 0 (id=788):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904", @ANYRESOCT=r2, @ANYRES8=r2, @ANYRES8=r1, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES16=r2, @ANYRESOCT=r1], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="201601000000b01ed74ef2731367889877a153553c36cc4b68611e9e4887f4034e11dc3ca9f95f23cd1d5598e3d0806718429a7b66c523c9cd9f01fba133a88c2944cdef3499929ae4d48907e29df90863a245b6622dd2283a28bbcaada35e43380a"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1c1e15582399572a3f2983e1a15eb78767b87da6d3da400d215326419919de0df00007736000000000000000000edd0c789d37a7dcf3f5b8c9aa5329c38e2ed4c0fe3a0eae2a169c0322b4e5b96dd251a4477da4961b81a965463617e444bfac080d03ac4fbf2d0c40e22aed01bea5ce1b4ca5e0b249366f1b777a13fcfad3d0a047371d2169230d0d0597e10f58c8e2b20cf205740044c15fab6d52121b0a6b2c122096848d4e29e968e20c1615b1e11c61d8e0c58fe667224e89b83ef29e04c0c6fdf73c50bf051d8651613e5bf65f9e91a91f5ce1080bcbad3aa36f82e9d367cb537444e25cdc8c21b60216d540ac605f39e02950b5af27d81a80cddc1a96754465fe43887165f7dc70939eefaf15dce85857c9329b2bbdcf10f5c85f110a42bcc3489b45f3ffd8a8fadf90cf9a6e35674a89b740ddc", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r4, &(0x7f0000022c00)={0x0, 0x0, 0x0}, 0x10120)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r8, 0xc008aec1, &(0x7f0000000180)=ANY=[])
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000240), 0x4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

11.103447827s ago: executing program 2 (id=789):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_rdma(0x0, 0x0, 0x0, 0xc890, 0x0)
syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x2)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x4)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r4, &(0x7f0000000100)={0x20}, 0xfdef)
r5 = inotify_init()
inotify_add_watch(r5, 0x0, 0x10000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
epoll_create1(0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140)="b01044506ea182d85943da4e46a135", 0xf}, 0x64)
sendto$inet6(r0, &(0x7f0000000a80)="d5", 0x1, 0x8000, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c)

9.605085508s ago: executing program 2 (id=792):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x1000000, 0x5, 0x3}, 0x10)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004)
socket$inet6(0xa, 0x804, 0x800ff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe000202b})
socket$netlink(0x10, 0x3, 0xf)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x28, r2, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0)

8.857103758s ago: executing program 3 (id=793):
move_pages(0x0, 0x3f, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180))
sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0)
syz_usb_ep_read(r3, 0xa, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

7.790627834s ago: executing program 4 (id=794):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc001102a}]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fsopen(0x0, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0))
socket$rds(0x15, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000340)="70bd3906d4ffa14664749ba199cdc54d34513757e5cf5945d6e364132511e4850c93f803fddccc7ab41a3ba1e40d589230cbf79a7481b3c24a6701e2d74f1e599520e6", 0x43}, {&(0x7f0000000200)="ddad4ddbc90b52242339fdd2d55e5cc1a40dade5b7495fe740c2f1243a740d237b1f8fcd1eaa39a32f64be669ea8321d", 0x30}, {&(0x7f00000003c0)="2aadf3972fe7f97953457e5339", 0xd}, {&(0x7f00000004c0)="15", 0x1}], 0x4, &(0x7f0000002ec0)=ANY=[], 0x1090, 0x20000000}], 0x1, 0xd8409bb77fc9445d)
sendmmsg$inet6(r3, &(0x7f0000000100)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000140)="90", 0x1}], 0x1}}], 0x1, 0x20008050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="d6b7ae2aaa035912b68c0489709d88f13f74bdadc9727fb5b5af7c8918e0cf3dfa95e8ce1f99404352c9fe705db43725a60f31aaf7121cbdf42dc9bbeee229da782e773c6623384be1f0c97b4b5417041f21e5a0c173a037d41a9e3d5d9084667eb951bffadd096941edd8a743ec927d4b75fa62a5b1c1ed89bc665bd3e5024d6de6703c18acf5024a5aa597c466addd78113f5a549e1c2b36f929858e"], 0x1000f)

7.602283142s ago: executing program 2 (id=795):
syz_emit_ethernet(0x134, &(0x7f00000002c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x4305, @igmp={{0x1b, 0x4, 0x1, 0x2, 0x126, 0x67, 0x0, 0x6, 0x2, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x1f, 0xa4, [@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xdf, 0x3, 0x2, [{@loopback, 0x7}, {@loopback}]}, @end, @generic={0x7, 0xc, "7b57865c933fc5e0aa6f"}, @lsrr={0x83, 0x17, 0x72, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @private=0xa010100]}]}}, {0x15, 0x1, 0x0, @rand_addr=0x64010101, "186777362fafdf2770fb2405c01db072cdc3587a243e99aaf7f98a4b62fe004a480f333c1a4d2d50be65c6fd0026a89d4ce37edb2b584a74e8e13ab71f669df2299def1049f83b35a1cfc9d5b85846690ab709cff698acd7e4f2e2757240d4a0037bb12742cb8351964a32d50ff0a73a2685c2bc820c5a7039f1288ef01e51b9fd2ab6ed8cefbafb65bdcd8ca10e89e277c56d11590d485dc82dab9de404b9a9358e588299e1b2b7dcf2acfc56b676e9384f"}}}}}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
getsockopt(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=""/125, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x1)
syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000540)={"d6a6e29fbfaea47968736d858a0ff6d947e11b1037d2c86ca582e1ca5dc1", 0x2, 0x1, 0x0, 0x7, 0xffffffff, 0x67, 0x0, 0x4, [0x3, 0x4d8f, 0xfffffff7, 0x8001, 0x9, 0x5, 0x72c1c00, 0x20000000, 0xe, 0xa, 0x10, 0xb0, 0x4, 0x9859, 0x1, 0x0, 0x10001, 0x0, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0x6, 0xff, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7, 0xf0, 0x95, 0x8, 0x0, 0x47da, 0x2, 0x7f, 0xa1, 0xff, 0xaf, '\x00', 0xc, 0x7d8})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0x5, 0xfffffffffffffffb, 0x3e10000000000000, 0x7fffffff, 0x7, 0x9, 0x7]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000009cfd00054400048018000180080001006f6166000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a3000000000bb283039b8230900020073797a32000000001400000011000100000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000280)=0x80)

7.38598594s ago: executing program 4 (id=796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f00000000c0)='./control\x00', 0x0)
r3 = inotify_init()
r4 = epoll_create(0x200008)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9f4}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080))
r6 = inotify_add_watch(r3, &(0x7f00000001c0)='./control\x00', 0xa2000396)
inotify_rm_watch(r3, r6)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xb000001d})
epoll_wait(r4, &(0x7f0000000100)=[{}, {}], 0x2, 0x0)

6.274505547s ago: executing program 2 (id=797):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r1 = io_uring_setup(0x79bf, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x49})
r2 = fanotify_init(0x500, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r3)
fanotify_mark(r2, 0x1, 0x40000019, r5, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x4000)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x58, 0x0, @fd_index=0x7, 0x400, {0x0, r6}, 0x77e7f3d6, 0x1, 0x1, {0x0, 0x0, r7}})
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0)

5.966835512s ago: executing program 4 (id=798):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffffc0, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0), 0x402}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0xfa, 0x400, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r2 = socket(0x1, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="ff008400e01980000200977635e4e79cd34c0000000800890800348157b1115c4f94454c0600e5c16c92063d5dae253089f3419235f1a43c89962cc88d125ebe9ac8ed6f12a4beb57268b178e40c596607a0eab9d4c45506422da1bb64dc8a7879a155bf33a13de86e58347d96eb4ea1ee0ac55d3ed9cf861e20d60e6893fe61681e5a9d1056a39f6db6573f58e9c2e1", 0x90, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

5.721565s ago: executing program 1 (id=799):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(r1, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50)
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x40)
close(r4)
read$FUSE(r4, &(0x7f000000c400)={0x2020}, 0x2020)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
socket$phonet_pipe(0x23, 0x5, 0x2)

4.027758107s ago: executing program 4 (id=800):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x40e592d056bed580, 0x0, @in={0x2, 0x4e24, @local}}}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r3 = syz_open_dev$usbfs(0x0, 0x206, 0x20182)
ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000acb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x6000, @fd_index, 0x7, 0x6ad8, 0xe, 0x0, 0x1, {0x3}})
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000140)=0x4, 0x4)

4.024038756s ago: executing program 0 (id=801):
syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r2, 0x2, 0x1a, 0x0, &(0x7f0000000180))
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
r7 = userfaultfd(0x801)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, 0x0)
fanotify_init(0x1, 0x101000)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2)

3.694204412s ago: executing program 3 (id=802):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000580)=0xa)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

3.204218689s ago: executing program 2 (id=803):
syz_open_dev$sndctrl(0x0, 0x10001d, 0x4841c1)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x800)
unshare(0x72030280)
r0 = socket(0xa, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @loopback, 0x8000}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r0], 0x10b8}, 0x200008c0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_udp(0x2d, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
syz_open_dev$sndpcmp(0x0, 0xf0, 0x0)

3.095394397s ago: executing program 3 (id=804):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x704, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

2.961031736s ago: executing program 4 (id=805):
r0 = dup(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0xfee2, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$qrtr(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c7553eff1608000000000000006004", 0x56}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a2c", 0xd2}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c", 0x7b}, {&(0x7f0000001000)="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", 0x72}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="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", 0x9c}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004adc6b16981ea546cd24ff6d5739a", 0x6a}, {&(0x7f0000000fc0)="8d75938ba9bc695806fede7eee392592", 0x10}, {&(0x7f0000000640)="58456738999231f26764654d127c400c35be50bd812c891d57a89966e4e1e1edbc5f55c56bd6dd0f82411aac5363548841192196114d7abf1b2335f31eb599ac143a26e24af43077c55403b0db95c67654505fc48f69f700887eecbd882ec1c777bf211dec35a15a52b3f5be3e92baebf875036e5e4bf593688feb2d3f1e012965b216b3b3d00b8f72f2c179c488eea8956db8c9f6541041882fb69317f2993e48b4"}], 0x3, 0x0, 0xfffffffffffffdda}}], 0x3, 0xc0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')

2.951105059s ago: executing program 1 (id=806):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x802)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000)
dup(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r4=>0xffffffffffffffff})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r4}, 0xc)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

1.875422782s ago: executing program 0 (id=807):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f027, 0x1})
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r5 = signalfd(r2, &(0x7f0000000000)={[0x8]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={@broadcast, 0x0, 0x0, 0x60, 0x0, [{@multicast2}, {@initdev}, {@loopback}, {@broadcast}, {@local}, {@initdev}]}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000440)=""/42, 0x2a, <r6=>0x0, &(0x7f0000000700)=""/91, 0x5b}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
memfd_create(&(0x7f0000001c40)='s\x00', 0x5)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r10=>r4, {r7}}, './file0\x00'})
getsockopt$packet_buf(r10, 0x107, 0x16, &(0x7f0000000c40)=""/4096, &(0x7f00000008c0)=0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x0, 0x8}, 0xc)
r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x20200, 0x0)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8010, r3}, 0x18)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r15=>0x0})
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r17=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0xffffffff, {0x0, 0x0, 0x7, 0x0, 0x0, 0x64001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r17}, @IFLA_HSR_SLAVE2={0x8, 0x2, r15}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}]}}}]}, 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1d, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x40, 0xf5, &(0x7f0000000600)=""/245, 0x41000, 0x60, '\x00', r17, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x0, 0x6}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000a00)=[r7, r3, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x1, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x1, 0x5, 0x10, 0x3}, {0x1, 0x5, 0xf, 0x8}], 0x10, 0x4, @void, @value}, 0x94)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500100001000130700000000000000002223ac14140000fe00000000963680610c4e8874754c000000491b9eaf07e7e5a400000000000000000000014523aae4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000010000000000000000000020000000a00020000000000000000005d001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000"], 0x150}}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)

1.87381841s ago: executing program 2 (id=808):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f00000000c0)='./control\x00', 0x0)
r3 = inotify_init()
r4 = epoll_create(0x200008)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9f9}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080))
r6 = inotify_add_watch(r3, &(0x7f00000001c0)='./control\x00', 0xa2000396)
inotify_rm_watch(r3, r6)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xb000001d})
epoll_wait(r4, &(0x7f0000000100)=[{}, {}], 0x2, 0x0)

973.997912ms ago: executing program 4 (id=809):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xffffdb4a, @empty, 0x8}, 0x1c)
listen(r0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x4)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x100, {{0xa, 0x4e22, 0x8000, @remote, 0x80}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x6, @loopback, 0xc}}, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x125}}, {{0xa, 0x4e20, 0x1, @mcast1, 0x1}}]}, 0x210)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

0s ago: executing program 1 (id=810):
dup(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="20000000020801080000000000000000000000040900ffffff7f00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/251, 0xfb}, {&(0x7f0000000140)=""/34, 0x22}], 0x7, &(0x7f0000001740)=""/110, 0x6e}, 0xfffffff8}, {{&(0x7f00000017c0)=@generic, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001840)=""/116, 0x74}, {&(0x7f00000018c0)}, {&(0x7f0000001900)=""/179, 0xb3}, {&(0x7f00000019c0)=""/161, 0xa1}, {&(0x7f0000003d40)=""/226, 0xe2}], 0x5}, 0xd45}, {{&(0x7f0000001ac0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c80)=""/94, 0x5e}], 0x1, &(0x7f0000001d40)=""/33, 0x21}, 0x87ff802}, {{&(0x7f0000001d80)=@ax25={{0x3, @netrom}, [@remote, @netrom, @rose, @remote, @default, @default, @remote, @netrom]}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001e00)=""/13, 0xd}, {&(0x7f00000018c0)=""/46, 0x2e}, {&(0x7f0000001e80)=""/234, 0xea}, {&(0x7f0000001f80)=""/173, 0xad}, {&(0x7f0000002040)=""/15, 0xf}, {&(0x7f0000002080)=""/81, 0x51}, {&(0x7f0000002100)=""/219, 0xdb}, {&(0x7f0000002200)=""/129, 0x81}], 0x8, &(0x7f0000001a80)=""/18, 0x12}, 0x6ad9}, {{&(0x7f0000002380)=@nfc, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000002400)=""/193, 0xc1}, {&(0x7f0000002500)=""/30, 0x1e}, {&(0x7f00000035c0)=""/241, 0xf1}, {&(0x7f00000036c0)=""/219, 0xdb}, {&(0x7f00000037c0)=""/114, 0x72}, {&(0x7f0000003c40)=""/66, 0x42}], 0x7, &(0x7f00000038c0)=""/85, 0x55}, 0x4}, {{&(0x7f0000003940)=@can, 0x80, &(0x7f0000003a40)=[{&(0x7f00000039c0)=""/78, 0x4e}, {&(0x7f0000002540)=""/34, 0x22}], 0x2, &(0x7f0000003a80)}, 0x8}], 0x6, 0x2, 0x0)
bind$qrtr(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
brk(0x1)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581ef02"], 0x0)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020)
mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r7, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x240400c0)

kernel console output (not intermixed with test programs):

326 audit(1744642571.991:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6862 comm="syz.3.266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f881fb8d169 code=0x0
[  201.756714][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  202.322931][ T5880] usb 2-1: Using ep0 maxpacket: 16
[  202.354284][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  202.428544][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.461424][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  202.484050][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  202.493362][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.514472][ T5880] usb 2-1: Product: syz
[  202.554821][ T5880] usb 2-1: Manufacturer: syz
[  202.579466][ T5880] usb 2-1: SerialNumber: syz
[  203.715990][ T5880] usb 2-1: 0:2 : does not exist
[  203.736656][ T5880] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  203.933709][ T5880] usb 2-1: USB disconnect, device number 7
[  204.564535][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.961184][   T30] audit: type=1326 audit(1744642577.912:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6906 comm="syz.4.278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe68af8d169 code=0x0
[  209.101276][ T6916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.539580][ T6934] netlink: 'syz.1.285': attribute type 1 has an invalid length.
[  210.841617][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1
[  210.872286][ T6937] geneve2: entered promiscuous mode
[  210.877854][ T6937] geneve2: entered allmulticast mode
[  211.219274][ T6937] bond1: (slave geneve2): making interface the new active one
[  211.266965][ T6937] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  211.813564][ T6955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'.
[  212.083387][   T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  212.318823][   T47] usb 4-1: Using ep0 maxpacket: 32
[  212.490968][   T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.557206][   T47] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  212.804590][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.856014][   T47] usb 4-1: Product: syz
[  212.860252][   T47] usb 4-1: Manufacturer: syz
[  212.889304][   T47] usb 4-1: SerialNumber: syz
[  212.937837][   T30] audit: type=1326 audit(1744642582.542:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.1.293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f654538d169 code=0x0
[  212.940040][   T47] usb 4-1: config 0 descriptor??
[  213.046078][   T47] usb 4-1: bad CDC descriptors
[  213.051629][   T47] usb 4-1: unsupported MDLM descriptors
[  213.653232][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  213.661781][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  213.668460][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  213.674672][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  215.269429][ T5877] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  215.461876][ T5877] usb 1-1: Using ep0 maxpacket: 8
[  215.474533][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short
[  215.488543][ T5877] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[  215.498034][ T5877] usb 1-1: config 4 has an invalid descriptor of length 101, skipping remainder of the config
[  215.517948][ T5877] usb 1-1: config 4 has no interface number 0
[  215.531732][ T5877] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  215.546680][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.575473][ T5877] usb 1-1: Product: syz
[  215.589260][ T5877] usb 1-1: Manufacturer: syz
[  215.604145][ T5877] usb 1-1: SerialNumber: syz
[  215.771695][   T10] usb 4-1: USB disconnect, device number 9
[  216.372020][ T7005] FAULT_INJECTION: forcing a failure.
[  216.372020][ T7005] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  216.391909][ T7005] CPU: 1 UID: 0 PID: 7005 Comm: syz.4.304 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  216.391941][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  216.391953][ T7005] Call Trace:
[  216.391961][ T7005]  <TASK>
[  216.391969][ T7005]  dump_stack_lvl+0x241/0x360
[  216.392019][ T7005]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.392047][ T7005]  ? __pfx__printk+0x10/0x10
[  216.392086][ T7005]  should_fail_ex+0x424/0x570
[  216.392113][ T7005]  _copy_from_user+0x2d/0xb0
[  216.392143][ T7005]  move_addr_to_kernel+0x7f/0x170
[  216.392172][ T7005]  __sys_connect+0xb8/0x2d0
[  216.392202][ T7005]  ? __fget_files+0x2a/0x420
[  216.392225][ T7005]  ? __pfx___sys_connect+0x10/0x10
[  216.392280][ T7005]  __x64_sys_connect+0x7a/0x90
[  216.392312][ T7005]  do_syscall_64+0xf3/0x230
[  216.392337][ T7005]  ? clear_bhb_loop+0x45/0xa0
[  216.392361][ T7005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.392385][ T7005] RIP: 0033:0x7fe68af8d169
[  216.392406][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.392421][ T7005] RSP: 002b:00007fe68bd15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  216.392449][ T7005] RAX: ffffffffffffffda RBX: 00007fe68b1a5fa0 RCX: 00007fe68af8d169
[  216.392463][ T7005] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003
[  216.392475][ T7005] RBP: 00007fe68bd15090 R08: 0000000000000000 R09: 0000000000000000
[  216.392487][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.392498][ T7005] R13: 0000000000000000 R14: 00007fe68b1a5fa0 R15: 00007ffce6e5a238
[  216.392528][ T7005]  </TASK>
[  216.567178][    C1] vkms_vblank_simulate: vblank timer overrun
[  216.573216][    C1] hrtimer: interrupt took 160004913 ns
[  216.673246][    C1] vkms_vblank_simulate: vblank timer overrun
[  216.849291][ T5877] usb 1-1: Found UVC 0.02 device syz (04f2:b746)
[  216.900293][ T5877] usb 1-1: No valid video chain found.
[  216.973436][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'.
[  217.672295][ T5877] usb 1-1: USB disconnect, device number 11
[  217.782212][   T30] audit: type=1326 audit(1744642587.107:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.2.307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75d538d169 code=0x0
[  223.543570][   T30] audit: type=1326 audit(1744642592.476:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7072 comm="syz.1.322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f654538d169 code=0x0
[  227.652631][ T7112] netlink: 6 bytes leftover after parsing attributes in process `syz.3.333'.
[  228.892144][ T1206] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  229.256415][ T5880] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  229.851258][ T1206] usb 4-1: Using ep0 maxpacket: 16
[  229.890131][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  229.963392][ T1206] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  230.001024][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.045709][ T1206] usb 4-1: Product: syz
[  230.065791][ T1206] usb 4-1: Manufacturer: syz
[  230.072115][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.113662][ T1206] usb 4-1: SerialNumber: syz
[  230.134076][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.450528][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  230.466380][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  231.206136][ T1206] usb 4-1: config 0 descriptor??
[  231.242847][ T1206] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  231.252496][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.694644][ T1206] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  231.702250][ T5880] usb 3-1: config 0 descriptor??
[  231.742944][ T7154] sg_write: data in/out 18/14 bytes for SCSI command 0x0-- guessing data in;
[  231.742944][ T7154]    program syz.4.345 not setting count and/or reply_len properly
[  232.407766][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.509236][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.568550][ T1206] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  232.569441][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.661972][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.752443][ T7164] 9pnet_fd: Insufficient options for proto=fd
[  232.819529][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  233.017927][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.031297][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  233.079594][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  233.146692][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  233.179312][ T1206] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  233.202551][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  233.215787][ T1206] em28xx 4-1:0.0: board has no eeprom
[  233.277422][   T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  233.299415][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.340754][   T10] usb 1-1: Product: syz
[  233.345083][   T10] usb 1-1: Manufacturer: syz
[  233.363798][   T10] usb 1-1: SerialNumber: syz
[  233.393849][   T10] usb 1-1: config 0 descriptor??
[  233.437217][   T10] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected
[  233.476994][   T10] garmin_gps ttyUSB0: failed to submit interrupt urb: -90
[  233.484291][   T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  233.569086][ T5880] usb 3-1: can't set config #0, error -71
[  233.586651][ T1206] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  233.604788][ T5880] usb 3-1: USB disconnect, device number 6
[  233.612731][ T1206] em28xx 4-1:0.0: dvb set to bulk mode.
[  234.360812][   T10] em28xx 4-1:0.0: Binding DVB extension
[  234.393480][ T1206] usb 4-1: USB disconnect, device number 10
[  234.400854][ T5933] usb 1-1: USB disconnect, device number 12
[  234.406937][ T1206] em28xx 4-1:0.0: Disconnecting em28xx
[  234.589200][ T5933] garmin_gps 1-1:0.0: device disconnected
[  235.317671][ T7185] input: syz1 as /devices/virtual/input/input6
[  235.362740][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'.
[  235.404103][   T10] em28xx 4-1:0.0: Registering input extension
[  235.448914][ T1206] em28xx 4-1:0.0: Closing input extension
[  235.460200][ T7190] vlan2: entered allmulticast mode
[  235.502721][ T7190] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  235.666538][ T1206] em28xx 4-1:0.0: Freeing device
[  235.912848][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  235.940968][ T5839] Bluetooth: hci2: unexpected event for opcode 0x0403
[  236.043591][ T5880] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  236.062346][   T10] usb 5-1: device descriptor read/64, error -71
[  236.212455][ T1206] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  236.244207][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  236.253463][ T5880] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  236.262770][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.271675][ T5880] usb 2-1: Product: syz
[  236.275874][ T5880] usb 2-1: Manufacturer: syz
[  236.280556][ T5880] usb 2-1: SerialNumber: syz
[  236.293106][ T5880] go7007 2-1:64.0: The Lifeview TV Walker Ultra is not supported. Sorry!
[  236.329738][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  236.447206][ T1206] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  236.457995][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.466465][ T1206] usb 4-1: Product: syz
[  236.471845][ T1206] usb 4-1: Manufacturer: syz
[  236.476774][ T1206] usb 4-1: SerialNumber: syz
[  236.483070][   T10] usb 5-1: device descriptor read/64, error -71
[  236.507026][ T1206] usb 4-1: config 0 descriptor??
[  236.553263][ T1206] comedi comedi0: Wrong number of endpoints
[  236.560227][ T1206] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device.
[  236.630780][   T10] usb usb5-port1: attempt power cycle
[  236.710067][ T1206] usb 2-1: USB disconnect, device number 8
[  237.037466][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  237.174932][   T10] usb 5-1: device descriptor read/8, error -71
[  237.248995][ T5933] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  238.540449][ T5933] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  238.584026][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  238.607939][   T10] usb 5-1: device descriptor read/8, error -71
[  238.862021][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.869009][   T10] usb usb5-port1: unable to enumerate USB device
[  238.992832][ T5933] usb 3-1: Product: syz
[  239.137611][ T5933] usb 3-1: Manufacturer: syz
[  239.237672][ T5933] usb 3-1: SerialNumber: syz
[  239.338939][ T5933] usb 3-1: config 0 descriptor??
[  239.603292][ T5933] usb 3-1: USB disconnect, device number 7
[  239.727319][    T9] usb 4-1: USB disconnect, device number 11
[  240.038497][ T7243] capability: warning: `syz.3.375' uses deprecated v2 capabilities in a way that may be insecure
[  241.442114][   T30] audit: type=1326 audit(1744642609.238:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7240 comm="syz.1.372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f654538d169 code=0x0
[  243.297977][ T7285] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[  243.306091][ T7285] netlink: 208 bytes leftover after parsing attributes in process `syz.2.385'.
[  245.192781][ T7305] netlink: 80 bytes leftover after parsing attributes in process `syz.1.388'.
[  245.226053][ T7307] FAULT_INJECTION: forcing a failure.
[  245.226053][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.289693][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.4.391 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  245.289722][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  245.289735][ T7307] Call Trace:
[  245.289743][ T7307]  <TASK>
[  245.289752][ T7307]  dump_stack_lvl+0x241/0x360
[  245.289794][ T7307]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.289824][ T7307]  ? __pfx__printk+0x10/0x10
[  245.289868][ T7307]  should_fail_ex+0x424/0x570
[  245.289898][ T7307]  _copy_from_iter+0x211/0x1c70
[  245.289935][ T7307]  ? __build_skb_around+0x247/0x3d0
[  245.289961][ T7307]  ? __alloc_skb+0x298/0x480
[  245.289981][ T7307]  ? __pfx__copy_from_iter+0x10/0x10
[  245.290012][ T7307]  ? __pfx___alloc_skb+0x10/0x10
[  245.290035][ T7307]  ? skb_put+0x114/0x1f0
[  245.290062][ T7307]  netlink_sendmsg+0x73c/0xcd0
[  245.290113][ T7307]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.290167][ T7307]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.290208][ T7307]  __sock_sendmsg+0x221/0x270
[  245.290240][ T7307]  ____sys_sendmsg+0x523/0x860
[  245.290284][ T7307]  ? __pfx_____sys_sendmsg+0x10/0x10
[  245.290304][ T7307]  ? __fget_files+0x2a/0x420
[  245.290352][ T7307]  ? __fget_files+0x2a/0x420
[  245.290386][ T7307]  __sys_sendmsg+0x271/0x360
[  245.290415][ T7307]  ? __pfx___sys_sendmsg+0x10/0x10
[  245.290499][ T7307]  ? do_syscall_64+0xb6/0x230
[  245.290530][ T7307]  do_syscall_64+0xf3/0x230
[  245.290557][ T7307]  ? clear_bhb_loop+0x45/0xa0
[  245.290583][ T7307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.290603][ T7307] RIP: 0033:0x7fe68af8d169
[  245.290622][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.290640][ T7307] RSP: 002b:00007fe68bd15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.290662][ T7307] RAX: ffffffffffffffda RBX: 00007fe68b1a5fa0 RCX: 00007fe68af8d169
[  245.290677][ T7307] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  245.290690][ T7307] RBP: 00007fe68bd15090 R08: 0000000000000000 R09: 0000000000000000
[  245.290702][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.290714][ T7307] R13: 0000000000000000 R14: 00007fe68b1a5fa0 R15: 00007ffce6e5a238
[  245.290747][ T7307]  </TASK>
[  245.517959][    C0] vkms_vblank_simulate: vblank timer overrun
[  247.492140][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.397'.
[  248.200644][   T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  248.345962][   T10] usb 1-1: device descriptor read/64, error -71
[  248.863725][   T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  249.030076][   T10] usb 1-1: device descriptor read/64, error -71
[  249.147868][   T10] usb usb1-port1: attempt power cycle
[  249.511165][   T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  249.909203][ T7316] sctp: failed to load transform for md5: -2
[  249.988577][   T10] usb 1-1: device descriptor read/8, error -71
[  250.465393][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  250.531812][   T10] usb 1-1: Using ep0 maxpacket: 8
[  250.542742][   T10] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  250.564180][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.587081][   T10] usb 1-1: Product: syz
[  250.602110][   T10] usb 1-1: Manufacturer: syz
[  250.619408][   T10] usb 1-1: SerialNumber: syz
[  250.646900][   T10] usb 1-1: config 0 descriptor??
[  250.672493][   T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  250.698111][   T10] usb 1-1: setting power ON
[  250.707852][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  250.745181][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  250.774880][   T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  250.788671][   T10] usb 1-1: media controller created
[  250.853376][ T7378] netlink: 6 bytes leftover after parsing attributes in process `syz.4.410'.
[  250.857863][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  251.123949][   T10] usb 1-1: selecting invalid altsetting 6
[  251.138143][   T10] usb 1-1: digital interface selection failed (-22)
[  251.155185][   T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  251.264882][ T7384] dvb-usb: bulk message failed: -22 (3/0)
[  251.270872][ T7384] usb 1-1: gpio_write failed.
[  251.276052][ T7384] cxusb: i2c rd: len=99 is too big!
[  251.276052][ T7384] 
[  251.784209][   T10] usb 1-1: setting power OFF
[  251.836013][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  252.051239][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  252.174563][   T10] (NULL device *): no alternate interface
[  253.438952][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  253.574430][   T10] usb 1-1: USB disconnect, device number 16
[  253.930177][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.776997][ T7438] tipc: Trying to set illegal importance in message
[  256.075491][ T1206] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  256.432295][ T1206] usb 1-1: config 0 has an invalid interface number: 248 but max is 0
[  256.466797][ T1206] usb 1-1: config 0 has no interface number 0
[  256.496520][ T1206] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=c4.ff
[  256.526972][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.550496][ T1206] usb 1-1: Product: syz
[  256.554793][ T1206] usb 1-1: Manufacturer: syz
[  256.578196][ T1206] usb 1-1: SerialNumber: syz
[  256.607106][ T1206] usb 1-1: config 0 descriptor??
[  256.634867][ T1206] hub 1-1:0.248: bad descriptor, ignoring hub
[  256.652065][ T1206] hub 1-1:0.248: probe with driver hub failed with error -5
[  256.861692][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'.
[  257.466754][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  257.681978][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  257.701943][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[  257.729751][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  257.746443][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.802595][   T10] usb 2-1: config 0 descriptor??
[  258.032083][ T5933] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  258.062506][ T7443] netlink: 68 bytes leftover after parsing attributes in process `syz.1.429'.
[  258.157451][ T5902] usb 2-1: USB disconnect, device number 9
[  258.225001][ T5933] usb 4-1: Using ep0 maxpacket: 8
[  258.271437][ T5933] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  258.302263][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.328493][ T5933] usb 4-1: Product: syz
[  258.344273][ T5933] usb 4-1: Manufacturer: syz
[  258.361215][ T5933] usb 4-1: SerialNumber: syz
[  258.378314][ T5933] usb 4-1: config 0 descriptor??
[  258.401431][ T5933] gspca_main: se401-2.14.0 probing 047d:5003
[  258.521342][ T7460] 9p: Unknown Cache mode or invalid value fscav鼶���che
[  258.700668][ T1206] usb 1-1: USB disconnect, device number 17
[  258.989821][ T5933] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  258.998860][ T5933] se401 4-1:0.0: probe with driver se401 failed with error -71
[  259.015381][ T5933] usb 4-1: USB disconnect, device number 12
[  260.687840][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  260.694238][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  260.766742][ T6804] udevd[6804]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.248/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  261.151193][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'.
[  261.243711][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'.
[  262.170601][ T7497] netlink: 6 bytes leftover after parsing attributes in process `syz.3.443'.
[  263.371214][ T7524] fuse: Bad value for 'fd'
[  265.259303][   T30] audit: type=1326 audit(1744642631.510:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68af8d169 code=0x7ffc0000
[  265.284275][   T30] audit: type=1326 audit(1744642631.538:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe68af29359 code=0x7ffc0000
[  265.429444][   T30] audit: type=1326 audit(1744642631.538:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe68af8d169 code=0x7ffc0000
[  265.499114][   T30] audit: type=1326 audit(1744642631.538:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe68af29359 code=0x7ffc0000
[  265.521390][   T30] audit: type=1326 audit(1744642631.538:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68af8d169 code=0x7ffc0000
[  265.690486][   T30] audit: type=1326 audit(1744642631.538:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68af8d169 code=0x7ffc0000
[  266.721665][   T30] audit: type=1326 audit(1744642631.622:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe68af29359 code=0x7ffc0000
[  266.870465][   T30] audit: type=1326 audit(1744642631.622:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe68af29359 code=0x7ffc0000
[  266.956584][   T30] audit: type=1326 audit(1744642631.632:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe68af29359 code=0x7ffc0000
[  267.033014][   T30] audit: type=1326 audit(1744642631.632:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7511 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe68af29359 code=0x7ffc0000
[  267.392736][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'.
[  267.605223][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  268.230650][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  268.350229][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.424935][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  268.466488][ T5876] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  268.490501][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.520851][ T5876] usb 5-1: config 0 descriptor??
[  269.002344][ T7568] fuse: Bad value for 'fd'
[  270.068099][ T7578] netlink: 136 bytes leftover after parsing attributes in process `syz.3.466'.
[  270.091046][ T7578] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  272.281078][ T7583] syzkaller0: entered promiscuous mode
[  272.286961][ T7583] syzkaller0: entered allmulticast mode
[  272.600827][ T5876] usbhid 5-1:0.0: can't add hid device: -71
[  272.624492][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  272.682662][ T5876] usb 5-1: USB disconnect, device number 9
[  272.778549][ T7595] netlink: 6 bytes leftover after parsing attributes in process `syz.2.471'.
[  273.128705][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'.
[  274.374922][ T7615] fuse: Bad value for 'fd'
[  275.169030][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  276.017670][    T9] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  276.037762][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.061028][    T9] usb 3-1: Product: syz
[  276.071816][    T9] usb 3-1: Manufacturer: syz
[  276.082709][    T9] usb 3-1: SerialNumber: syz
[  276.104327][    T9] usb 3-1: config 0 descriptor??
[  276.146493][    T9] comedi comedi0: Wrong number of endpoints
[  276.161118][    T9] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device.
[  277.592640][ T7640] xt_CT: No such helper "pptp"
[  278.388311][ T5933] usb 3-1: USB disconnect, device number 8
[  278.513965][ T7644] netlink: 6 bytes leftover after parsing attributes in process `syz.1.484'.
[  278.532722][ T7646] overlayfs: failed to resolve './file1': -2
[  278.585151][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[  278.594205][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'.
[  281.317206][ T7670] netlink: 84 bytes leftover after parsing attributes in process `syz.3.491'.
[  281.323034][ T7672] netlink: 104 bytes leftover after parsing attributes in process `syz.0.493'.
[  281.335264][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'.
[  281.519109][ T5933] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  281.527246][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  281.527263][   T30] audit: type=1400 audit(1744642646.729:107): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=7675 comm="syz.1.494" name="fb0" dev="devtmpfs" ino=629
[  281.568836][   T30] audit: type=1400 audit(1744642646.766:108): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7675 comm="syz.1.494" name="97" dev="tmpfs" ino=507
[  282.100073][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.111688][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.124889][ T5933] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  282.157066][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.182694][ T5933] usb 5-1: config 0 descriptor??
[  283.013928][ T7691] netlink: 6 bytes leftover after parsing attributes in process `syz.3.499'.
[  283.069317][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  283.123795][ T5933] logitech-djreceiver 0003:046D:C534.0002: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input0
[  283.250918][ T5876] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  283.425631][    T9] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  283.435088][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.447679][    T9] usb 2-1: Product: syz
[  283.457739][    T9] usb 2-1: Manufacturer: syz
[  283.462390][    T9] usb 2-1: SerialNumber: syz
[  283.471046][    T9] usb 2-1: config 0 descriptor??
[  284.209358][ T5876] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  284.223498][    T9] comedi comedi0: Wrong number of endpoints
[  284.231424][    T9] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device.
[  284.236537][ T5876] usb 1-1: config 0 has no interface number 0
[  284.332882][ T5933] usb 5-1: USB disconnect, device number 10
[  284.364988][ T5876] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  284.387735][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.409724][ T5876] usb 1-1: Product: syz
[  284.415669][ T5876] usb 1-1: Manufacturer: syz
[  284.423678][ T5876] usb 1-1: SerialNumber: syz
[  284.443911][ T5876] usb 1-1: config 0 descriptor??
[  285.546148][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  285.627341][ T7715] netlink: 'syz.0.498': attribute type 3 has an invalid length.
[  285.807295][ T5876] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  285.820070][ T5876] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  285.829709][ T5876] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  285.837817][ T5876] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  285.865238][ T5876] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  285.982112][ T5902] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  286.000530][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0
[  286.018435][ T5902] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  286.030250][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  286.038552][ T5902] usb 3-1: Product: syz
[  286.048241][ T5902] usb 3-1: Manufacturer: syz
[  286.054019][ T5902] usb 3-1: SerialNumber: syz
[  286.064724][ T5902] usb 3-1: config 0 descriptor??
[  286.283994][ T7723] sg_write: data in/out 1778074014/187 bytes for SCSI command 0x76-- guessing data in;
[  286.283994][ T7723]    program syz.4.506 not setting count and/or reply_len properly
[  286.307174][ T7723] autofs: Bad value for 'fd'
[  286.863718][ T5876] usb 2-1: USB disconnect, device number 10
[  286.893572][ T1206] usb 1-1: USB disconnect, device number 18
[  286.903679][ T5902] usb 3-1: selecting invalid altsetting 0
[  286.948879][ T1206] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  286.989567][ T1206] keyspan 1-1:0.133: device disconnected
[  287.017014][ T7730] FAULT_INJECTION: forcing a failure.
[  287.017014][ T7730] name failslab, interval 1, probability 0, space 0, times 0
[  287.068124][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.3.509 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  287.068153][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  287.068165][ T7730] Call Trace:
[  287.068174][ T7730]  <TASK>
[  287.068182][ T7730]  dump_stack_lvl+0x241/0x360
[  287.068220][ T7730]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.068249][ T7730]  ? __pfx__printk+0x10/0x10
[  287.068284][ T7730]  ? __pfx___might_resched+0x10/0x10
[  287.068321][ T7730]  should_fail_ex+0x424/0x570
[  287.068352][ T7730]  should_failslab+0xac/0x100
[  287.068376][ T7730]  __kvmalloc_node_noprof+0x170/0x5a0
[  287.068400][ T7730]  ? nf_hook_entries_grow+0x290/0x740
[  287.068427][ T7730]  ? trace_contention_end+0x3c/0x120
[  287.068458][ T7730]  nf_hook_entries_grow+0x290/0x740
[  287.068501][ T7730]  __nf_register_net_hook+0x278/0x8e0
[  287.068546][ T7730]  nf_register_net_hook+0xb0/0x190
[  287.068576][ T7730]  nf_register_net_hooks+0x41/0x1a0
[  287.068608][ T7730]  nf_defrag_ipv4_enable+0x85/0x110
[  287.068635][ T7730]  nf_ct_netns_do_get+0x181/0x680
[  287.068669][ T7730]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  287.068700][ T7730]  ? nft_validate_register_store+0x188/0x1d0
[  287.068734][ T7730]  ? nft_parse_register_store+0x215/0x290
[  287.068767][ T7730]  nft_ct_get_init+0x63f/0x8b0
[  287.068807][ T7730]  nf_tables_newrule+0x1861/0x2980
[  287.068859][ T7730]  ? __pfx_nf_tables_newrule+0x10/0x10
[  287.068910][ T7730]  ? __nla_parse+0x40/0x60
[  287.068942][ T7730]  nfnetlink_rcv+0x12eb/0x28f0
[  287.069008][ T7730]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  287.069110][ T7730]  ? skb_clone+0x240/0x390
[  287.069149][ T7730]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.069184][ T7730]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.069217][ T7730]  netlink_unicast+0x7f8/0x9a0
[  287.069254][ T7730]  ? __pfx_netlink_unicast+0x10/0x10
[  287.069281][ T7730]  ? smack_socket_getpeersec_dgram+0x240/0x410
[  287.069332][ T7730]  ? skb_put+0x114/0x1f0
[  287.069359][ T7730]  netlink_sendmsg+0x8c3/0xcd0
[  287.069405][ T7730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.069452][ T7730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.069481][ T7730]  __sock_sendmsg+0x221/0x270
[  287.069514][ T7730]  ____sys_sendmsg+0x523/0x860
[  287.069548][ T7730]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.069568][ T7730]  ? __fget_files+0x2a/0x420
[  287.069597][ T7730]  ? __fget_files+0x2a/0x420
[  287.069632][ T7730]  __sys_sendmsg+0x271/0x360
[  287.069662][ T7730]  ? __pfx___sys_sendmsg+0x10/0x10
[  287.069749][ T7730]  ? do_syscall_64+0xb6/0x230
[  287.069780][ T7730]  do_syscall_64+0xf3/0x230
[  287.069807][ T7730]  ? clear_bhb_loop+0x45/0xa0
[  287.069833][ T7730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.069854][ T7730] RIP: 0033:0x7f881fb8d169
[  287.069872][ T7730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.069888][ T7730] RSP: 002b:00007f8820a9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.069910][ T7730] RAX: ffffffffffffffda RBX: 00007f881fda5fa0 RCX: 00007f881fb8d169
[  287.069925][ T7730] RDX: 0000000008000010 RSI: 0000200000000000 RDI: 0000000000000003
[  287.069938][ T7730] RBP: 00007f8820a9e090 R08: 0000000000000000 R09: 0000000000000000
[  287.069950][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.069961][ T7730] R13: 0000000000000000 R14: 00007f881fda5fa0 R15: 00007fff8ac47be8
[  287.069993][ T7730]  </TASK>
[  287.527687][ T7732] netlink: 6 bytes leftover after parsing attributes in process `syz.4.510'.
[  287.529395][ T5902] usb 3-1: USB disconnect, device number 9
[  287.979445][ T7744] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  288.771501][ T7181] udevd[7181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.846782][    T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  290.717290][    T9] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  290.736036][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.744200][    T9] usb 1-1: Product: syz
[  290.749179][    T9] usb 1-1: Manufacturer: syz
[  290.753827][    T9] usb 1-1: SerialNumber: syz
[  290.767181][    T9] usb 1-1: config 0 descriptor??
[  290.963542][    T9] usb 1-1: selecting invalid altsetting 1
[  290.974451][    T9] technisat-usb2: could not set alternate setting to 0
[  291.108356][ T1206] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  291.581365][    T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[  291.603562][    T9] usb 1-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2
[  291.625004][    T9] usb 1-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw
[  291.711348][ T5902] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  291.720143][ T1206] usb 5-1: Using ep0 maxpacket: 8
[  291.734156][ T1206] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  291.744504][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.759780][ T1206] usb 5-1: config 0 descriptor??
[  291.769540][ T1206] pwc: Logitech QuickCam Zoom USB webcam detected.
[  291.779904][ T1206] pwc: Warning: more than 1 configuration available.
[  291.781800][ T5877] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  291.887405][ T7782] netlink: 6 bytes leftover after parsing attributes in process `syz.3.522'.
[  291.907384][ T5902] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  291.919317][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.930317][ T5902] usb 3-1: Product: syz
[  291.937235][ T5902] usb 3-1: Manufacturer: syz
[  291.944467][ T5902] usb 3-1: SerialNumber: syz
[  291.957404][ T5902] usb 3-1: config 0 descriptor??
[  291.964380][ T5877] usb 2-1: Using ep0 maxpacket: 8
[  291.976264][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short
[  291.990026][ T5877] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10
[  292.003156][ T5902] comedi comedi0: Wrong number of endpoints
[  292.010602][ T5877] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  292.022481][ T5902] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device.
[  292.035960][ T5877] usb 2-1: config 1 interface 0 has no altsetting 0
[  292.046157][ T5877] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40
[  292.055397][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.076380][ T5877] usb 2-1: Product: syz
[  292.081754][ T5877] usb 2-1: Manufacturer: syz
[  292.086405][ T5877] usb 2-1: SerialNumber: syz
[  292.126845][ T1206] pwc: Failed to set LED on/off time (-71)
[  292.154673][ T1206] pwc: send_video_command error -71
[  292.174259][ T1206] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  292.182074][ T5877] usb 2-1: can't set config #1, error -71
[  292.184800][ T5877] usb 2-1: USB disconnect, device number 11
[  292.221706][ T1206] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  292.250618][ T1206] usb 5-1: USB disconnect, device number 11
[  294.262997][ T5877] usb 3-1: USB disconnect, device number 10
[  294.518721][ T7804] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.530'.
[  296.156777][ T7823] netlink: 6 bytes leftover after parsing attributes in process `syz.0.533'.
[  297.870047][ T7837] netlink: 68 bytes leftover after parsing attributes in process `syz.1.539'.
[  297.910115][ T7841] 9pnet_fd: Insufficient options for proto=fd
[  297.951615][   T30] audit: type=1326 audit(1744642662.051:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  298.054666][   T30] audit: type=1326 audit(1744642662.051:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  298.202747][   T30] audit: type=1326 audit(1744642662.060:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  298.228201][ T5879] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  298.249796][ T5822] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  298.702110][   T30] audit: type=1326 audit(1744642662.060:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  298.802294][ T5879] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  298.890095][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.040083][   T30] audit: type=1326 audit(1744642662.060:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f654538bad0 code=0x7ffc0000
[  299.069715][   T30] audit: type=1326 audit(1744642662.060:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f654538e997 code=0x7ffc0000
[  299.083604][ T5879] usb 3-1: Product: syz
[  299.102612][   T30] audit: type=1326 audit(1744642662.060:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  299.123921][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.198376][ T5879] usb 3-1: Manufacturer: syz
[  299.223699][ T5879] usb 3-1: SerialNumber: syz
[  299.246623][   T30] audit: type=1326 audit(1744642662.060:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f654538e997 code=0x7ffc0000
[  299.268779][ T5822] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  299.302652][ T5879] usb 3-1: config 0 descriptor??
[  299.349582][ T5879] comedi comedi0: Wrong number of endpoints
[  299.368122][ T5879] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device.
[  299.414816][ T5822] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  299.452304][ T5822] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  299.466871][   T30] audit: type=1326 audit(1744642662.060:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f654538bdca code=0x7ffc0000
[  299.494028][ T5822] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  299.730195][ T5822] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  299.739920][   T30] audit: type=1326 audit(1744642662.060:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  300.751887][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.881864][ T5876] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  301.544226][ T5876] usb 2-1: config 10 has an invalid interface number: 182 but max is 3
[  301.552589][ T5876] usb 2-1: config 10 has an invalid interface number: 226 but max is 3
[  301.567316][ T5876] usb 2-1: config 10 has an invalid interface number: 254 but max is 3
[  301.579897][ T5876] usb 2-1: config 10 has an invalid interface number: 190 but max is 3
[  301.589479][ T5876] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  301.637330][ T5876] usb 2-1: config 10 has no interface number 0
[  301.658812][ T5876] usb 2-1: config 10 has no interface number 1
[  301.670664][ T5876] usb 2-1: config 10 has no interface number 2
[  301.676964][ T5876] usb 2-1: config 10 has no interface number 3
[  301.686454][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  301.698939][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  301.717047][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  301.732923][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  301.752618][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  301.764435][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  301.786115][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  301.808617][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  301.938398][ T5902] usb 3-1: USB disconnect, device number 11
[  302.364205][ T5822] usb 5-1: can't set config #27, error -71
[  302.719306][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  302.731514][ T5822] usb 5-1: USB disconnect, device number 12
[  302.740185][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  302.754034][ T5876] usb 2-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  302.765666][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  302.785376][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  302.800761][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  302.812003][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  302.825552][ T5876] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  302.856569][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  302.926079][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  302.987296][ T5876] usb 2-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  303.168674][ T5876] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  303.863372][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  303.879239][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  303.892534][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  303.910599][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  303.925973][ T5876] usb 2-1: config 10 interface 182 has no altsetting 0
[  303.937249][ T5876] usb 2-1: config 10 interface 226 has no altsetting 0
[  303.944183][ T5876] usb 2-1: config 10 interface 254 has no altsetting 0
[  304.022526][ T5876] usb 2-1: config 10 interface 190 has no altsetting 0
[  304.068067][ T5876] usb 2-1: string descriptor 0 read error: -71
[  304.070734][ T7896] o2cb: This node has not been configured.
[  304.074771][ T5876] usb 2-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  304.080691][ T7896] o2cb: Cluster check failed. Fix errors before retrying.
[  304.080743][ T7896] (syz.0.554,7896,0):user_dlm_register:674 ERROR: status = -22
[  304.080769][ T7896] (syz.0.554,7896,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  304.167986][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.185604][ T7896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  304.247619][ T5876] usb 2-1: can't set config #10, error -71
[  304.278784][ T5876] usb 2-1: USB disconnect, device number 12
[  304.291546][ T7902] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  304.305641][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  304.305659][   T30] audit: type=1326 audit(1744642667.916:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  304.409906][   T30] audit: type=1326 audit(1744642667.916:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  304.432169][   T30] audit: type=1326 audit(1744642667.916:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  304.435530][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[  304.454304][   T30] audit: type=1326 audit(1744642667.925:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  304.703708][ T7906] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  305.088852][   T30] audit: type=1326 audit(1744642667.925:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  305.155888][   T30] audit: type=1326 audit(1744642667.925:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  305.219834][   T30] audit: type=1326 audit(1744642667.925:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  305.270894][   T30] audit: type=1326 audit(1744642667.925:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  305.299640][   T30] audit: type=1326 audit(1744642667.925:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  305.321040][    C1] vkms_vblank_simulate: vblank timer overrun
[  305.356702][   T30] audit: type=1326 audit(1744642667.925:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654538d169 code=0x7ffc0000
[  305.668986][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  306.339675][   T10] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  306.383636][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.397578][   T10] usb 4-1: Product: syz
[  306.401793][   T10] usb 4-1: Manufacturer: syz
[  306.407652][   T10] usb 4-1: SerialNumber: syz
[  306.429107][   T10] usb 4-1: config 0 descriptor??
[  306.446803][   T10] comedi comedi0: Wrong number of endpoints
[  306.453871][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  306.732152][   T10] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device.
[  307.170101][ T5879] usb 5-1: config 10 has an invalid interface number: 182 but max is 3
[  307.214108][ T5879] usb 5-1: config 10 has an invalid interface number: 226 but max is 3
[  307.227952][ T5879] usb 5-1: config 10 has an invalid interface number: 254 but max is 3
[  307.249590][ T5879] usb 5-1: config 10 has an invalid interface number: 190 but max is 3
[  307.264859][ T5879] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  307.727216][ T5879] usb 5-1: config 10 has no interface number 0
[  307.757794][ T5879] usb 5-1: config 10 has no interface number 1
[  307.789445][ T5879] usb 5-1: config 10 has no interface number 2
[  307.814478][ T5879] usb 5-1: config 10 has no interface number 3
[  307.834054][ T5879] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  308.060750][ T5879] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  308.072394][ T5879] usb 5-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  308.084144][ T5879] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  308.105502][ T5879] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  308.123827][ T5879] usb 5-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  309.049702][ T5876] usb 4-1: USB disconnect, device number 13
[  309.179329][ T5879] usb 5-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  309.618617][ T5879] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  309.642790][ T5879] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  309.679446][ T5879] usb 5-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  309.729393][ T5879] usb 5-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  309.762542][ T5879] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  309.941362][ T5879] usb 5-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  310.333401][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.570'.
[  310.886324][ T5879] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  310.914320][ T5879] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  310.935436][ T5879] usb 5-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  310.946060][ T5879] usb 5-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  310.972070][ T5879] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  311.024915][ T5879] usb 5-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  311.103942][ T5879] usb 5-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  311.137765][ T5879] usb 5-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  311.170809][ T5879] usb 5-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  311.226267][ T5879] usb 5-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  311.271057][ T5879] usb 5-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  311.302152][ T5879] usb 5-1: config 10 interface 182 has no altsetting 0
[  311.302182][ T5879] usb 5-1: config 10 interface 226 has no altsetting 0
[  311.302201][ T5879] usb 5-1: config 10 interface 254 has no altsetting 0
[  311.302220][ T5879] usb 5-1: config 10 interface 190 has no altsetting 0
[  311.305924][ T5879] usb 5-1: string descriptor 0 read error: -71
[  311.306076][ T5879] usb 5-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  311.306103][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.328040][ T5879] usb 5-1: can't set config #10, error -71
[  311.434621][ T5879] usb 5-1: USB disconnect, device number 13
[  311.703318][ T7974] ./cgroup: Can't lookup blockdev
[  313.243590][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  313.644808][ T5879] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  314.455095][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.470984][ T5879] usb 4-1: Product: syz
[  314.475418][ T5879] usb 4-1: Manufacturer: syz
[  314.480703][ T5879] usb 4-1: SerialNumber: syz
[  314.488345][ T5879] usb 4-1: config 0 descriptor??
[  314.531630][ T5880] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  314.598286][ T5879] comedi comedi0: Wrong number of endpoints
[  314.618877][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'.
[  314.704055][ T5879] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device.
[  314.893102][ T5880] usb 3-1: config 10 has an invalid interface number: 182 but max is 3
[  315.201800][ T5880] usb 3-1: config 10 has an invalid interface number: 226 but max is 3
[  315.318588][ T5880] usb 3-1: config 10 has an invalid interface number: 254 but max is 3
[  315.835148][ T5880] usb 3-1: config 10 has an invalid interface number: 190 but max is 3
[  315.877036][ T8014] netlink: 444 bytes leftover after parsing attributes in process `syz.4.584'.
[  316.037875][ T5880] usb 3-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  316.256183][ T5880] usb 3-1: config 10 has no interface number 0
[  316.294956][ T5880] usb 3-1: config 10 has no interface number 1
[  316.334639][ T5880] usb 3-1: config 10 has no interface number 2
[  316.565276][ T5880] usb 3-1: config 10 has no interface number 3
[  316.572494][ T5880] usb 3-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  316.584193][ T5880] usb 3-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  316.595405][ T5880] usb 3-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  316.619735][ T5880] usb 3-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  317.214859][ T5880] usb 3-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  317.227845][ T5880] usb 3-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  317.239390][ T5880] usb 3-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  317.252267][ T5880] usb 3-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  317.264868][ T5880] usb 3-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  317.451908][ T5879] usb 4-1: USB disconnect, device number 14
[  317.460845][ T5880] usb 3-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  317.500270][ T5880] usb 3-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  317.533658][ T5880] usb 3-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  317.616359][ T5880] usb 3-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  317.749708][ T5880] usb 3-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  317.770085][ T8033] block device autoloading is deprecated and will be removed.
[  317.956948][ T5880] usb 3-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  318.157415][ T5880] usb 3-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  318.309388][ T5880] usb 3-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  318.337393][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  318.444070][ T5880] usb 3-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  318.492266][ T5880] usb 3-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  318.546765][ T5880] usb 3-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  318.572576][   T10] usb 4-1: Using ep0 maxpacket: 8
[  318.592517][   T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  318.620797][ T5880] usb 3-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  318.655671][   T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.697643][ T5880] usb 3-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  318.722379][   T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.927267][ T5880] usb 3-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  319.761162][   T10] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  319.774690][ T5880] usb 3-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  319.788521][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  319.801540][ T5880] usb 3-1: config 10 interface 182 has no altsetting 0
[  320.206133][   T10] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00
[  320.215383][ T5880] usb 3-1: config 10 interface 226 has no altsetting 0
[  320.222499][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.230901][ T5880] usb 3-1: config 10 interface 254 has no altsetting 0
[  320.237795][ T5880] usb 3-1: config 10 interface 190 has no altsetting 0
[  320.250885][   T10] usb 4-1: config 0 descriptor??
[  320.260778][ T5880] usb 3-1: string descriptor 0 read error: -71
[  320.272345][ T5880] usb 3-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  320.300642][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.396507][ T5880] usb 3-1: can't set config #10, error -71
[  320.465590][ T5880] usb 3-1: USB disconnect, device number 12
[  321.687205][   T10] asus 0003:0B05:1822.0003: item fetching failed at offset 6/7
[  322.752122][   T10] asus 0003:0B05:1822.0003: Asus hid parse failed: -22
[  322.759637][   T10] asus 0003:0B05:1822.0003: probe with driver asus failed with error -22
[  322.771638][   T10] usb 4-1: USB disconnect, device number 15
[  323.554092][ T5902] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  324.093961][ T5902] usb 5-1: config 10 has an invalid interface number: 182 but max is 3
[  324.279243][ T5902] usb 5-1: config 10 has an invalid interface number: 226 but max is 3
[  324.312833][ T5902] usb 5-1: config 10 has an invalid interface number: 254 but max is 3
[  324.865949][ T5902] usb 5-1: config 10 has an invalid interface number: 190 but max is 3
[  324.900838][ T5902] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  324.927146][ T5902] usb 5-1: config 10 has no interface number 0
[  324.956950][ T5902] usb 5-1: config 10 has no interface number 1
[  324.985023][ T5902] usb 5-1: config 10 has no interface number 2
[  325.102244][ T5902] usb 5-1: config 10 has no interface number 3
[  325.141363][ T5902] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  325.354180][ T5902] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  326.380134][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  326.393491][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  326.925079][ T5902] usb 5-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  326.942995][ T5902] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  326.955263][ T5902] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  326.966734][ T5902] usb 5-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  326.978124][ T5902] usb 5-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  326.990563][ T5902] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  327.002504][ T5902] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  327.014151][ T5902] usb 5-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  327.033339][ T5902] usb 5-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  327.044947][ T5902] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  327.055959][ T5902] usb 5-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  327.068979][ T5902] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  327.077039][ T8097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.605'.
[  327.080191][ T5902] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  327.099982][ T5902] usb 5-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  327.110508][ T5902] usb 5-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  327.122271][ T5902] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  327.134001][ T5902] usb 5-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  327.237226][ T5902] usb 5-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  327.385403][ T5902] usb 5-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  327.501010][ T5902] usb 5-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  327.601710][ T5902] usb 5-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  327.693134][ T5902] usb 5-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  327.804699][ T5902] usb 5-1: config 10 interface 182 has no altsetting 0
[  327.841179][ T5902] usb 5-1: config 10 interface 226 has no altsetting 0
[  327.864027][ T5902] usb 5-1: config 10 interface 254 has no altsetting 0
[  327.885676][ T5902] usb 5-1: config 10 interface 190 has no altsetting 0
[  327.910858][ T5902] usb 5-1: string descriptor 0 read error: -71
[  327.933052][ T8109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.612'.
[  327.956169][ T5902] usb 5-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  327.977077][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.998673][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'.
[  328.028860][ T5902] usb 5-1: can't set config #10, error -71
[  328.041161][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'.
[  328.050776][   T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  328.058252][ T5902] usb 5-1: USB disconnect, device number 14
[  328.278277][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  328.292310][   T10] usb 3-1: config 95 has an invalid interface number: 1 but max is 0
[  328.300469][   T10] usb 3-1: config 95 has no interface number 0
[  328.327005][   T10] usb 3-1: config 95 interface 1 has no altsetting 0
[  328.453496][   T10] usb 3-1: string descriptor 0 read error: -22
[  328.467234][   T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  328.511673][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.581277][ T8113] team0 (unregistering): Port device team_slave_0 removed
[  328.611062][ T5140] Bluetooth: hci4: command 0x0406 tx timeout
[  328.895119][ T8113] team0 (unregistering): Port device team_slave_1 removed
[  329.004295][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.171222][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.541535][   T10] usb 3-1: USB disconnect, device number 13
[  329.671833][    C0] vkms_vblank_simulate: vblank timer overrun
[  330.813351][ T5880] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  331.040466][ T5880] usb 4-1: config 10 has an invalid interface number: 182 but max is 3
[  331.070286][ T5880] usb 4-1: config 10 has an invalid interface number: 226 but max is 3
[  331.101367][ T5880] usb 4-1: config 10 has an invalid interface number: 254 but max is 3
[  331.120689][ T5880] usb 4-1: config 10 has an invalid interface number: 190 but max is 3
[  331.137778][ T5880] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  331.151951][ T5880] usb 4-1: config 10 has no interface number 0
[  331.160570][ T8151] bridge0: port 3(netdevsim2) entered blocking state
[  331.161128][ T5880] usb 4-1: config 10 has no interface number 1
[  331.167874][ T8151] bridge0: port 3(netdevsim2) entered disabled state
[  331.177847][ T5880] usb 4-1: config 10 has no interface number 2
[  331.180735][ T8151] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  331.186763][ T5880] usb 4-1: config 10 has no interface number 3
[  331.196190][ T8151] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  331.207285][ T5880] usb 4-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  331.208673][ T8151] bridge0: port 3(netdevsim2) entered blocking state
[  331.226014][ T8151] bridge0: port 3(netdevsim2) entered forwarding state
[  331.234570][ T5880] usb 4-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  331.294820][ T5877] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  331.550242][ T5877] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  331.642502][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.770601][ T5877] usb 3-1: Product: syz
[  331.918865][ T5877] usb 3-1: Manufacturer: syz
[  331.946130][ T5877] usb 3-1: SerialNumber: syz
[  332.033007][ T5877] usb 3-1: config 0 descriptor??
[  332.066866][ T5880] usb 4-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  332.077761][ T5880] usb 4-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  332.090864][ T5880] usb 4-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  332.101283][ T5877] comedi comedi0: Wrong number of endpoints
[  332.109142][ T5880] usb 4-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  332.146498][ T5877] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device.
[  332.156955][ T5880] usb 4-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  332.182020][ T5880] usb 4-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  332.213769][ T5880] usb 4-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  332.236100][ T5880] usb 4-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  332.274257][ T5880] usb 4-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  332.531359][ T5880] usb 4-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  332.556476][ T5880] usb 4-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  333.629268][ T5880] usb 4-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  334.073057][ T5880] usb 4-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  334.086044][ T5880] usb 4-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  334.098614][ T5880] usb 4-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  334.111703][ T5880] usb 4-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  334.124672][ T5880] usb 4-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  334.179647][ T5880] usb 4-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  334.237551][ T5880] usb 4-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  334.282442][ T5880] usb 4-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  334.350312][ T5880] usb 4-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  335.383395][ T5878] usb 3-1: USB disconnect, device number 14
[  335.395305][ T5880] usb 4-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  335.426457][ T8170] trusted_key: syz.0.628 sent an empty control message without MSG_MORE.
[  335.509751][ T8170] macsec0: entered promiscuous mode
[  335.561639][ T8168] macsec0: left promiscuous mode
[  335.566851][ T5880] usb 4-1: config 10 interface 182 has no altsetting 0
[  335.575454][ T5880] usb 4-1: config 10 interface 226 has no altsetting 0
[  335.600466][ T5880] usb 4-1: config 10 interface 254 has no altsetting 0
[  335.613803][ T5880] usb 4-1: config 10 interface 190 has no altsetting 0
[  335.628873][ T5880] usb 4-1: string descriptor 0 read error: -71
[  336.148284][ T5880] usb 4-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  336.157636][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.229875][ T5880] usb 4-1: can't set config #10, error -71
[  336.263096][ T5880] usb 4-1: USB disconnect, device number 16
[  336.303226][ T8187] netlink: 'syz.0.633': attribute type 1 has an invalid length.
[  336.462410][ T8187] 8021q: adding VLAN 0 to HW filter on device bond1
[  337.959434][ T8189] geneve2: entered promiscuous mode
[  337.964911][ T8189] geneve2: entered allmulticast mode
[  338.103101][ T8189] bond1: (slave geneve2): making interface the new active one
[  338.120928][ T8189] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  338.292491][ T8198] 
��: renamed from syzkaller0
[  339.804604][ T8201] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  339.924959][ T5877] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  340.735666][ T5877] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  340.761563][ T8201] usb 2-1: config 10 has an invalid interface number: 182 but max is 3
[  340.776883][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.784951][ T5877] usb 3-1: Product: syz
[  340.819727][ T5877] usb 3-1: Manufacturer: syz
[  340.819894][ T8201] usb 2-1: config 10 has an invalid interface number: 226 but max is 3
[  340.833145][ T5877] usb 3-1: SerialNumber: syz
[  340.836916][ T5877] usb 3-1: config 0 descriptor??
[  340.881013][ T8201] usb 2-1: config 10 has an invalid interface number: 254 but max is 3
[  340.902200][ T5877] comedi comedi0: Wrong number of endpoints
[  340.902465][ T8201] usb 2-1: config 10 has an invalid interface number: 190 but max is 3
[  340.919733][ T5877] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device.
[  340.973353][ T8201] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  340.998013][ T8201] usb 2-1: config 10 has no interface number 0
[  341.017478][ T8201] usb 2-1: config 10 has no interface number 1
[  341.039569][ T8201] usb 2-1: config 10 has no interface number 2
[  341.053543][ T8201] usb 2-1: config 10 has no interface number 3
[  341.069039][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  341.099617][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  341.133358][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  341.145052][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  341.158824][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  341.171014][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  341.193275][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  341.246173][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  341.302290][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  341.385869][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  342.198462][ T8201] usb 2-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  342.210395][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  342.241464][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  342.286593][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  342.329025][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  342.351002][ T8201] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  342.375791][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  342.408929][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  342.423141][ T8201] usb 2-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  342.455508][ T8201] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  342.465617][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  342.485034][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  342.505032][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  342.742036][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  342.755863][ T8201] usb 2-1: config 10 interface 182 has no altsetting 0
[  342.762846][ T8201] usb 2-1: config 10 interface 226 has no altsetting 0
[  342.769989][ T8201] usb 2-1: config 10 interface 254 has no altsetting 0
[  342.799744][ T8201] usb 2-1: config 10 interface 190 has no altsetting 0
[  342.838805][ T8201] usb 2-1: string descriptor 0 read error: -71
[  342.868006][ T8201] usb 2-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  342.893958][ T8201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.929357][ T8201] usb 2-1: can't set config #10, error -71
[  342.985818][ T8201] usb 2-1: USB disconnect, device number 13
[  343.396174][ T8201] usb 3-1: USB disconnect, device number 15
[  346.636150][ T5879] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  346.710391][ T8201] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  347.682587][ T5879] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  347.691797][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.700596][ T5879] usb 5-1: Product: syz
[  347.704964][ T5879] usb 5-1: Manufacturer: syz
[  347.709618][ T5879] usb 5-1: SerialNumber: syz
[  347.720157][ T8201] usb 2-1: config 10 has an invalid interface number: 182 but max is 3
[  347.729029][ T8201] usb 2-1: config 10 has an invalid interface number: 226 but max is 3
[  347.738574][ T8201] usb 2-1: config 10 has an invalid interface number: 254 but max is 3
[  347.747101][ T8201] usb 2-1: config 10 has an invalid interface number: 190 but max is 3
[  347.755651][ T8201] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  347.768653][ T5879] usb 5-1: config 0 descriptor??
[  347.773933][ T8201] usb 2-1: config 10 has no interface number 0
[  347.788219][ T8201] usb 2-1: config 10 has no interface number 1
[  347.795225][ T5879] comedi comedi0: Wrong number of endpoints
[  347.801270][ T5879] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device.
[  347.809265][ T8201] usb 2-1: config 10 has no interface number 2
[  347.818031][ T8201] usb 2-1: config 10 has no interface number 3
[  347.884710][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  347.960718][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  347.974885][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  348.555607][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  348.567493][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  348.579489][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  348.601400][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  348.648553][ T8321] netlink: 6 bytes leftover after parsing attributes in process `syz.2.669'.
[  348.685384][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  349.685163][ T8201] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  349.715921][ T8201] usb 2-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  349.758632][ T8201] usb 2-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  349.796621][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  349.827650][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  349.848648][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  349.868798][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  349.884082][ T8201] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  349.907621][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  349.934549][ T8201] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  349.961682][ T8201] usb 2-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  350.006311][ T8201] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  350.038332][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  350.066716][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  350.114176][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  350.181240][ T8201] usb 2-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  350.195401][ T8201] usb 2-1: config 10 interface 182 has no altsetting 0
[  350.202448][ T8201] usb 2-1: config 10 interface 226 has no altsetting 0
[  350.884553][ T8201] usb 2-1: config 10 interface 254 has no altsetting 0
[  350.891562][ T8201] usb 2-1: config 10 interface 190 has no altsetting 0
[  351.028709][   T10] usb 5-1: USB disconnect, device number 15
[  351.043082][ T8201] usb 2-1: string descriptor 0 read error: -71
[  351.049669][ T8201] usb 2-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  351.064088][ T8201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.094483][ T8201] usb 2-1: can't set config #10, error -71
[  351.102819][ T8201] usb 2-1: USB disconnect, device number 14
[  352.435737][ T8363] netlink: 6 bytes leftover after parsing attributes in process `syz.3.680'.
[  353.200877][ T8201] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  353.445441][ T8201] usb 2-1: Using ep0 maxpacket: 16
[  353.498246][ T8201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.522661][ T8201] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  353.582079][ T8201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.623475][ T8201] usb 2-1: config 0 descriptor??
[  353.688537][ T8377] FAULT_INJECTION: forcing a failure.
[  353.688537][ T8377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.719698][ T8377] CPU: 0 UID: 0 PID: 8377 Comm: syz.4.683 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  353.719728][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  353.719749][ T8377] Call Trace:
[  353.719759][ T8377]  <TASK>
[  353.719768][ T8377]  dump_stack_lvl+0x241/0x360
[  353.719808][ T8377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.719838][ T8377]  ? __pfx__printk+0x10/0x10
[  353.719882][ T8377]  should_fail_ex+0x424/0x570
[  353.719912][ T8377]  _copy_from_user+0x2d/0xb0
[  353.719944][ T8377]  kstrtouint_from_user+0xce/0x1a0
[  353.719974][ T8377]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  353.720005][ T8377]  ? __lock_acquire+0xad5/0xd80
[  353.720038][ T8377]  proc_fail_nth_write+0xac/0x2d0
[  353.720078][ T8377]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  353.720106][ T8377]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  353.720139][ T8377]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  353.720167][ T8377]  vfs_write+0x2bc/0xd10
[  353.720203][ T8377]  ? fdget_pos+0x247/0x310
[  353.720242][ T8377]  ? __pfx_vfs_write+0x10/0x10
[  353.720271][ T8377]  ? __fget_files+0x2a/0x420
[  353.720294][ T8377]  ? __fget_files+0x39d/0x420
[  353.720313][ T8377]  ? __fget_files+0x2a/0x420
[  353.720345][ T8377]  ksys_write+0x19d/0x2d0
[  353.720374][ T8377]  ? __pfx_ksys_write+0x10/0x10
[  353.720407][ T8377]  ? do_syscall_64+0xb6/0x230
[  353.720435][ T8377]  do_syscall_64+0xf3/0x230
[  353.720459][ T8377]  ? clear_bhb_loop+0x45/0xa0
[  353.720482][ T8377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.720507][ T8377] RIP: 0033:0x7fe68af8bc1f
[  353.720526][ T8377] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  353.720548][ T8377] RSP: 002b:00007fe688df6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  353.720587][ T8377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe68af8bc1f
[  353.720601][ T8377] RDX: 0000000000000001 RSI: 00007fe688df60a0 RDI: 0000000000000004
[  353.720614][ T8377] RBP: 00007fe688df6090 R08: 0000000000000000 R09: 0000000000000000
[  353.720626][ T8377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  353.720638][ T8377] R13: 0000000000000000 R14: 00007fe68b1a6080 R15: 00007ffce6e5a238
[  353.720670][ T8377]  </TASK>
[  353.942302][    C0] vkms_vblank_simulate: vblank timer overrun
[  354.180258][ T8201] usbhid 2-1:0.0: can't add hid device: -71
[  354.187083][ T8201] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  354.250488][ T8201] usb 2-1: USB disconnect, device number 15
[  354.281417][   T30] audit: type=1326 audit(1744642714.789:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.309739][   T30] audit: type=1326 audit(1744642714.789:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.348274][   T30] audit: type=1326 audit(1744642714.807:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.406141][   T30] audit: type=1326 audit(1744642714.807:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.430971][   T30] audit: type=1326 audit(1744642714.807:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.456556][   T30] audit: type=1326 audit(1744642714.807:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.487960][   T30] audit: type=1326 audit(1744642714.807:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.511943][   T30] audit: type=1326 audit(1744642714.807:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.535116][   T30] audit: type=1326 audit(1744642714.826:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.558211][   T30] audit: type=1326 audit(1744642714.826:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881fb8d169 code=0x7ffc0000
[  354.728374][ T5902] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  354.893197][ T5902] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  354.902834][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.913451][ T5902] usb 5-1: Product: syz
[  354.917747][ T5902] usb 5-1: Manufacturer: syz
[  354.923844][ T5902] usb 5-1: SerialNumber: syz
[  354.961922][ T5902] usb 5-1: config 0 descriptor??
[  354.982555][ T5902] comedi comedi0: Wrong number of endpoints
[  354.989037][ T5902] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device.
[  358.990039][ T8415] netlink: 104 bytes leftover after parsing attributes in process `syz.0.693'.
[  359.453741][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'.
[  359.540987][ T5902] usb 5-1: USB disconnect, device number 16
[  359.661451][    T9] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  359.762764][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'.
[  359.848478][    T9] usb 1-1: USB disconnect, device number 19
[  360.004934][ T8418] netlink: 6 bytes leftover after parsing attributes in process `syz.2.694'.
[  360.230752][ T8416] overlayfs: missing 'lowerdir'
[  360.282383][ T8422] netlink: 'syz.1.697': attribute type 39 has an invalid length.
[  360.339174][ T8422] veth0_macvtap: left promiscuous mode
[  360.576428][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  360.760998][   T10] usb 4-1: too many configurations: 182, using maximum allowed: 8
[  360.820933][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  360.837692][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.847697][   T10] usb 4-1: Product: syz
[  360.852078][   T10] usb 4-1: Manufacturer: syz
[  360.858179][   T10] usb 4-1: SerialNumber: syz
[  361.804115][   T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  361.850377][ T5880] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  362.104888][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  362.297366][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  362.323368][ T5877] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  362.332812][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.411672][ T5877] usb 5-1: Product: syz
[  362.420654][ T5877] usb 5-1: Manufacturer: syz
[  362.433007][ T5877] usb 5-1: SerialNumber: syz
[  362.452008][ T5877] usb 5-1: config 0 descriptor??
[  362.481473][ T5877] comedi comedi0: Wrong number of endpoints
[  362.495486][ T5877] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device.
[  362.509017][ T5876] usb 2-1: config 10 has an invalid interface number: 182 but max is 3
[  362.526580][ T5876] usb 2-1: config 10 has an invalid interface number: 226 but max is 3
[  362.559711][ T5876] usb 2-1: config 10 has an invalid interface number: 254 but max is 3
[  362.585433][ T5876] usb 2-1: config 10 has an invalid interface number: 190 but max is 3
[  362.607711][   T10] usb 4-1: USB disconnect, device number 17
[  362.611806][ T5876] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  362.853259][ T5876] usb 2-1: config 10 has no interface number 0
[  362.873498][ T5876] usb 2-1: config 10 has no interface number 1
[  362.903173][ T5876] usb 2-1: config 10 has no interface number 2
[  362.923931][ T5876] usb 2-1: config 10 has no interface number 3
[  362.963751][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  362.997431][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  363.030654][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  363.065713][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  363.090361][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  363.114161][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  363.126099][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  363.138731][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  363.159511][ T5876] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  363.194622][ T5876] usb 2-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  363.232141][ T5876] usb 2-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  363.237763][ T5880] usb 4-1: Service connection timeout for: 256
[  363.268161][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  363.269818][ T5880] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  363.284530][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  363.309425][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  363.315423][ T5880] ath9k_htc: Failed to initialize the device
[  363.327480][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  363.343384][ T5876] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  363.359139][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  363.376770][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[  363.392528][ T5876] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  363.436380][ T5876] usb 2-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  363.460457][ T5876] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  363.474240][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  363.489456][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  363.501881][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  363.517745][ T5876] usb 2-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  363.742993][ T5876] usb 2-1: config 10 interface 182 has no altsetting 0
[  363.750771][ T5876] usb 2-1: config 10 interface 226 has no altsetting 0
[  363.757983][ T5876] usb 2-1: config 10 interface 254 has no altsetting 0
[  363.766148][ T5876] usb 2-1: config 10 interface 190 has no altsetting 0
[  363.775727][ T5876] usb 2-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  363.785907][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.796348][ T5876] usb 2-1: Product: ࠒ
[  363.800551][ T5876] usb 2-1: Manufacturer: Г
[  363.805675][ T5876] usb 2-1: SerialNumber: 㿪ᰚ䳃㆗ᚱ᫵쳳矦뒪䍔䝅꧀䙞⩟Ɽ專㶱㓬묠ꞷᠺ⾭쬖ϫ枽ꍨ寛츉䧻䘼͒癚リ᷌徦ꍮ맹뿨酞뱞䝌쏵ᏺᐬ헣⺲⯑鵹ꃃˑᙹᎿ묾䛾ូꨳ㨫葨꿹
[  363.826972][    C1] vkms_vblank_simulate: vblank timer overrun
[  365.650116][ T8478] FAULT_INJECTION: forcing a failure.
[  365.650116][ T8478] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.663289][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.0.708 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  365.663316][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  365.663330][ T8478] Call Trace:
[  365.663338][ T8478]  <TASK>
[  365.663347][ T8478]  dump_stack_lvl+0x241/0x360
[  365.663383][ T8478]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.663412][ T8478]  ? __pfx__printk+0x10/0x10
[  365.663452][ T8478]  should_fail_ex+0x424/0x570
[  365.663480][ T8478]  _copy_to_user+0x31/0xb0
[  365.663513][ T8478]  copy_siginfo_to_user+0x24/0xc0
[  365.663537][ T8478]  x64_setup_rt_frame+0x7eb/0xda0
[  365.663592][ T8478]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  365.663634][ T8478]  arch_do_signal_or_restart+0x428/0x840
[  365.663669][ T8478]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  365.663699][ T8478]  ? __se_sys_ppoll+0x2b9/0x330
[  365.663734][ T8478]  ? syscall_exit_to_user_mode+0xa3/0x340
[  365.663764][ T8478]  syscall_exit_to_user_mode+0xce/0x340
[  365.663794][ T8478]  do_syscall_64+0x100/0x230
[  365.663821][ T8478]  ? clear_bhb_loop+0x45/0xa0
[  365.663845][ T8478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.663866][ T8478] RIP: 0033:0x7f51fb78d169
[  365.663885][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.663902][ T8478] RSP: 002b:00007f51fc60c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  365.663931][ T8478] RAX: 0000000000000002 RBX: 00007f51fb9a6080 RCX: 00007f51fb78d169
[  365.663945][ T8478] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  365.663959][ T8478] RBP: 00007f51fc60c090 R08: 0000000000000000 R09: 0000000000000000
[  365.663972][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.663984][ T8478] R13: 0000000000000000 R14: 00007f51fb9a6080 R15: 00007ffdb508e318
[  365.664016][ T8478]  </TASK>
[  367.653326][ T5876] ftdi_sio 2-1:10.182: FTDI USB Serial Device converter detected
[  367.662322][ T5876] ftdi_sio ttyUSB0: unknown device type: 0x3b88
[  367.677473][ T5876] ftdi_sio 2-1:10.226: FTDI USB Serial Device converter detected
[  367.686399][ T5876] ftdi_sio ttyUSB1: unknown device type: 0x3b88
[  368.001509][ T5877] usb 5-1: USB disconnect, device number 17
[  368.039568][ T5876] ftdi_sio 2-1:10.254: FTDI USB Serial Device converter detected
[  368.094734][ T5876] ftdi_sio ttyUSB2: unknown device type: 0x3b88
[  368.122583][ T5876] ftdi_sio 2-1:10.190: FTDI USB Serial Device converter detected
[  368.168121][ T5876] ftdi_sio ttyUSB3: unknown device type: 0x3b88
[  368.204111][ T5876] usb 2-1: USB disconnect, device number 16
[  368.247724][ T5838] udevd[5838]: failed to send result of seq 12671 to main daemon: Connection refused
[  368.247802][ T5876] ftdi_sio 2-1:10.182: device disconnected
[  368.459733][ T5876] ftdi_sio 2-1:10.226: device disconnected
[  368.470819][ T5876] ftdi_sio 2-1:10.254: device disconnected
[  368.478502][ T5876] ftdi_sio 2-1:10.190: device disconnected
[  369.384569][ T8488] capability: warning: `syz.4.714' uses 32-bit capabilities (legacy support in use)
[  369.500954][ T5877] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  370.550174][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  370.650250][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  370.661901][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  370.758131][ T5877] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  370.767834][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.778784][ T5877] usb 4-1: Product: syz
[  370.782988][ T5877] usb 4-1: Manufacturer: syz
[  370.787958][ T5877] usb 4-1: SerialNumber: syz
[  370.795526][ T5877] usb 4-1: config 0 descriptor??
[  372.656235][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  372.678007][ T5880] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  374.050840][ T5880] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  374.316715][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.325811][   T10] usb 2-1: config 10 has an invalid interface number: 182 but max is 3
[  374.338186][   T10] usb 2-1: config 10 has an invalid interface number: 226 but max is 3
[  375.061617][ T5880] usb 3-1: Product: syz
[  375.072537][ T5880] usb 3-1: Manufacturer: syz
[  375.077202][ T5880] usb 3-1: SerialNumber: syz
[  375.096447][   T10] usb 2-1: config 10 has an invalid interface number: 254 but max is 3
[  375.140617][   T10] usb 2-1: config 10 has an invalid interface number: 190 but max is 3
[  375.154600][   T10] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  375.165567][   T10] usb 2-1: config 10 has no interface number 0
[  375.181651][ T5880] usb 3-1: config 0 descriptor??
[  375.212801][ T5880] comedi comedi0: Wrong number of endpoints
[  375.224339][   T10] usb 2-1: config 10 has no interface number 1
[  375.237477][ T8543] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  375.246826][ T8543] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  375.275955][ T5880] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device.
[  375.284139][   T10] usb 2-1: config 10 has no interface number 2
[  375.316160][   T10] usb 2-1: config 10 has no interface number 3
[  375.337579][   T10] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  375.366681][   T10] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  375.400406][   T10] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  375.416337][   T10] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  375.453473][   T10] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  376.340404][ T8546] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  376.347678][   T10] usb 2-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  376.363304][ T8546] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  376.393818][   T10] usb 2-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  376.421486][   T10] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  376.424309][ T8553] loop6: detected capacity change from 0 to 63
[  376.453862][ T8546] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  376.459936][ T8546] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  376.468552][   T10] usb 2-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  376.512929][   T10] usb 2-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  376.988343][ T8546] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  377.498050][ T5880] usb 3-1: USB disconnect, device number 16
[  377.573197][ T8546] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  377.657964][ T8546] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  378.038487][   T10] usb 2-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  378.049758][   T10] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  378.060638][   T10] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  378.071961][   T10] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  378.083132][   T10] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  378.094263][   T10] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  378.104983][   T10] usb 2-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  378.116061][   T10] usb 2-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  378.136173][   T10] usb 2-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  378.151427][   T10] usb 2-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  378.383639][   T10] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  378.395343][   T10] usb 2-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  378.412946][ T8546] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  378.424156][ T8546] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  378.434580][ T8546] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  378.442177][ T8546] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  378.456648][   T10] usb 2-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  378.558882][ T5140] Bluetooth: hci0: command 0x0406 tx timeout
[  378.632278][ T5140] Bluetooth: hci1: command 0x0406 tx timeout
[  379.545432][   T10] usb 2-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  379.753872][   T10] usb 2-1: config 10 interface 182 has no altsetting 0
[  379.794771][   T10] usb 2-1: config 10 interface 226 has no altsetting 0
[  379.819165][ T5140] Bluetooth: hci2: command 0x0406 tx timeout
[  379.840406][   T10] usb 2-1: config 10 interface 254 has no altsetting 0
[  379.848611][   T10] usb 2-1: config 10 interface 190 has no altsetting 0
[  379.860812][   T10] usb 2-1: string descriptor 0 read error: -71
[  379.872557][   T10] usb 2-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  379.903715][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.956343][ T8572] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  380.009731][   T10] usb 2-1: can't set config #10, error -71
[  380.093549][   T10] usb 2-1: USB disconnect, device number 17
[  380.409036][ T5876] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  380.589715][ T5140] Bluetooth: hci4: command 0x0406 tx timeout
[  380.589779][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  380.604520][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  380.621119][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  380.642567][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  380.671264][ T5876] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  380.681194][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.692083][ T5876] usb 1-1: Product: syz
[  380.705173][ T5876] usb 1-1: Manufacturer: syz
[  380.710339][ T5876] usb 1-1: SerialNumber: syz
[  380.760348][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  380.811198][ T5876] usb 1-1: config 0 descriptor??
[  380.867197][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  381.649008][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  381.934303][   T10] usb 5-1: config 10 has an invalid interface number: 182 but max is 3
[  382.009142][   T10] usb 5-1: config 10 has an invalid interface number: 226 but max is 3
[  382.031204][   T10] usb 5-1: config 10 has an invalid interface number: 254 but max is 3
[  382.039834][   T10] usb 5-1: config 10 has an invalid interface number: 190 but max is 3
[  382.052450][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  382.059123][   T10] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  382.082615][   T10] usb 5-1: config 10 has no interface number 0
[  382.110928][   T10] usb 5-1: config 10 has no interface number 1
[  382.149326][   T10] usb 5-1: config 10 has no interface number 2
[  382.189036][   T10] usb 5-1: config 10 has no interface number 3
[  382.235149][   T10] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  382.317181][   T10] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  382.372222][   T10] usb 5-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  382.402476][   T10] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  382.453429][   T10] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  382.541594][   T10] usb 5-1: config 10 interface 182 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  382.689225][   T10] usb 5-1: config 10 interface 182 altsetting 2 has an endpoint descriptor with address 0xE9, changing to 0x89
[  382.719659][   T10] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x89 has an invalid bInterval 121, changing to 7
[  382.748988][   T10] usb 5-1: config 10 interface 182 altsetting 2 endpoint 0x89 has invalid maxpacket 10136, setting to 1024
[  382.786724][   T10] usb 5-1: config 10 interface 182 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  382.816136][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  382.822249][ T5140] Bluetooth: hci4: command 0x0406 tx timeout
[  382.860870][   T10] usb 5-1: config 10 interface 226 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  383.029531][   T10] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  383.040485][   T10] usb 5-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  383.053484][   T10] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  383.064421][   T10] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  383.075579][ T5140] Bluetooth: hci1: command 0x0406 tx timeout
[  383.082246][   T10] usb 5-1: config 10 interface 254 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1024
[  383.092542][   T10] usb 5-1: config 10 interface 254 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  383.136209][   T10] usb 5-1: config 10 interface 254 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  383.158490][ T5877] iguanair 4-1:0.0: failed to get version
[  383.173683][ T5877] iguanair 4-1:0.0: probe with driver iguanair failed with error -110
[  383.229164][   T10] usb 5-1: config 10 interface 254 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  383.289535][ T5877] usb 4-1: USB disconnect, device number 18
[  383.293320][   T10] usb 5-1: config 10 interface 254 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 8
[  383.351094][   T10] usb 5-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  383.421891][   T10] usb 5-1: config 10 interface 190 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  383.490383][   T10] usb 5-1: config 10 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  383.541036][   T10] usb 5-1: config 10 interface 190 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  384.480163][   T10] usb 5-1: config 10 interface 182 has no altsetting 0
[  384.757720][   T10] usb 5-1: config 10 interface 226 has no altsetting 0
[  384.784804][   T10] usb 5-1: config 10 interface 254 has no altsetting 0
[  384.815215][   T10] usb 5-1: config 10 interface 190 has no altsetting 0
[  384.862959][   T10] usb 5-1: string descriptor 0 read error: -71
[  384.893185][   T10] usb 5-1: New USB device found, idVendor=0403, idProduct=ff39, bcdDevice=3b.88
[  384.970656][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.014341][   T10] usb 5-1: can't set config #10, error -71
[  385.061140][   T10] usb 5-1: USB disconnect, device number 18
[  385.129891][ T8617] vlan2: entered promiscuous mode
[  385.157200][ T8617] bridge0: entered promiscuous mode
[  385.175296][ T8617] vlan2: entered allmulticast mode
[  385.234737][ T8617] bridge0: entered allmulticast mode
[  385.540021][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.750'.
[  386.082307][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.752'.
[  386.468806][ T8638] netlink: 48 bytes leftover after parsing attributes in process `syz.0.753'.
[  389.064088][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  389.671902][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  389.792114][ T8671] FAULT_INJECTION: forcing a failure.
[  389.792114][ T8671] name failslab, interval 1, probability 0, space 0, times 0
[  389.805862][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.4.759 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  389.805892][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  389.805905][ T8671] Call Trace:
[  389.805914][ T8671]  <TASK>
[  389.805923][ T8671]  dump_stack_lvl+0x241/0x360
[  389.805964][ T8671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.805995][ T8671]  ? __pfx__printk+0x10/0x10
[  389.806027][ T8671]  ? __pfx___might_resched+0x10/0x10
[  389.806055][ T8671]  should_fail_ex+0x424/0x570
[  389.806083][ T8671]  should_failslab+0xac/0x100
[  389.806107][ T8671]  kmem_cache_alloc_noprof+0x78/0x390
[  389.806128][ T8671]  ? skb_clone+0x20c/0x390
[  389.806157][ T8671]  skb_clone+0x20c/0x390
[  389.806180][ T8671]  pfkey_sendmsg+0x48d/0x1140
[  389.806209][ T8671]  ? smack_socket_sendmsg+0x184/0x580
[  389.806237][ T8671]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  389.806279][ T8671]  ? __import_iovec+0x585/0x830
[  389.806321][ T8671]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  389.806342][ T8671]  __sock_sendmsg+0x221/0x270
[  389.806373][ T8671]  ____sys_sendmsg+0x523/0x860
[  389.806399][ T8671]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.806416][ T8671]  ? __fget_files+0x2a/0x420
[  389.806439][ T8671]  ? __fget_files+0x2a/0x420
[  389.806466][ T8671]  __sys_sendmmsg+0x3a0/0x7b0
[  389.806501][ T8671]  ? __pfx___sys_sendmmsg+0x10/0x10
[  389.806562][ T8671]  ? rcu_read_lock_any_held+0xbb/0x160
[  389.806586][ T8671]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  389.806610][ T8671]  ? vfs_write+0xb29/0xd10
[  389.806649][ T8671]  ? ksys_write+0x24e/0x2d0
[  389.806678][ T8671]  ? __mutex_unlock_slowpath+0x229/0x800
[  389.806740][ T8671]  ? ksys_write+0x275/0x2d0
[  389.806775][ T8671]  __x64_sys_sendmmsg+0xa0/0xb0
[  389.806795][ T8671]  do_syscall_64+0xf3/0x230
[  389.806817][ T8671]  ? clear_bhb_loop+0x45/0xa0
[  389.806838][ T8671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.806854][ T8671] RIP: 0033:0x7fe68af8d169
[  389.806874][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.806892][ T8671] RSP: 002b:00007fe688df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  389.806915][ T8671] RAX: ffffffffffffffda RBX: 00007fe68b1a6080 RCX: 00007fe68af8d169
[  389.806930][ T8671] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000008
[  389.806943][ T8671] RBP: 00007fe688df6090 R08: 0000000000000000 R09: 0000000000000000
[  389.806954][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.806964][ T8671] R13: 0000000000000000 R14: 00007fe68b1a6080 R15: 00007ffce6e5a238
[  389.806989][ T8671]  </TASK>
[  390.094884][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  390.106553][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  390.328251][   T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  390.337388][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.346297][   T10] usb 4-1: Product: syz
[  390.357233][   T10] usb 4-1: Manufacturer: syz
[  390.371332][   T10] usb 4-1: SerialNumber: syz
[  390.798610][   T10] usb 4-1: config 0 descriptor??
[  390.952774][   T10] usb 4-1: can't set config #0, error -71
[  390.991006][   T10] usb 4-1: USB disconnect, device number 19
[  392.055637][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  392.062333][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  392.070835][ T5876] iguanair 1-1:0.0: failed to get version
[  392.119385][    C1] iguanair 1-1:0.0: failed to resubmit urb: -1
[  392.142384][ T5876] iguanair 1-1:0.0: probe with driver iguanair failed with error -110
[  392.473482][ T5876] usb 1-1: USB disconnect, device number 20
[  392.912195][ T8695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.978443][ T5902] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  395.182714][ T5902] usb 4-1: Using ep0 maxpacket: 16
[  395.203641][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  395.226619][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  395.255930][ T5902] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  395.274776][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.300530][ T5902] usb 4-1: Product: syz
[  395.311131][ T5902] usb 4-1: Manufacturer: syz
[  395.319317][ T5902] usb 4-1: SerialNumber: syz
[  395.332265][ T5902] usb 4-1: config 0 descriptor??
[  395.345083][ T5902] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  395.368029][ T8737] netlink: 6 bytes leftover after parsing attributes in process `syz.4.774'.
[  395.382340][ T5902] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  395.491777][ T5822] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  395.699096][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  395.736961][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  395.760161][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  395.795840][ T5822] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  395.806915][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.816013][ T5822] usb 3-1: Product: syz
[  395.820351][ T5822] usb 3-1: Manufacturer: syz
[  395.825232][ T5822] usb 3-1: SerialNumber: syz
[  395.833827][ T5822] usb 3-1: config 0 descriptor??
[  396.062179][ T5902] em28xx 4-1:0.0: unknown em28xx chip ID (12)
[  396.277237][ T5902] em28xx 4-1:0.0: Config register raw data: 0x19
[  396.759246][ T5902] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  396.789104][ T5902] em28xx 4-1:0.0: No AC97 audio processor
[  396.843371][ T5902] usb 4-1: USB disconnect, device number 20
[  396.889598][ T5902] em28xx 4-1:0.0: Disconnecting em28xx
[  396.926321][ T5902] em28xx 4-1:0.0: Freeing device
[  398.581418][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  398.816974][   T10] usb 4-1: Using ep0 maxpacket: 16
[  398.858384][   T10] usb 4-1: config index 0 descriptor too short (expected 69, got 36)
[  398.922398][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  398.984536][   T10] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  399.028444][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.610975][   T10] usb 4-1: Product: syz
[  399.615205][   T10] usb 4-1: Manufacturer: syz
[  399.636279][   T10] usb 4-1: SerialNumber: syz
[  399.666494][   T10] usb 4-1: config 0 descriptor??
[  399.704092][   T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  400.285267][   T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  400.299392][   T10] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  401.656537][ T8201] usb 4-1: USB disconnect, device number 21
[  401.847099][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  402.625439][   T10] usb 1-1: Using ep0 maxpacket: 8
[  402.760710][   T10] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[  402.782428][   T10] usb 1-1: config 0 has no interface number 0
[  402.788586][   T10] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  402.846182][   T10] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  403.039338][   T10] usb 1-1: config 0 interface 48 has no altsetting 0
[  403.219819][   T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  403.375756][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.601969][   T10] usb 1-1: config 0 descriptor??
[  404.607660][   T10] usb 1-1: string descriptor 0 read error: -32
[  404.622577][   T10] asix 1-1:0.48 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  404.664410][   T10] asix 1-1:0.48: probe with driver asix failed with error -32
[  404.985130][ T5876] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  405.171082][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  405.211285][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  405.250949][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  405.345524][ T5876] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  406.291391][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.314763][ T5876] usb 4-1: Product: syz
[  406.329259][ T5876] usb 4-1: Manufacturer: syz
[  406.334797][ T5876] usb 4-1: SerialNumber: syz
[  406.351359][ T5876] usb 4-1: config 0 descriptor??
[  408.096608][ T5822] iguanair 3-1:0.0: failed to get version
[  408.103987][ T5822] iguanair 3-1:0.0: probe with driver iguanair failed with error -110
[  408.120225][ T5822] usb 3-1: USB disconnect, device number 17
[  408.334973][ T5902] usb 1-1: USB disconnect, device number 21
[  409.806303][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'.
[  412.633392][ T8922] 
[  412.635788][ T8922] ======================================================
[  412.642824][ T8922] WARNING: possible circular locking dependency detected
[  412.649868][ T8922] 6.15.0-rc2-syzkaller #0 Not tainted
[  412.655259][ T8922] ------------------------------------------------------
[  412.662300][ T8922] syz.4.809/8922 is trying to acquire lock:
[  412.668216][ T8922] ffffffff900eb1c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0xa9a/0x3680
[  412.677444][ T8922] 
[  412.677444][ T8922] but task is already holding lock:
[  412.684825][ T8922] ffff88805a229628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  412.694979][ T8922] 
[  412.694979][ T8922] which lock already depends on the new lock.
[  412.694979][ T8922] 
[  412.705409][ T8922] 
[  412.705409][ T8922] the existing dependency chain (in reverse order) is:
[  412.714438][ T8922] 
[  412.714438][ T8922] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  412.723083][ T8922]        lock_acquire+0x116/0x2f0
[  412.728131][ T8922]        __mutex_lock+0x1a5/0x10c0
[  412.733273][ T8922]        smc_switch_to_fallback+0x35/0xda0
[  412.739114][ T8922]        smc_sendmsg+0x11f/0x530
[  412.744089][ T8922]        __sock_sendmsg+0x221/0x270
[  412.749324][ T8922]        __sys_sendto+0x365/0x4c0
[  412.754370][ T8922]        __x64_sys_sendto+0xde/0x100
[  412.759679][ T8922]        do_syscall_64+0xf3/0x230
[  412.764739][ T8922]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.771178][ T8922] 
[  412.771178][ T8922] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  412.778853][ T8922]        lock_acquire+0x116/0x2f0
[  412.783917][ T8922]        lock_sock_nested+0x48/0x100
[  412.789232][ T8922]        do_ip_setsockopt+0x17e9/0x39c0
[  412.794806][ T8922]        ip_setsockopt+0x63/0x100
[  412.799869][ T8922]        do_sock_setsockopt+0x3b1/0x710
[  412.805494][ T8922]        __x64_sys_setsockopt+0x1ee/0x280
[  412.811236][ T8922]        do_syscall_64+0xf3/0x230
[  412.816293][ T8922]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.822730][ T8922] 
[  412.822730][ T8922] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  412.830008][ T8922]        validate_chain+0xa69/0x24e0
[  412.835320][ T8922]        __lock_acquire+0xad5/0xd80
[  412.840539][ T8922]        lock_acquire+0x116/0x2f0
[  412.845586][ T8922]        __mutex_lock+0x1a5/0x10c0
[  412.850725][ T8922]        do_ipv6_setsockopt+0xa9a/0x3680
[  412.856389][ T8922]        ipv6_setsockopt+0x5d/0x170
[  412.861626][ T8922]        smc_setsockopt+0x25c/0xd50
[  412.866849][ T8922]        do_sock_setsockopt+0x3b1/0x710
[  412.872425][ T8922]        __x64_sys_setsockopt+0x1ee/0x280
[  412.878168][ T8922]        do_syscall_64+0xf3/0x230
[  412.883219][ T8922]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.889660][ T8922] 
[  412.889660][ T8922] other info that might help us debug this:
[  412.889660][ T8922] 
[  412.899942][ T8922] Chain exists of:
[  412.899942][ T8922]   rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock
[  412.899942][ T8922] 
[  412.913556][ T8922]  Possible unsafe locking scenario:
[  412.913556][ T8922] 
[  412.921019][ T8922]        CPU0                    CPU1
[  412.926409][ T8922]        ----                    ----
[  412.931803][ T8922]   lock(&smc->clcsock_release_lock);
[  412.937191][ T8922]                                lock(sk_lock-AF_INET);
[  412.944164][ T8922]                                lock(&smc->clcsock_release_lock);
[  412.952107][ T8922]   lock(rtnl_mutex);
[  412.956108][ T8922] 
[  412.956108][ T8922]  *** DEADLOCK ***
[  412.956108][ T8922] 
[  412.964267][ T8922] 1 lock held by syz.4.809/8922:
[  412.969247][ T8922]  #0: ffff88805a229628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  412.979819][ T8922] 
[  412.979819][ T8922] stack backtrace:
[  412.985725][ T8922] CPU: 0 UID: 0 PID: 8922 Comm: syz.4.809 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  412.985746][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  412.985756][ T8922] Call Trace:
[  412.985762][ T8922]  <TASK>
[  412.985770][ T8922]  dump_stack_lvl+0x241/0x360
[  412.985803][ T8922]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.985833][ T8922]  ? __pfx__printk+0x10/0x10
[  412.985861][ T8922]  ? print_lock+0x171/0x1a0
[  412.985885][ T8922]  print_circular_bug+0x2e1/0x300
[  412.985908][ T8922]  check_noncircular+0x142/0x160
[  412.985929][ T8922]  validate_chain+0xa69/0x24e0
[  412.985960][ T8922]  __lock_acquire+0xad5/0xd80
[  412.985985][ T8922]  lock_acquire+0x116/0x2f0
[  412.986004][ T8922]  ? do_ipv6_setsockopt+0xa9a/0x3680
[  412.986041][ T8922]  __mutex_lock+0x1a5/0x10c0
[  412.986066][ T8922]  ? do_ipv6_setsockopt+0xa9a/0x3680
[  412.986088][ T8922]  ? __lock_acquire+0xad5/0xd80
[  412.986104][ T8922]  ? do_ipv6_setsockopt+0xa9a/0x3680
[  412.986128][ T8922]  ? __pfx___mutex_lock+0x10/0x10
[  412.986166][ T8922]  do_ipv6_setsockopt+0xa9a/0x3680
[  412.986201][ T8922]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  412.986231][ T8922]  ? __lock_acquire+0xad5/0xd80
[  412.986247][ T8922]  ? __mutex_trylock_common+0x184/0x2e0
[  412.986269][ T8922]  ? rcu_is_watching+0x15/0xb0
[  412.986286][ T8922]  ? trace_irq_disable+0x3b/0x120
[  412.986317][ T8922]  ? preempt_schedule_irq+0x145/0x1c0
[  412.986339][ T8922]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  412.986368][ T8922]  ? irqentry_exit+0x63/0x90
[  412.986390][ T8922]  ? lockdep_hardirqs_on+0x9d/0x150
[  412.986416][ T8922]  ? __pfx_ipv6_setsockopt+0x10/0x10
[  412.986439][ T8922]  ? ipv6_setsockopt+0x25/0x170
[  412.986469][ T8922]  ? __sanitizer_cov_trace_switch+0xe/0x120
[  412.986506][ T8922]  ipv6_setsockopt+0x5d/0x170
[  412.986538][ T8922]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  412.986568][ T8922]  smc_setsockopt+0x25c/0xd50
[  412.986594][ T8922]  ? __pfx_smc_setsockopt+0x10/0x10
[  412.986610][ T8922]  ? preempt_schedule_irq+0x145/0x1c0
[  412.986630][ T8922]  ? __pfx_smc_setsockopt+0x10/0x10
[  412.986647][ T8922]  do_sock_setsockopt+0x3b1/0x710
[  412.986673][ T8922]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  412.986697][ T8922]  ? __fget_files+0x30b/0x420
[  412.986719][ T8922]  ? fdget+0x179/0x1e0
[  412.986742][ T8922]  ? __sanitizer_cov_trace_pc+0x46/0x70
[  412.986772][ T8922]  __x64_sys_setsockopt+0x1ee/0x280
[  412.986789][ T8922]  do_syscall_64+0xf3/0x230
[  412.986807][ T8922]  ? clear_bhb_loop+0x45/0xa0
[  412.986830][ T8922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.986852][ T8922] RIP: 0033:0x7fe68af8d169
[  412.986872][ T8922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.986889][ T8922] RSP: 002b:00007fe68bd15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  412.986911][ T8922] RAX: ffffffffffffffda RBX: 00007fe68b1a5fa0 RCX: 00007fe68af8d169
[  412.986926][ T8922] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003
[  412.986936][ T8922] RBP: 00007fe68b00e990 R08: 0000000000000210 R09: 0000000000000000
[  412.986946][ T8922] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  412.986955][ T8922] R13: 0000000000000000 R14: 00007fe68b1a5fa0 R15: 00007ffce6e5a238
[  412.986985][ T8922]  </TASK>
[  413.305637][    C0] vkms_vblank_simulate: vblank timer overrun
[  414.039634][ T5877] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  414.221468][ T5877] usb 2-1: Using ep0 maxpacket: 16
[  414.228125][ T5877] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[  414.236363][ T5877] usb 2-1: config 0 has no interface number 0
[  414.242522][ T5877] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.255825][ T5877] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  414.265010][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.273047][ T5877] usb 2-1: Product: syz
[  414.277500][ T5877] usb 2-1: Manufacturer: syz
[  414.282167][ T5877] usb 2-1: SerialNumber: syz
[  414.288422][ T5877] usb 2-1: config 0 descriptor??
[  414.320178][ T5877] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  414.571934][   T13] usb 2-1: Failed to submit usb control message: -71
[  414.572922][   T10] usb 2-1: USB disconnect, device number 18
[  414.579291][   T13] usb 2-1: unable to send the bmi data to the device: -71
[  414.592557][   T13] usb 2-1: unable to get target info from device
[  414.599016][   T13] usb 2-1: could not get target info (-71)
[  414.604883][   T13] usb 2-1: could not probe fw (-71)
[  417.364681][ T5876] iguanair 4-1:0.0: failed to get version
[  417.370773][ T5876] iguanair 4-1:0.0: probe with driver iguanair failed with error -110
[  417.390712][ T5876] usb 4-1: USB disconnect, device number 22