last executing test programs:

2m32.650709415s ago: executing program 2 (id=3):
r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x305}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000), &(0x7f0000000080))
syz_io_uring_submit(r3, r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1c, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800, 0x0, {0x0, 0x0, 0x9}})
io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x6})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r8, 0x0)
r9 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r10, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"])
keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0)
r11 = gettid()
r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r12, &(0x7f0000000040)='\x00', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(r11, &(0x7f0000000380)='fdinfo/3\x00')
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, &(0x7f0000000200)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @ioapic={0xa000, 0x9, 0xa, 0x2, 0x0, [{0x2, 0x81, 0xce, '\x00', 0x55}, {0x5, 0x1, 0x40, '\x00', 0xe9}, {0x5, 0x8, 0x2, '\x00', 0x47}, {0x0, 0x1, 0x2, '\x00', 0x8}, {0x0, 0x81, 0xf1, '\x00', 0x5}, {0x8, 0x8, 0x7, '\x00', 0x7}, {0x9, 0x3, 0x6, '\x00', 0x9}, {0xf8, 0x3, 0xe9, '\x00', 0x9}, {0x3, 0xf5, 0x2, '\x00', 0x2}, {0x9e, 0x4, 0x7}, {0x9, 0x1, 0x0, '\x00', 0x8e}, {0x9, 0xa, 0x7, '\x00', 0x5}, {0xd, 0x0, 0x6, '\x00', 0xde}, {0x8, 0x20, 0x4, '\x00', 0x6}, {0xf, 0xe3, 0x7, '\x00', 0x1}, {0x2, 0x3, 0x2, '\x00', 0x7}, {0x5a, 0x9e, 0x9, '\x00', 0xe0}, {0x6, 0x0, 0x3b, '\x00', 0x1}, {0x1, 0x2f, 0x1, '\x00', 0x3}, {0x72, 0x1, 0xfc, '\x00', 0x5}, {0x5, 0x4, 0x1, '\x00', 0xfe}, {0x5, 0x0, 0x40, '\x00', 0x62}, {0x4, 0x8, 0x9, '\x00', 0x8}, {0x6, 0x8, 0x3, '\x00', 0x4}]}})
ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x200, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2m31.093141396s ago: executing program 2 (id=9):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000004000000020000000700000002000400", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007ecf436ed1ee64873135c9a150766b4e5c18a00a9778f0197d382bb95338063f4427802245eec6068e34fd5056d75997d97e7f802b298be2994b66e3e3c82a65b80f9967bebd11f32b739a1490e1d2e294b6a648284cf3cc080c66b5bfa0c1d5379a4fbd1b1330d74fad06a2478f857fe476e68b28910ba598ad36d8300c11a926b5955c099ecca1de087eab07206c936340b6bdfb877b517d4e58191336b867f0771dd2e395c7b03b2bee3a2779fad51efe8607"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780180001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpeername$netlink(r3, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
unshare(0x20000400)
r4 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40f, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040)
sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="080026bd7000ffdbdf25010000000000000007410000004c0018000080df62726f6164636173742d6c696e6b00"/98], 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004000)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES64, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m30.522125423s ago: executing program 2 (id=12):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) (fail_nth: 7)

2m30.25805627s ago: executing program 2 (id=13):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x440600)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = socket(0x2b, 0x1, 0x1)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010})
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @local, 0x5}, 0x1c)
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000080)={0x7dbd0d0e, 0xd})

2m15.148372435s ago: executing program 32 (id=13):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x440600)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = socket(0x2b, 0x1, 0x1)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010})
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @local, 0x5}, 0x1c)
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000080)={0x7dbd0d0e, 0xd})

30.247578281s ago: executing program 0 (id=489):
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x2, 0x0, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000084, 0xbf43, 0x20000008000007, 0x8, 0x400000000008, 0x200002, 0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x8000000000408, 0x0, 0xfffffffffffffff7}}, 0xa0)
syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r4 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000700)={0x24, &(0x7f00000002c0)={0x20, 0x10, 0x6, {0x6, 0x23, "a57e291e"}}, 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r5 = socket(0x10, 0x3, 0x0)
readv(r2, &(0x7f0000000300), 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r5)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, 0x0, 0x4008004)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x2})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2)
getpeername$inet6(r8, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r10=>0x0})
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

28.86719137s ago: executing program 0 (id=496):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, <r8=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r8, &(0x7f00000002c0)=[{0x0, 0xfffffffc}], 0xdeadbeef, 0x8, 0x1})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

28.610509636s ago: executing program 0 (id=497):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x6d3, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x21, 0xf5, 0xe4, 0x40, 0x1908, 0x1320, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c1, 0x4, 0x1, 0x0, 0x10, 0x26, "", [{{0x9, 0x4, 0x27, 0xb, 0x5, 0x3, 0x81, 0x7f, 0xf, [@generic={0xbd, 0x30, "3efcb3865d1394e7bbfbfeb8504d4dbe13ec3c0d1fed912f34af688b871fe4b543ef7d619546278f65ab431fed75727af6b9e4668a294ee5655fbc6abb289748bf6773189faf8f0efa656780f3fb86d0d92252fd8953add39ee96ce8f413a3fb00388c59dc53fdc6ca20e0131ec13dfcb10e06a5a157bb0b424024d24cfd5a8f4956f72aa22ae71704b546450e996b7137d242a76492adf32a451e9534ff1f7688c517e942e898feb6891f6bf63dc2984f47aa2193805ce13ad2e4"}, @generic={0xc5, 0xd, "cfc1e266cd177d7e0d8c9aa25544c751846be46b43491ec17dec41e0644a5397a155c63696972c785d8f44791e801fe83f9b8c578f845a1e24aa252e2ea72ac6427f4aefe6d5f19ddbfc30d07774124383c540afe61fd8efdb82d360177a16b9887d416aded4b9001c3cfed587d955309b52b911c8e3adecbcb4b70d65517ef6e90b1182a6dad1bb7d4453aac8514670e8232b5e48e0c7331346a409f5a51459a7e0f9316830225d6064ba90f8230e94f2eaed5eaca4183a0970ec16d6f9933ef9dc6c"}], [{{0x9, 0x5, 0xe, 0x3, 0x400, 0x0, 0xf5, 0x9, [@generic={0x1a, 0x23, "aea48508d60cbee5d0ee8d00bed6907cddd2be0caea0855c"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xa, 0x9, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0xc, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x800}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x9}]}}, {{0x9, 0x5, 0x8, 0x6, 0x200, 0xc9, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @generic={0x5f, 0xd, "cff6087d97046e9432f6cb9d77b82786e6dabaaaa4be942fe912e397b8aee1d1f452bad983cd125341dd17b0841e6e7dc6373f7ec6034d517a5155fbac1ff9ffc60b3f088f046b8e367bc40fb5cbe3f24b302dd1d39f184f80ad3edc2d"}]}}]}}, {{0x9, 0x4, 0xdd, 0x6, 0x2, 0x4d, 0x74, 0x2d, 0xaa, [@hid_hid={0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x1f7}}], [{{0x9, 0x5, 0xb, 0x4, 0x200, 0x8, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x220, 0x23, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}]}}]}}, {{0x9, 0x4, 0x2f, 0xf, 0x2, 0x73, 0xe8, 0x61, 0xfe, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x2c}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x9, "ce99"}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x6, 0x2, "41e16890"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x6, 0xb7, 0x7}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x40, 0x6}]}], [{{0x9, 0x5, 0x5, 0x4, 0x258, 0x2, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x21f}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xfb, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x9}]}}]}}, {{0x9, 0x4, 0x85, 0x5, 0xb, 0x2f, 0xed, 0x9a, 0x7, [@generic={0xc5, 0x2f, "a5b8a78c2b49fb2ad0d86c11e296c0ad1133c09bfe2128ed6cd26dd61de006ced8aae7558d4d6746fa0835103e9b6e247dbf2d5434e72409106a25477520b20fd32f5b0080caa15d0fe5fa53ad7da8771caaec3ca3584f50caea8af2612694bae005789eca4bf2daa484c4a47a716fd995e918e7557abebcd072979049ee7b20664eb997082c2df591ec257068f5d4efd9daefd6002d2a4454a20001d8a790a2244394372e2fa676cf03b2b64828eec6a2022251b5c5f5379073ea082b9a5a4ee933fb"}], [{{0x9, 0x5, 0xb, 0x4, 0x400, 0xf, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x31, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xfc01}]}}, {{0x9, 0x5, 0x8, 0x188476c2a81597ba, 0x200, 0x7, 0xcb, 0x3, [@generic={0x49, 0x6, "efc49319b3517d706e93a93852ab661c31dd5d055968b4aae7620908b5a62cc9f6eff76d0001a87a14add52d2c568f76c439dfcc0f8ec1e07fa48fc9851040c0293eea88150d84"}]}}, {{0x9, 0x5, 0x1, 0xd, 0x400, 0x5, 0x2, 0x5, [@generic={0x1f, 0x9, "f947add793c8be291ec5c86c2227fe559e4f2597280182ed5180c9d866"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xf, 0x8, 0x40, [@generic={0xd2, 0x23, "d0aa99eb17a9a58c1a642fb219cf7b3d0e95eaf225febcc11ca758869f82807f59bf2eecf41060009638d338c9f04c792ef08cab0f52dc91d4205f41e108eacd617bf0ca1e7530d3f3fe79b1448b0ad9dcf881716c60e3e5bc2ec664ea6d994edbd8247a302b268e1d5c3ba5eb91feb0bb831cfee6ec55f197857b4e32bc39007627805f4e304bc263d03bd2133f3f8eebadfead92971407691bdc5c541761bafad4ab5c82fa562e12e05242b521c18e8f482f731423f95149166fceb7ac144a4584a175a8dfcdac4e7371d1a333ea7a"}]}}, {{0x9, 0x5, 0x8, 0x13, 0x3ff, 0x7, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x67, 0xff, 0x7, [@generic={0x3f, 0x2c, "8b9af187bd6cc43d11a6b707bfd204b0abe7ddd7235fd2a750d9b5d2a027076a8215dd4821b21dd61c40fc989bb8a4a7131beee8d35ca86082c6474688"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x2, 0x5a, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5b1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1a, 0x6, 0xfa, [@generic={0xc0, 0xc, "2264d53de2f473673ae3244a039bfb170329f0602b91b2a33d44d33f305619b4b5fa3ad27c8a4955798dd6082c5a078c82ce3f44f7bfd169ed27b002d5e6650c079aeb89835abc778d24cd484d9ef602e49beb94179d7027c2d1d278fa73a1ea49cc9484e6458f61f12e5ae5b22aeebe997466c4ba73758755dc28ba41f5333b982f1cea8d8d9e22444703e1c99a10ef955f3aef0ce3a8fc6b47964fc994a0eb729ccd0db919b25d06fccc7b0400b2fc4e550b6df61f4b76b7894c2c8c8a"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x0, 0x2, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x9, 0x6b, 0x80, [@generic={0x3b, 0xf, "11a3f7d0d53ed39d6355d628bebf573f4a220470c8838d36bfec1d3ef04afc88eddcd0f0211743c329807cc81a19ef3358eeb9e01de5759a80"}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x250, 0x3, 0xa, 0x6, 0x40, 0x9}, 0x1b, &(0x7f0000000780)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xb0, 0x9, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x2, 0xb, 0x8001, 0x4}]}, 0x4, [{0x15, &(0x7f00000007c0)=@string={0x15, 0x3, "007d7c7e49db943da12da4809099309c8d2d03"}}, {0xff, &(0x7f0000000800)=@string={0xff, 0x3, "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"}}, {0xa9, &(0x7f0000000900)=@string={0xa9, 0x3, "9cdc1cb16338959ce4247cccc6c620923c10be6e03c424f8d0274bc741dba9c5a29dee057474efbaa3047ee47baa1856cb3e3ceb5c00c2d726daef091ec252825cb43b93d54fa915f4443ef9f17310a2bd74b35a88308ec08e49bcb5d3c89d47c412202c5b79ad21a449007529525ac8f5955a907693e3649821830e7e2832109608ad72519d131609e8af0d8db11f8efb2053ae95bc55ee93e0fad0b4a0b0a287f1c154fd1265"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x421}}]})
r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05668, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

25.553480433s ago: executing program 0 (id=515):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="81936a9726343664"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00030400000004032b04b9be9131088da9bf457b3c842bea2ca88d359c43dbbba46c8b697e47abe65014bc24b4063cea764190d640a9aeb0c865732af950c903edfe0222f52c54490e3ddbe4632d3a63239fee5c9ae50f5348a02308425dc649d9e1d69b4589881fcdeee67f5819c5f09301e6af3253d0101cbc28317380b37626e596c88533b4cccc530d333425c0fcad593f97f4b70aac15c590b3f0cace206b7d8b874459def772f444810e67a202d9bb509c2938c879c57d"], 0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x6, 0x4)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1fe, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, 0x0})
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x22, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x844, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x10000}, 0x1c)
r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
syz_emit_ethernet(0x176, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000780))
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000dc0)={0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="40094f0000004f29ae94aea1ce5a51afe491ec482708ecf2549f9194b0441465ed62927e79cc852cba8de5894a164bf802c7177a734e9f12bfee1f927012e7b138ff15a155089990c300abbbd07a629f526b76c6be"], &(0x7f0000000d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f40)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="4010990000008b8d6ea3959f9146de20ab96a243223a737d2a1c1b4921b98a6f95fb197ef20906e2d7dc19fb41f90537f1d6855aec0825d5b406c5cdd71ed6d271272e387e15d2b8795cef00ea1211f1c29c8a9ff37896f8bf745c9fc575fdc6870a4fec539b7229040cc3c6a695b292b0a424f77ef6fc965412718a5254c5e36d5a6ed4f673927b94867a86756f5b09d9ef6a29b3190985c1ab2c9e33eb199f321b80fed032cb2985b92315e6e077597cec904fb5e8eda0e3bdf8a8bf9a06bd5cf44801859eeb94ff8a436f3a969c25711c3dbdc54a1de182d9cf812c569e07dd59e31b22dfe57cdc815fc3d038936d"], &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0xff}})
ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1})
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xa0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xb3)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES16=r8, @ANYRESOCT=r3], 0x3c}}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)

22.461620201s ago: executing program 0 (id=532):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x4d, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1f}}, r1, 0x40099d}}, 0x48)

22.358341414s ago: executing program 0 (id=533):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[])
symlink(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002300010322bd7002fadbd22501000000"], 0x14}}, 0xc004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x4000000000000205, 0x2583)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200041, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3)
sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x32, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0x200bdb], 0x50000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0)
close(0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
readahead(0xffffffffffffffff, 0x800, 0x100000001)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008392a8c3f40000102030109026e0301344062080b0000016c30020904000000010130000a2401ff0a00020b000009040100000102308c930401010101003000702b556bf04013100f080a530080de05000904020000010230000904021449010230000905820900020705490a252507000000f90500000000000000"], 0x0)

9.58591107s ago: executing program 5 (id=603):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
syz_usb_connect$midi(0x6, 0x2b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150020000003230144b4740000102030109021900010150c0070904"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x94, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0)
fsopen(0x0, 0x0)
socket(0x11, 0x6, 0xc)
r4 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x0)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000240)=0x20)
gettid()
add_key$fscrypt_provisioning(&(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x48, 0xfffffffffffffffe)
read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x205c)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0xa)
fchdir(r6)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r7, 0x2007ffb)
close(r7)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1)

7.27306131s ago: executing program 33 (id=533):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[])
symlink(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002300010322bd7002fadbd22501000000"], 0x14}}, 0xc004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x4000000000000205, 0x2583)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200041, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3)
sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x32, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0x200bdb], 0x50000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0)
close(0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
readahead(0xffffffffffffffff, 0x800, 0x100000001)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008392a8c3f40000102030109026e0301344062080b0000016c30020904000000010130000a2401ff0a00020b000009040100000102308c930401010101003000702b556bf04013100f080a530080de05000904020000010230000904021449010230000905820900020705490a252507000000f90500000000000000"], 0x0)

5.865693783s ago: executing program 5 (id=615):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x9f)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
fcntl$setstatus(r2, 0x4, 0x400)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000300)="f617a8ea0700ffffffffffff810016fe0806", 0x12, 0x40088d0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x7, 0x6, @local}, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003c40)={{0xffffffffffffff2b, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102000000101e04003040000102030109026900030102a0f5080b0201010a20fb090400000001012000092401000106090006090401000001022000090401010101022000090501090800e900010825018000d60700090402000001022000090402010101022000090582094006f00800082501d500070000"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000005c0)=@string={0x2}}, {0x34, &(0x7f0000000600)=@string={0x34, 0x3, "c92b2e8964602410d4701e1770a13ab133736c21adba6204cd93e3ff0fce5e1eb985050a5cc29b014f2e8cc2c5bff2b405e0"}}]})
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0xa0, 0x90, "", [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x80, 0x2d, 0x4, 0xcc0364413e8787c3, 0x7}, 0x0, 0x0, 0x5, [{0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="3403fda298dce0e78540279620bda46d16f62af5a8cd2857484c1a072a959b6f32660f063ac2afe3f607d200e3f53cb55a8a67b281b2ccb37962d41affe564894642bff49984a7a11d0b7b4664c61a8ac903b08a1bcf86cf645a8a2f71317c939d31370a6370603744c2e1262a55008ced93d9083888c1d29c83184a672a83d2e3302aea86bdc227f625e21aa721ed29d0ccc29f3235ad4f6bfa3f8e24386a350e24ef40b434b71f4d0699ab8972bc435937f6448ee5abc3edc832a9"]}, {0x4, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x813}}, {0x4f, &(0x7f0000000140)=@string={0x4f, 0x3, "b35c01c42d78483f871c8c80420bc80ed774203a8a3caf1268e19b5ea7435fcf0ec441582e6878c21a5d68574b2bcf4a3ac73ba6061533181eeea3d74f8d22dde0bf5782aaa8b72bd948f6fefe"}}, {0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "9c874f28f40d7ead450c24dc77ac43aafddbb12e4790d5f36df30f85bff0151d8539134f40d34ea9133be9ce810aae77f5cfeb"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000f39000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000, 0x2})
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101)
unlink(&(0x7f00000003c0)='./cgroup\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10000, 0x115)
getpid()
r8 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r8})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

4.586474111s ago: executing program 4 (id=619):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x4, 0xe1, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x5, 0xb0, 0xc, {0x8, 0xb, 0x2, 0x2, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xa, 0x7, 0x8000, 0x5, 0x7, 0x3, 0x9, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x2, 0x3, "a3439a7d6e31"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfff5, 0xf, 0xd7, "0b5e1e2e"}, @as_header={0x17, 0x24, 0x1, 0x1, 0x1, 0xfe, 0x1002, 0x80, 0xe, 0x10, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2c, 0x7, 0x7f, 0x2, 0x9}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8000, 0x100, 0xf7, "1886f84a69"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf7, 0x9, 0x6, {0xa, 0x25, 0x25, 0x9b85, 0x3, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x3, 0x80, {0xa, 0x25, 0x25, 0x98, 0x1, 0x7f}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe, 0x8, 0x14, 0x10, 0xc9}, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xa7, 0x3, 0x42}]}, 0x8, [{0x73, &(0x7f0000000340)=@string={0x73, 0x3, "9be75f9824dd107470ae12692bb2229088599fdd0a897e520a9b71fa637d084c3ecb168500bb853dd53728293a7e45c07b6922c98ce4de11e501fa543e8859d2a1937173814ed74c657f652115fb2a058d2a7d00a862059be4320e610e4b8a2c3311f07a96da88d100d28c297bf6f6a223"}}, {0x74, &(0x7f00000003c0)=@string={0x74, 0x3, "b9ea36d37621b563190e33f0f8e746f93763a2a5f1d4f64c50d4ae1341c12c7ee21610c1a724d4ad99b3976ff3df3d1e8080eafed3a217ad891a001997de4349859e87fea2eb11bda68e8698dc6029b553268d32d941deda9c97a4bfe32ce91ac26914cfddf69f88de1e7830536da82d9adb"}}, {0xbd, &(0x7f0000000440)=@string={0xbd, 0x3, "b400a617dbe3e32ceb53e761468882208693123385b2d414d9076c0bd382d2ebd5071882add36fc2d9c87712185e31c8078be158c9677af1c104a628b253d5f57c20e619f74b6216d2a288e019d1a5976c6ddd88f9e38ab3b722f39fcaa4c5daca49e49493ada5848dacf57a5674af7f44e37adafad3f623cd4890175c13860cf0d9761a6643d80f9d4ce9bfb786c5aaaf084c57ce21103d12306acfa1ce71f731bccd5522ae2ec1b114b864bedbdc73b707c6eba049e5d4be8f03"}}, {0x8e, &(0x7f0000000500)=@string={0x8e, 0x3, "ceb5dab1de4364f7c416cbe97f1c75b396c8155547fdb9cb591be3fc2afff07233ac535b98c7b808a046ba33725b9a6cb4746e0927c4e11462b557d6025b869b0f68a20124428cbb5ee7e59e85b092985b864e312f0c81ec9944ebe79053785e791f61d26bf1d2e140562d66b0cbfc37567026196485e9f0fbaccd1159ae4dab46488391c4bfc6ac733a577a"}}, {0x5f, &(0x7f00000005c0)=@string={0x5f, 0x3, "df84bf526cba632bee48b8782b348f441d32333c176dd76c694559d5b56bcd19a1e4cbf32cd18295011da48dbf9f62a1d56cd379d8de80a120532b88567603143d184231ec439394da2120e7e0c143ef7084b67997aef41b24156bc9f6"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x444}}, {0x85, &(0x7f00000006c0)=@string={0x85, 0x3, "d89ebd95f068a1f248d95a7435db91b49b93fbe9eca258da3f7f95169d76a9986baa39ecc977311c07854351b7724bb4538b41e04453800eb13f04e95f244651e7bd8922824ae8f05ff779c6197e272f3435c2ff12f40380aa3cded2e47128c83f22768668c90d4fca7237cce98a7b64350408a5faaecc1b873467e35f40f2a9d6d4ee"}}]})
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096230b26e53f07010000002a900683749e821dab8b9236592b000400009371"], 0x0}, 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x80, 0xc0, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf9, 0x4, 0x1a, 0x3, "361c", "8d77"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0xd, 0xf1, 0x9}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb, 0x35, 0x5, 0xfa, "4774f690ba"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x8, 0x0, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x8b, 0xfc, {0x7, 0x25, 0x1, 0xc, 0x10, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x8d, 0x6, {0x7, 0x25, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x110, 0xf, 0x6, 0x0, 0x40, 0x3}, 0xb, &(0x7f0000000900)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x42b}}]}) (async)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000180)={0x800009, 0x10006})

4.2358516s ago: executing program 1 (id=620):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
pwritev(r0, &(0x7f0000002380)=[{&(0x7f0000001f00)="e61e07cd4a78b17adac194382f3312e7f39dfae8f063ff1c72b25ebc29cfe2d7eb3fa5b230a9ad4536545ce3d7e06208f17f0953c84459ffc9d5a8789b481529f43cbe1519df427dc7921b74395912c82e722025a242d8c02bcc022c01e13c02a54b24999056f3", 0x67}], 0x1, 0x6, 0xfffff5ec)

4.235255642s ago: executing program 5 (id=621):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000980)="cd6fa1d1839978de85e2809882a3713be979d5a5a19255ba8ba7d5f1c72c1aa15f841a770a585c63dde13ba26d9d25ac268ea5ffde5fa73f6d5c55a15e6e2c1067e392a93b95bae460b21f50c300c95b181533923eee41cf97e991196ff47dad4dbbe69021b39181a0302186b10b68534993820f0cc22dde380727e5df927221db07061547219e17e7")
ptrace$cont(0x20, r0, 0x200, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc88000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x5)
ptrace(0x21, r0)

4.035723854s ago: executing program 1 (id=623):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e0000000110009050000000000000000cd000180a9008c800400ec804dafb946686662b7581ac51509694701e1cfc890f8662fced534218e28b75352b98296802b642a98c8342184dcf4211681e5ce3dd98af4c967a04953658b1007b3d1eafcafbde091f3917c8755932e4514d328ffff000000000000777d3e08dace01ca799fbab0156d0090b3f59c889ef51df083bbbb54ca95d3c9d802079f848b40192f5dbe7d5104147dd4c114002a00fc0100000000000000000000000000010000000b57eca115b14682deda7e4dda03106c3dcb153c8704d86c67c69c189c0bd0871088000000"], 0xe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x40840)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000)

3.766377564s ago: executing program 1 (id=624):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180)={0x0, 0x2}, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x8280)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x5, {0xe, 0x7, 0xc647, 0x10000}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x1a00, &(0x7f0000000040)={0x0, 0xc8a2, 0x4000, 0x0, 0xbf})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x36, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='f`=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000200)=0x8)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x0, 0x9}, 0x18)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x280a00, 0x90)
file_getattr(r7, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100)
close(0x3)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0)
madvise(&(0x7f000022d000/0x1000)=nil, 0x1000, 0x9)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.541798439s ago: executing program 4 (id=625):
syz_usb_connect$midi(0x6, 0x2b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150020000003230144b4740000102030109021900"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1b, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x0, 0x2, 0x401}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000"], 0x70}, 0x1, 0x0, 0x0, 0x40805}, 0x40)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))

3.402902275s ago: executing program 3 (id=626):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7, 0xe, 0x2, 0x0, 0xfffffdd2, 0x6, 0x9, 0x3, 0x5, 0xb, 0xa, 0x1, 0x0, 0xf23, 0x1, 0x2, 0x6, 0xc, 0x40, '\x00', 0x9, 0x1})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x100000012, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2, 0x100000000001], 0x6000, 0x4bb40})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.188571979s ago: executing program 5 (id=627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xf5}, 0x0)

3.048279765s ago: executing program 6 (id=611):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0000012dbd7000fbdbdf250000040000000000080001040300"], 0x20}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x2, 0x4ed5df13bd56cd16, 0x0, 0x0, @sint={0x7f, 0x3}}]})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x0, 0x0, 0x3}}, 0x18)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000001700)="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", 0x5d3}], 0x2, 0x0, 0x0, 0x2c}, 0x44004)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4, 0xfffffffffffffffc, {}, 0xfe}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x240088ef)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000340)={0xcf44, 0xfffffffffffffff7}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$sierra_net(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x40, 0x3, 0x78b})

2.836676741s ago: executing program 4 (id=628):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
fsopen(&(0x7f0000000200)='adfs\x00', 0x1)
getpid()
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000840)="e55ada0a26b834f902c337d74e5e7238720efb7f8ec4d0727d476db4c872aa904427840eab3b36d1ed0bfbd7d7e69c6ddb2d8226eb56e81bf8ed7bc36a3881f90a5727aff51762c4b5d02893baa44c4fcebd4fc1c1136289c57bb6b9cac240b24cc199cc7edaeaad975966a70c5ca43e81ba4cc0232281bdf279b9b7425198f2bdba0dca17ac5f36268368465090c8440b9760a36dbd8c3c802ddfefc112ebc32dc8b4647b588da74e1bfa3832615c74474e82bf0b93b1de336368ffd64d25c5e41478", 0xc3}, {&(0x7f0000000a00)="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", 0xf3d}, {&(0x7f0000000200)}], 0x3) (fail_nth: 5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x20040091)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r5}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56)
recvmmsg(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x2, 0x0)

2.493549764s ago: executing program 4 (id=629):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fcntl$setstatus(r2, 0x4, 0xc00)
read$char_usb(r2, 0x0, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0)
landlock_restrict_self(r5, 0x0)
migrate_pages(r4, 0x81, 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d06, &(0x7f00000000c0)=0x39)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807020"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000000)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@local})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESHEX=r11, @ANYRES64=r4, @ANYRES32, @ANYBLOB='-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,'], 0x50)
r13 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
dup2(r13, r12)
ppoll(&(0x7f0000000140)=[{r11, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0)
preadv2(r8, &(0x7f0000003a80), 0x0, 0x3, 0x6, 0xb)
dup2(r10, r11)

2.29219643s ago: executing program 3 (id=630):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$sock(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="77be4504de8ca5372aeaa8e435307b6937b16349766eef163e6fa374586b4e966adc39df65f87be0eb5fa3f91ed8376b7d268ed75292a98770626937e4a2335f97979b21166de0ade794b06766adba616d10124510c51be55332e638751cae4feb4000d9e95949a9724200a6d09b00edb57e085c2069e18a4bdf5652205ca9b5d240a66f8d2c11d951f1469ccacbb18bcd63d7a5a077818497ce3d756838b2b0f6a165148508", 0xa6}, {&(0x7f0000000400)="7fc90b024e48ecc18f722777e1288e1e1e444412d76a3d1eea0f0b93579ea3c8ff60a8622b821228e3f8394fc0980e9889e6fba39b421b74c96747e21c68b26349fd02da7b8c0710db65918654cdd7c09ed76d7a", 0x54}, {&(0x7f0000000480)="f40eacaab6ffe2b01dcfec03428bc46a74d68044e0e0de60eddb01a7abf2c2d8380d712f94866b18bad53d3b2e4ea0d77f04f89e16e2b2d0870e2e77edb9f967823edb1a92f8d5d14f4f074bdca6fe2a640af97e7f9ba34f0acb43a71bbeb42ce66c7604aecb4a2cb37bf9bcad9ac71220362430dcede27c99ec0ae4dfbb8e479ccb5312c67229c33a49303463acfa94732322adb1bdd5f66c571a8b4b1ae18bfba443a4ff18b7f6cc71c1ff2d4b9d4eb18ba6bb2b06dad35478afa0be657fa34e448514e1e4778c97d43c2dea7f4660e94653ad548a708793c07a78", 0xdc}, {&(0x7f0000000580)="7f49b98607c8eef4bcc367e4f3fa78a7f86f6ae31414075dd72f27311aa8e2ddb4b5475c71f5a3a659298093d0ca8af6850c34300b32e71b188db2debc9930aee2dfa08fae5d98677e96342150b7614ba053e9fb4206cd3f03e9491f34a6b7efa58dd83a44a58642753a27e578d3468ee024a8bf3d95cfb03ae5f78904", 0x7d}, {&(0x7f0000000600)="76e9a90fd70a25d3cd3ab2af78d89628ecdd4ab6ec729ee1899c57ef5227fc3131ee5a158a2857cdcddc3de529bc16270b6d2ba2a6a470fa9a25a38114d6970c922b0e44391b926bbc8b1cbf80", 0x4d}, {&(0x7f0000000680)="4e9b0ee9546a1bfd0a28b2a9361bdb9b898fb165901574b04d16551f7f3bbf53352156a0a67dc26fc36bed265d8a943418a090b5e1da6564c278d95d444386c74ae3205e267f4a738c8a00dc4d2bad289d99d57e691c7d75b257f9323369f0cf9e43276ed4521d32c5776dc5a6a835c714701c40c463d08ae318ee", 0x7b}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000008c0)="c198735e0313129560f9812383eed153763d7780cd0ad2facc90c2e6c14c69eeefb8e986c1a83b595b6a9b6f60f94f794a73deb69c5fd9921ea0c8d3b036e7f82c6ddb2855dc0ab4d3e2b67ea94a4945359e7a4249e92def5dbbd5c1709d248dc4d5bfe17588cec4da", 0x69}, {&(0x7f0000000940)="62bb1112981fb547b186226f57d1e3eebcbfb3e1417df7f14939203afe3aca06f00175696719a785a90d9c2189098428a73c", 0x32}, {&(0x7f0000000980)="9eb05bd01a9265a95e2411c3ef27c55e3f36413ffd4cff0a98c9fcd9294090aa70f751ca2b0699f198e9931de3c93b50b9caaac999b49aaf25ee95b15ac4c9944ed4571ea492662f7c659c8d8f4de0a2cd63b16a67ec702a3d93f2ec2a4dce45e5bc46aeca7d01", 0x67}, {&(0x7f0000000a00)="e67348dd645f643ecc8884a7e260eaef072fb81fdd855d58900d7fe88e94fd3ea4c661dc184b881f671cf5ca8c11bcb63bc24af4917f17b2e1a0e57e0e39d6906e6188702b9eb2af50627cc283881a7196a2510a87da044eb527417332ecd9084bab1aacfc97eaa98c1b2837469c7167da0fac71fd8536013ee408767496530214dd16d43e09994bc5ce861f49", 0x8d}, {&(0x7f0000000ac0)="d5741ba41b0dd71341ab4d8fb0f821161654b681fc58f9096de7edda129fafda73acd1d97b30793c4169f2a7821be634528c8b8ed0a51f204467204a85d4b1ec1eb574846fb913288e16b6c01124445907364110a5a3fab297cff701d6aab544b0", 0x61}, {&(0x7f0000000b40)="745fec41f03c6a44399bd766318cc1a8b6ebc25a6f9da7fdb06be5ac2c2a9bb7b2b77d960344f5494d8b95b204784bf8e34055e83ba8fcda2976b040156a9e3bbb874030206f99258f780c3976a47d7bd2f0ee97552e873178be6c9591ef54f231c31211b3647412237c0a3df48474a480c452851cbff93b40c2aebfca9814089cb480706a35578292b137e1c7d45f25bc7063ed9d9ebd9b95145f27b34ac50e00abe5c1a0a2d93bf22cad940a1fbd60d9ba88195d2bd93ced6ccde287b3794345d117db7ff5b5b1b5518de13c2ebee4729be5c1eec78c61fe53fed5f0123f6ccf4e9d106a7d875a49c09fb8dc20", 0xee}, {&(0x7f0000000c40)="886199d19bb2d84a1ba96c0144f97f7844535683b2615dab35cfc7079fa6734cb3962d80ed886a4fd265d4405acc525326e213249aa340ee495479ca0ff3d6076b81275f9df890f972792b645e3c158d3115ac06df3b6309a6db4ccea5b87fdd89eaf29a875b094fcd0cfe26a0f24bc0b7ac344520ac8825554b5309d9cdb9529602df99370b57720e6b126cada35129dd1ce2929ca888cf3d0153862c742c5324d4e78d5f00e4944f6772a311c9f0a5d423458d821dccd56ba5cd883bbbf0adb35b35241d655cc40c9e44365c29453ade093d419e9f0b29c674188da15f75db307aa4f7a82cfb4e26b868", 0xeb}], 0x7}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000dc0)="24a5f73d00f8525613b306e77e76689963dff19dd1525f22742cf7c446ecc39ba3451e2b63d06b31bfc1b8c5f6d8714dc03d718c74fc5a0f4274d97922a3c6f0d79773950b863607b860cbe99df87247277b45e529159f36732e3f9362901b930f3e165d0ab43dcc8162a56fe2b987e4ac7bfee1120ebfea8ccc7c932cdfcacadb2e05cb95a527343e8be849a83783121bd1ec1d5df40b01787da490", 0x9c}, {&(0x7f0000002a40)="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", 0x18d}, {&(0x7f0000000f80)="abf0eea8255eaacec55b24e7260dde675edd5b8c47dd86f22b72efe0df75f84bc8b7701b680afb7599573a9ccf1a9736b5752d0ba74884cc87717b98eaf2f78ca31c1f7acb5d3325cfc6ce33b8a72bcc37c6f37f77d9cc4cbc76a445ba9e86ef7bb330d4", 0x64}, {&(0x7f0000001000)="af7e096c4e538dc7b098209dd9ebd6940a0f8a968083b79e5f46a4f1a29644e1b6406dfc2b87266ff6c1a5c3a91dcf2b0c6a25cffd20fd432e44db33bf0f15f8ab910540b32f4f1324bcdf2f683eba2502451969c39b84904e576a14f19c9c442a89bd2f927c0ab21e976e2984df44b6dc5ad3afd73b42944475e3ee70687ef22d3410ee27935aad2dd6dd24cde6b598bffeb11eae2184f862a342d4f18e0c", 0x9f}, {&(0x7f00000010c0)="57a009428694f983d754", 0xa}, {&(0x7f0000001100)="1d6b878b52fd5974ce1bd8eb5257e65720facca49493a6cf4d8fbe5dc3f6516fc25c4182f5320f1641127c9b9f42abddbbb30b1bd30bb37d0235a20126d4b898de95ca3ea987bb9c54a6ca19d8013f626598c84fa28310", 0x57}, {&(0x7f0000001180)="f44748d6fb92a82a97c8b2a3d165a8999db67e92e5ed4f12ae9f090650b0bdc2eec8fdd4aa57b46b6fe6f48ea94d7efa863877c1299ce6ea31d256829174f19a55c96b915f98f310cc1fa121479bc887397175baa93ff0e3e073071e8261932ae887f3ecc1e52f0dd58a673920df30af59704ef75c6683677e03cfd832dc276f93a0a29bf670fe2f7d436c1af52a94709069af392560bef638149a48094bbffe1bd0d1d3f18239bc6f62f5a17e1f7f6318def0245d", 0xb5}, {&(0x7f0000000100)="218f84b9c00e57973254d8f30dc420e970c81ad2f33617f7", 0x18}], 0x8}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002400)="f908d0426d6463b1e0f7074182d16481be699c5e0fcac225da69b9d6832938f3f9473c61de0d42c931de7d83323d19ac35d519b5c079b8ee9bf6e9a260d618102118646d4d869ec9fcff47721a386df4ae0f4b61a8d74b60913d49006d76f48ad621c0dacfd9298931a29c6f7ad1b5ef5f8fd5f1541c1a6bc68773ee8c4d01efd6", 0x81}, {&(0x7f00000024c0)="4ac75fb1b1ee1b9034bef69c6a084e5150c0d1eef44b630310a2d736cc9a9a17692fc26d7035acc27a9ff571ac303d17d24162cf68133d6964545ad15c82ebb767fc6c9597d44fd8a11bb223acca5b84cad761d8d7131d663e1b275c65c0f66b29ea0d58951f88f9a6ae32dc", 0x6c}, {&(0x7f0000002540)="66857b51bda250cded2f43ec7f4362b4dc9ed67d8c78fec020369f4bd75147978fa0305ab420a25349c377047498ff7b18f9ae0c6d02951cc4f25735eb71fb7ddf6305e1fa62107448c2dbc5d549897ce3ce997af751018eb2f1035928959acd58", 0x61}, {&(0x7f00000025c0)="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", 0x374}], 0x4}}], 0x4, 0x44044)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffffa5}, &(0x7f0000000000)=0x24)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x500}, &(0x7f0000000780)=0x40)

2.193509571s ago: executing program 5 (id=631):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000040))
close_range(r0, r0, 0x0)
ioctl$KVM_TDX_CAPABILITIES(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x4, 0x0, [{}, {}, {}, {}]}}})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000a40)={'veth0_to_bond\x00', @broadcast})
r1 = syz_open_dev$amidi(&(0x7f0000000a80), 0xea, 0x4000)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000ac0))
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f0000000b00)=[@nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x1143}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x8, 0xf}}], 0xd0})
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000c40))
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35)
ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3)
fcntl$setlease(r1, 0x400, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/48, 0x30}], 0x2, &(0x7f0000000f40)=[@rights={{0x18, 0x1, 0x1, [<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0xd8}, 0x40000002)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x5, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x840)
ioctl$int_out(r5, 0x5462, &(0x7f0000001180))
ioctl$BLKDISCARD(r10, 0x1277, &(0x7f00000011c0)=0x8)
syz_genetlink_get_family_id$fou(&(0x7f0000001200), r6)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000001400)={{<r11=>r1, &(0x7f0000001240)='^\x00', 0x3a6c0, &(0x7f0000001280)={@_ha_fsid={[0x3ff, 0xcfe]}, {0x8, 0x5, 0x3, 0x2}}, 0x0, &(0x7f00000012c0), &(0x7f0000001300)=0xfffffffa}, 0x1, &(0x7f00000013c0)=[{0x3, 0x85dd, &(0x7f0000001340)='\x00', &(0x7f0000001380)="daf6bae60ae5329f0f120613298afcd8abf94ae6675f79bd2cdde8c47d93020d1898074a4b858a26485d1a8e81e07f8e9b0a87bb7f166ebd416451d72db0599e", 0x40, 0x1a}]})
ioctl$KVM_SET_PIT(r11, 0x8048ae66, &(0x7f0000001480)={[{0x1, 0x26, 0x2, 0x7, 0x8, 0x80, 0x6, 0xc4, 0x0, 0x6, 0x1, 0x0, 0x100000000}, {0x3, 0x94, 0x9, 0x3, 0x7, 0x5, 0x9, 0x96, 0x7, 0x3b, 0x3, 0xff, 0xba68}, {0x2, 0x9, 0x6, 0x8, 0xff, 0x0, 0x10, 0x7, 0x10, 0x6, 0x6, 0x40, 0x23}], 0x1})
r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0)
close_range(r7, r12, 0x2)
r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001540), 0x222140)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r13, 0x54a2)
r14 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xc)
ioctl$KVM_HYPERV_EVENTFD(r14, 0x4018aebd, &(0x7f0000001580)={0x1, r11})
ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000015c0))
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001600)={'dvmrp1\x00'})
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000001680)={0x1a9, 0x18, [{0x6}, {0xf, 0x1}, {0xd}, {0x7, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x2}, {0x2}, {0xe}, {0xc, 0x1}, {0x4, 0x1}, {0x8}, {0xc}, {0x7, 0x1}, {0x9}, {0x6b, 0x1}, {0x5, 0x1}, {0xb, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0xa, 0x1}]})

2.162044516s ago: executing program 1 (id=632):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
pwritev(r0, &(0x7f0000002380)=[{0x0}], 0x1, 0x6, 0xfffff5ec)

2.050509326s ago: executing program 3 (id=633):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000600)=[{0x29, 0x0, [0x9, 0x0, 0x58c, 0xc0000000, 0x4, 0x6ca, 0x6, 0x7, 0x6, 0x4, 0x0, 0xfffffffd, 0x7, 0x6, 0x6]}, {0x2b, 0x0, [0x3, 0x10000, 0x3, 0x7, 0x5, 0xfffffff8, 0x10, 0xe, 0x9, 0x800000, 0x0, 0x8, 0x737, 0x3768360, 0x1ff, 0x7f]}], r1, 0x1, 0x1, 0x90}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)

1.981169138s ago: executing program 1 (id=634):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x80015b1b, 0x0)
socket(0x26, 0xa, 0x37)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x3c, r9, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1d, 0xe, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xf, {0x7, 0x1, [{{}, @broadcast, 0x4, @void, 0x15}]}}]}]}, 0x3c}}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0)
r10 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000001c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000380)={0x23900080, &(0x7f0000000040)=<r11=>0xffffffffffffffff, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r11, 0x0}])
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffffffffffff, "309390b0d92feb0557943bed71f980689eee70ec21ef88a2efb27061937ac21f", 0x8, 0x6, 0x7853, 0x1ff}, 0x3c)

1.948248062s ago: executing program 3 (id=635):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xac, 0x0, 0x7, 0x204, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x61d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff01}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6a9}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbbb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4005)

1.693032261s ago: executing program 3 (id=636):
syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000e0000002000000000000000000000000fc0100000000b58ebf210000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe00"], 0xf0}}, 0x844)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa4000000060a09040000000000000000020000007800048020000180080001006c6f670014000280070002405c4000000600044000080000540001800a0001006d617463680000004400028008000240000000002c000300346384ea362eefeec3c408bf3afba7aea68ac4de901d71dbb01843fcb3eaa0221283bd05c74e44300a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xcc}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0)
ioctl$TIOCGPTPEER(r5, 0x5441, 0x6f0)

1.433971642s ago: executing program 4 (id=637):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x8}, 0x1c)
sendmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0x10}}], 0x1, 0x45)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0xd, 0x3f, {0x3f, 0xa, "aee573ebd04fbd34d7ab481b594a9ddc73578ab50fa4f3ce24ae3c2b43debc1b5c6c58b4b01cf4e881a8612b9950c7c7e16fbe6cf250bd0f3d3b8df28b"}}, &(0x7f0000000540)=ANY=[@ANYBLOB="00037200000072032b4c79cade4df52fc27decd55fb8cd3300eae1065cbbb1e56a8e216f2d1effc0ed80eebbc6af4f16265fb19f272854da360f927a5214754a797c6177217fcc260300000000000000723573ccdeb50b32b34cfd93fc77494536e1796661659966aefe338b49631b48eef9be87b6e4bc06000000000000000000000000f88f5355af703df0e1a7608fddd1fa05a77cf3e37a794b66145ba2e75b823115e9c34e3283a67eaca1e08d5abc45985ce6e6578a50d30acf37a00b485e2fc8aabd2bc892b55507e8ebee94e797a2afb32088bde660f223a7"]}, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0x15, 0x42, "fd33b9c7add2c0aa703307bb7542ae29f8b3504f4fc8b718eef82c1bced4ed91baa3cf7315d1d8ef165bbefc0885a9a2ba17deb0cc7ca8e43188136a6649350a34c2"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x10}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x45e}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "e18ecf2877826ca97b7a89baf8ae2115566273c64453c261f9d40b38b12645c7c88c5d67975aa3bc87ab33da8e94ac"}})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0x7, 0xffff, 0x403, 0x3}}]})
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)={0x0, 0x5, 0x2, "bb06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.125331116s ago: executing program 5 (id=638):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10400)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0xc4f, 0x4, 0x1, 'queue1\x00', 0x4})
r1 = syz_open_dev$rtc(&(0x7f0000000100), 0xc00, 0x583000)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000240)={{@_ha_fsid={[0x10, 0xd]}, {0x9, 0x6, 0x7, 0x7}}, {{[0x9ba3, 0x3, 0xb]}, 0x0, 0x2, 0x7, 0x0, &(0x7f0000000140)=[{{@_ha_fsid={[0x4, 0x6]}, {0x5, 0x75dc, 0x3, 0x3}}, 0x7, 0x0, '\x00'}, {{@_ha_fsid={[0x5, 0x1]}, {0x6, 0x5, 0x1, 0x8}}, 0x862, 0x0, '\x00'}, {{@align=0x1, {0x7, 0xf95d, 0x7, 0x7}}, 0x4, 0x0, '(]]@:$\x00'}, {{@align=0x6, {0x0, 0xfffe, 0x5, 0x9}}, 0x0, 0x0, '@:\x00'}, {{@align=0x6dc822e1, {0x3, 0x6, 0x32, 0xfffffffffffffffc}}, 0x2, 0x0, ']\x00'}, {{@align=0x2, {0x7, 0x8, 0xfff, 0x5640a9fd}}, 0x0, 0x0, '+-\x00'}, {{@align=0x8, {0x5, 0x4, 0x1, 0x900000000000}}, 0x9, 0x0, 'queue1\x00'}]}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x5e, 0x36, &(0x7f0000000280)="d75124d6d6eb7aa2cc3d1d035db97985f9052f5107c9bf8841f36288ff475eb6564254962f6aef47dd007389a4210730028490d7c483323760fdb26774868b68d56c44c1d712d9aad4e4afc7b2325e992fd0b672d959caaff64d0d8c782a", &(0x7f0000000300)=""/54, 0x3, 0x0, 0xcf, 0x2a, &(0x7f0000000340)="229962e041db7b0f811d709ab40bc0276a15f6386e76a45196a0552c4670d75a22b6ba8e2b8f8a287c42a9b528919a7f1e2983641c1eb77a2c02eaa2a22e11a9a3a672b0cad4f5cfe646c02fe1a133986a84334e9ced2fa155ba8e18a729065330fbea512129c312fc05206ab2dad337ee568090fb4c182b170d7151fe0611a86d9ffd199f8486d31732e19d9fa7ff6367e2ed8a6cde3ca7d70561e2aede49162cd95186f958ef6b5cd1bcfb141cad5e34953d595a4780f018d84a874a4559052b184590c4c91ea1bdce14c7167b33", &(0x7f0000000440)="4681586f265bf5e9e3cb0b2e03d23179cc1ddb893e8a7a86b20e87e4c7d5e82197a6f48da635423e8eb6", 0x4, 0x0, 0x3}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x4)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpuacct.usage_all\x00', 0x0, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x240400, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000640)={0x1, 0x0, {0x1f, 0x1e, 0x7, 0xa, 0xb, 0x1, 0x4, 0xad, 0x1}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, r3, 0x4, 0x5}, 0x50)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000700)={0xfffffffffffff001, 0x2})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000740), 0x4202, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000780)="12911126718a10839076a8d7f61dda45bfd71bf61117fb9f830299a1ae971a1fb8e2830727367b430b2bc48c472739098d346d2afe277bba9eff383ea34f8164901353c1e6f2425a18434220d5fca83bab9548c14bf03914e2b93cbb2d50d268df5549e5f59fa691abea6455249f6c38e48e93c05574cd7d186c8387a22f33e7aa3f619672388de92e3dfb54b8", 0x8d, r2}, 0x68)
syz_usb_connect(0x5, 0x906, &(0x7f0000000b80)={{0x12, 0x1, 0x251, 0xd1, 0xa0, 0xa0, 0x10, 0x2040, 0x7300, 0x6473, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f4, 0x3, 0x0, 0xe, 0x70, 0x1, "", [{{0x9, 0x4, 0x1f, 0x8f, 0xf, 0x5e, 0x99, 0x95, 0x3, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xf9, 0x9, 0xbc, 0x4}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x5, '`5]', "ef5ce7"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xb5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x3, 0x62, 0x1}, [@obex={0x5, 0x24, 0x15, 0xfffb}, @ncm={0x6, 0x24, 0x1a, 0xfff8, 0x20}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xfff}]}], [{{0x9, 0x5, 0x6, 0x0, 0x70, 0x2b, 0xf1, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xfa, 0x51, 0xb6, [@generic={0xd5, 0x6, "a850e2243d8da7e7bea5d899973147899c676e0d2aa2a245af90ff73e42ee4296cebb2d35406f7ee7ea7c93b1ddc1c333345d3c15dd735d2c26767d49bb1814f31bb5f4e74fa44ae5c88fd59fe44298d4d269fdbdcf83484c13b1037c4cdb2e4832940e160e927d9b9f65ae8a7291e3e24c047fab99ae9bb25dcbb18522f678f5d8dab5f533584a65436d4cff463e6f17278971023314557033a71486328a24a04f303cb87a840bf106bb3ea8214e6425e1afa7b4ae90d5631815632d634a69bdbadade94c5bc527a1d7194da13af9eb5cf7c1"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x50, 0x0, 0xa}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x9, 0x4c, 0x40}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x94d7ebf0df12c5cf, 0x8, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe9}, @generic={0xea, 0x10, "ef4fb3be3a61d2d81ab786fc4828e3c22661bd69f79bfe06d45dcf31518c556cf564cb22f9a68d60f432f35384897c0cf99888b61840a2622fbbecb2dcfe79163b352d6332f19e167dffd9c4270977f4c7bfb322f760f904a294b3251163ca50579d523f4d74e0881b53849e844731671d8ff00a4594683b49732843084e52eecb55a7bb25d033257716e118b98b1f28fe9c548a8fd8cf348fcd8f5045a2ccf3070e8a688455efb87c6082de4f66fbef50ae3fa86fbdfdec9ff96565e414ec15376f27556997621692557b51427b2cdc1b4476aade463d8173e9f0aa165ff3e0928b3b3bab0558d2"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0xfe, 0x4, 0x3, [@generic={0xef, 0x7, "94574d26e890fdc839adb669084c79e442119a5c02175324fc60d2a2f8be9fb3f548d25d00a6bbe19d98b8ffa63708b2bded5982b08fd136fd4ad6e50bf100bfc110f5d0171f57cd592ecf2f4053859622531bf438c84c96ced497f89a1684dc62617bcf989650af51d07e7b26e9893a3532a43831c955001b26cc880e8567694d6a163eb511575189584e4b88b39539cd114af819b131afe8813008883ca29a8dd18e357ab9824de004bd2b260a0c94cfbe84d2da48d0ec47f735407c8ebdf090a7a017ee86bd53ea65a642c42b18e760f231eff0ddcae1b3698b536d7e1085da8daf8b3a0ed9f5cf5e40eb05"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0xf9, 0x0, 0xec, [@generic={0x4f, 0x22, "0b0a67d35ae52f2b4c20ab4ae732f0a65fa3b5105f15ee0507cb6c069719795f489bba692b277cdf177c01ad463d7c1e6d06914e4e054f9a9274a4b296af10c4b30b78f130e811b5cc77693748"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xda, 0x2}]}}, {{0x9, 0x5, 0xb, 0xc, 0x5c5594308115ff75, 0xc6, 0xfe, 0xf7}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0x7, 0xd, [@generic={0xc9, 0x4, "4f5b3cbeb9e2cb0147befb504b40e5fd47bb7fc8acfe7181f8dc99104b048ce817170f90fe92712fe01e3b6b0b15ee3e8064ebee0fa3a919fd16162d5853bef49156b3b2e9485486309db2436e9de97668ede950a455cece20d563809f2b79be2ce10aa80de3059d12f2c59047bb9daa9f190388062c0e528a0b9f6449d6581b42476f0719d706f07d0781378446edfc37ac4309412bde9f7abe18f14d795958e0149b3ff8c4b33dce9c87eada6139a4242d438320c1495c836a09076223838e506aea22a96a02"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x8, 0x56, 0x1}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0xd, 0x5, 0xa7, [@generic={0xc0, 0xe, "046c9410433a194ccf72918918512ff6616db0789580a18a81193babd9d61b1e92d091ddde972f5b072947ffdad473115aadbcdb579bde5a7aa4d31de8fa5e0b7fdc7005d4adfac8f5c9cb2ace901a6659cab33258be59228e54740579b8294a66f0e49ddc4245891802eb2ed7fc5926cf2bba9225c5bf84a378ddebce415a655ccea1c94a8c526145494105b538310741141763265b09eb9b6a63d8806900b784c9ac9f0db2b9449a098d82f4da98ecc0e7adae483e2873ff6cb74e9f9f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xc, 0x9, 0x7}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x5, 0x7, 0x88, [@generic={0x43, 0x4, "60b0e752c526a0a44581a73cfe2ed9b2ae4b94ab1c01dfcc6c2cbf629d1a8aa5169ce6db19e7cb13b6f7a46d202e9e05fae9a182699c4612208b0c7564bbb13983"}, @generic={0xcb, 0xb, "458580d9ce4aba483e9653d1d5f4b9c445140b0fccd7d6e52277b2a3dab636bc9fa0789262d0405af6ee770f0c2364c4830d011d167cbd12be3a5d3b3fc3d59ad1d030a9c3d2b0190eb7e91dd0bdf01489b7dfee2ca01ef191b96c31f57cdf4f1b098f523e96e1c22dd68fa5abc5ac092a50491f9e79b2ef48edd9bc9ac9341264b58ea7bbe1e96b5f1510779e36a41a694669e97908ff916869b7d6fc9510842129179b3fb1033badcac144b8744a3aaad13ac83f54ae4f471b4acd9ef20bc3b6c1ce546b90cb9b09"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x2, 0x0, 0x4, [@generic={0x38, 0xe, "b5898663433689820cffb74d752154782dc1cfd1461dd66107d0645a973a2bfc1455ea55537ab497abf24e27dc4ed98eeb22c42b55ce"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0xda, 0x6f, 0x97, 0x7, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "d69027d7"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x200, 0x9, 0xff}, {0x6, 0x24, 0x1a, 0x1000, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x3000}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9a}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0xa5, 0xf, 0xf9}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x20}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0x2, "616ef667e7c6"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x3, 0x2, 0x31}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x0, 0x8, 0xce}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xc, 0xff, 0x6, [@generic={0x88, 0x9, "a56f26e97e489622e57b8819de2eca749ff2c83421599150a1c898aca4b5703d83ffeec88875c2179023dee5618bd15df7cdebc35247e0771c605767ede1c1d4aad43bb3e418bce3f2c01ddac0f54ff861bcf7763ec235d708180716536151b93e7d1ffa47a2b13b4d6ff646315aba1404a53b5d28413972dccd15fe858fbf374c84774de817"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x5, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x84, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0xb, 0x2, 0x5, 0x59, 0xb4, 0x9, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x4b}, [@selector_unit={0xb, 0x24, 0x5, 0x5, 0xc8, "92192f102c19"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x2, "1bcc6b02"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x5, 0xe, 0x8001, 0x7, 0x9}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x20, "f6bfbfc52d85"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x402, 0x3, 0x74, 0x200, 0xe6, 0x80}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x4, "7adb07d5b4"}]}], [{{0x9, 0x5, 0x0, 0xc, 0x8, 0x35, 0x6, 0x9}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0xb, 0xff, 0x9, [@generic={0x2, 0x11}, @uac_iso={0x7, 0x25, 0x1, 0xb8f55358789e620b}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0xe, 0x4, 0x9, [@generic={0x66, 0x11, "f1fab4203b5c3e3915c08251535324cc9caa213e5e08b65ebac00f73b39aa783b4ce7fd8774bfe2c8c7fa30e719e403c03621337e8ea4f582aa0314c9d6b0b61d05024a164be96c2058fe7eaf5fec135ae2b60c659fa1d89b1d132a3f20020b963b1e250"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0xab, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x51}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x6, 0xc, 0x6}}]}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x200, 0x80, 0x9, 0x6c, 0x40, 0x4}, 0x94, &(0x7f0000001680)={0x5, 0xf, 0x94, 0x4, [@generic={0x7a, 0x10, 0x2, "f27104780046ddf4fce80be45c5009eecc2b7f6e9d7cfbdc3118e1947ad9b49c7cad070504db1dd8837781e7a72aee03e6d2048420029a1514224b3e683bf602e4845f7b435feb2c2ed4a894797ff4ee7a699e727013a986cce4f1676d3ffb0e3e3ec4698c77d3101092bdea2ca4d309ee084f896227bd"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0x319}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xff, 0xa, 0x2, 0x7}]}, 0x5, [{0x39, &(0x7f0000001740)=@string={0x39, 0x3, "e78600bceaa0313cde2be38ce4fe7bd427e94f227d7c9720630ffd7b03b10b8387c3225a6a5794c31ec312282dd51885827201de140db8"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x2401}}, {0xbb, &(0x7f0000001880)=@string={0xbb, 0x3, "bdbc93af8d85c2185c5b62f49c40e37239b56955533b08e5c103df751dbeadcd51e29b8d6743bac064c8aae95f02c8952d32cad0a1319dc74c57bebc872700ad25e9a401e881f78469b0e6b70a12524b98e998712a7d39ca35444137003be0faa8a0eabf926fc50b9fb9f63c487eb10ede12ccd8a970ecc47b1dd6c8e13844c20a8f1a3bc28cc3be0b266b09be13dbbffdac1bd2379a327e524548bcf4fe4d07bbf56382209a410159927f2ef72205386c1e6097370bcc5034"}}, {0x2, &(0x7f0000001940)=@string={0x2}}]})
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001a80)={<r5=>0x0, 0x9}, &(0x7f0000001ac0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001b00)={r5, 0x3}, &(0x7f0000001b40)=0x8)
setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000001b80)=0xfffffffb, 0x4)
r6 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000004440)=[{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001bc0)="4c6e97c415ef3921e23830112bebeba0e9532d78c5496a7a37860be38e5373962d90fb6630c34c22a7821f7fca2763f2ef49eeccee287b482b67562d4ce95a7e2390bea78623bec5177919d9efec97a36d1a72905cb30a6b1f6fd1fcf9314370ef68c12991f861b12e51f55d7f8617ca22e0baa669a7a8dde0958d8ed608b9abba4ff081e421688ef93a2831cfc6d6bda349639766b23555921736e16140ff51e7aa893815", 0xa5}, {&(0x7f0000001c80)="4bc44ce6127fde2b7685847425922aed0b111b30e85755e99a7503691949e942d18617c0abf3e11c117d0e89be319825cb9e573ea06c1c03ed1fe1bf1489c4c658bd6e6a23b7e9bf45bb609e61178c26ad4d52f285eb7e8fbc0eb82d1ee887172757c56bf556c640cfcaa861fa5a3070211e182abaccd5ab33591938177f3fa7c2b5371ac2a0204c409e7cc0e14d991503dfc7e28a59429eb57b0dacd7149385073f42152bf8052cb6bdc23cf9cb6c7bb915c72095", 0xb5}, {&(0x7f0000001d40)="c3085b73e9ee323863417409681892dba8fb35115eb4b75dd0f1", 0x1a}, {&(0x7f0000001d80)="359736d562ebe4a6dcac26e5eb64fa5034c8396ce6d2623426b11f8578bfbd35af162d1d0a7741894c4f3325b0fc5a6c50237e69b7647825be7871fb77f23000724ec4898c21ab313368aa5354a1113a73868201fd38095e681750af6e0ed927e1905555c109205d4c60f80986da00e723679a25cf3c501cf4ff76b5bc9b54d8d46134778e16ec6994414f685577ed", 0x8f}], 0x4, &(0x7f0000001e80)=[@iv={0x28, 0x117, 0x2, 0xe, "cba6b36c1ccd4a75c903e3bb1407"}], 0x28, 0x4004}, {0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="b1d23209da52f577fa4e97abbc38b044aa1017b43c8e4b72bf67483ec9bc172dcf5f5d31454e3731d9f8279caf43fa9e519b4d82d82b33ec4eb3e927f20c8085396df18121bc54696abf6f25025ddcaebf", 0x51}, {&(0x7f0000001f40)="65d4aad75edff071fba4f2288680c32ed90d2224d78e3c19b1e4aab2ebca2a8e5885f2ecc8999e52aeaacc5283478f9bd4f593b76fa2f6acf58cb0c112e72ae0f570876fa7c2f0d571b6183c70a443338a53d9114940e1e27719f31f41d2f17f1d", 0x61}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="0a981bdc4d9cee94efc64b81b43f138f9b505031a0fe78a6c68d627522a5ce72978a08f49e1625ffe9fb8b955de18c626329b4fd6b85b4d90083c452679000c1af26ea66c6e76968d973d036275207b66cb6639d876274ef74a15ffebbdfd8d6d1980d854b73f95633930b95c0537a11807c882d9c4cb01cc7c09410a383a30e628c166e5946871d0395bdff038426c65720c0f493c6b52005ab60a7b5a2afd9c5cdb963be11d5a043e7e24af0defa41fdf6ec36e55bc46b37db74ba52b308", 0xbf}], 0x4, &(0x7f00000030c0)=[@iv={0x70, 0x117, 0x2, 0x5a, "d188ee9cd26547655ee7c77e431195671cc07beb2f1e2e3300b32cebac5d8950ed40d4620eef434cf02ed5bee9e6c0cd58eac27bc053c9af69b43e0bb5fe7c7ccf2961799931efa6dd069c5bf9c5b73db1041017b250de1f4ee4"}, @assoc={0x18, 0x117, 0x4, 0xfff}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x98, 0x117, 0x2, 0x82, "f338e1a259d93f62a52787ffafa6d46b2b5389c169d1f05f68ba606ff00ee330dbd8b3899b3a6ab919a9f7de6801b9d981ad23a8457f3da568d4fb9d32cc12686eb6d1d488fca811bd790112c4e2f788c5dc853f9ffe9ee1a10bf8775a2caccf7bbb092c2939da3bc4d14f96a02e3f5f996ae852dbc7ba4eb24797b519f4712d35d1"}, @iv={0xf0, 0x117, 0x2, 0xd7, "a8e260befbb6863771684a0273ea02cede89a5220715474622cc8da2277d133d7c347a40cfda3aba9b4814dfc3c7e194b3c52f1fa2b5816dcb87e6884bf122ade751256d01ae9896a9e684d6796315b0da9ecbb43201b01474c1028506550689fb1329ab9f0e58ff82b1f441aec8e9ebcf82723fd50a50885eb4995f9a1c97ac4260a8309a45fa890c4473ea569bcda520a0aac01859742fbbd380160d8d81a46d6ff49f566b0bd97f592ef0e570cf65e8d7584e096f42601d41cc691cfe74dae57db64b2f625d125572e1da0541d9c82612cd11a7748c"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x96}], 0x258, 0x1}, {0x0, 0x0, &(0x7f0000003640)=[{0x0}, {&(0x7f00000034c0)}, {&(0x7f0000003600)}], 0x3, &(0x7f00000036c0)=[@iv={0xe8, 0x117, 0x2, 0xd4, "782be592b04a4d0e99c3ccf0a17526d207a6ce46c034bffb1079227abeb353abde8e3cdee455aa73aaea126e4484a8b23e5319c62e2d0c442305aa5a0ffd4131f58a3f3ea890cea49da5510d1bf651d089bcec2f5654f7400b76ad08bfd23034b9d694623d6235cc62f3615998e84d8bbb0dc6670420a75cfc0a86918d7518cae4585348c96cba0ae3543055ac6230abd81154ff452f5d006db41ef24c0205b69c35027e3fdf16064934b0ce26a2f6ac1afb92f10ac26cfb3716c033de1f86a8fb4bb3058ebbc7c0f1f3b01a137723311622695c"}, @iv={0x48, 0x117, 0x2, 0x30, "5c2c9bbcffe2bf5d021dff5e378805872650d4077fb28218f54de8dd499bc2d3eedc63aca2437de027ee782605576ee0"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8001}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x1d8, 0x20004008}, {0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000038c0)="51ef0ecfd395d3f72654b8a354ca8ef960d435ff816b022395a8dd2ad64f360ae8301880ff5b06233582b90a9bc471e40646900ebcb55c2d10bb6585acbd5898f258d17d9b2be0c2e9f7c04a1e7d8f4712bb74ddc42eb38f621754b3d9e8f9cec0a2b2fe86fbf9a0fd32a6b129913ba466f29685fbaaa6d36bc8cd21ebf91fecc4f66e2aeb9441fe609b8e73951c4b95b01dd0f00c7903fb024b", 0x9a}], 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003a00)="2ee2b667d6b2427e570c57785c3b97b75eec13cbeefcce7e23ab54d3d62c149f4f1122a84b68536ab5bea72ba21cf1cf176e71edee814b8c7e7a68a81df7ad258a80cf", 0x43}, {&(0x7f0000003a80)="28cf6e8af4ff932930cf395d3f43aee3cfc34d5ca399bc7ae5d1a495f63fa72c29fa22d6c4d7892d9899d7a25539b0b93af9cf24a1b2b96da3d8c58487c5ff9cf4834585efbf2b29b6d55ebc37d7e15f1282153ccf85b4e7de70c5185023b7e2bd743404b8732d675f88bdf378069bbef8795c043fbcb854892eb261230d6b536a357225cf73786573cbe86515016a28b3443dcfaf5e33f7b4a67636140c5794a81b4524f1d4de4ace494aba1557194f1ece8abd", 0xb4}], 0x2, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40004}], 0x6, 0x10)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000004600)=0x1)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000004640)=[0xe32, 0xffff])
openat$tun(0xffffffffffffff9c, &(0x7f0000004680), 0x40000, 0x0)
r7 = add_key$user(&(0x7f00000046c0), &(0x7f0000004700)={'syz', 0x3}, &(0x7f0000004740)="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", 0x1000, 0xfffffffffffffffd)
r8 = add_key$user(&(0x7f0000005740), &(0x7f0000005780)={'syz', 0x1}, &(0x7f00000057c0)="681910912a80c34526b124d6b2db92207d6a25e454254fd6f590953c1a418447f23b", 0x22, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000005800)={0x0, r7, r8}, &(0x7f0000005840)=""/57, 0x39, &(0x7f00000058c0)={&(0x7f0000005880)={'sha224-ssse3\x00'}})

621.060285ms ago: executing program 6 (id=639):
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000260020"], 0x24, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0xce, 0xf5, 0xbf, 0x40, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x61, 0xd, 0x2, 0x2f, 0xa3, 0x68, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x40, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x5, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000380)={0x1, r3})
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r3})
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000)

406.146806ms ago: executing program 4 (id=640):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x8}, {0x15, 0xa, 0x8}, {0x5, 0x2, 0x3, 0x8}, {0x421, 0x9, 0x4, 0x80000001}]})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140))
socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x1, 0x1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x2080483)
pwritev(r2, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={<r3=>0x0, @remote, @local}, &(0x7f0000000600)=0xc)
sendmsg$inet(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="7de8017335b1f397261682312de4a8f02682dad5c1a1bc37e5affcf12f0e9389c424e5bde4ddf40f5e1c22f551dd205d3d6e7895fe485f3593e5191a5dfd411840c6f6a670302fba2036b822a5785ee81408eb87f1821d74386754cc7fbea968194344b7ee56f7c2c3e82ead44563b1f4730e8830adbe331e3bcfbd7492bdd9d3710a00be42394", 0x87}, {&(0x7f0000000300)="c82c011381e5d9abe5100c1353cd8d50a398751a311d7aa88f4c244fde66f32230b86686347a9d91af75a148a4e773829d16e5df80e3358d65387f32813862fd74de4b94f516c47f46b7087c0c5089eed44e65a4a13b31d0ac847c23c4ea348eaaba44f63ec35e1cea22c554c8ec45004bbc4ca9495b12107db026d07d63f002c2efc9dffef650d389cece9217b5bb389d935937c65e5b287205b4343e1c002af0550a137fa29120c230adf437dd88612cb6", 0xb2}, {&(0x7f00000003c0)="d6f40d77f926a0427c64cc021c4b22701f12fe4611d858de326ca62044545c0ab6442cbda0e26440155852dc855b97649b8cf7919e0880b2069318c85a3c70e0f1e4f82fe42100997d1e4bc06bb7e1504e0e8329fe19a5ba207f8c47ed160e1c88625c4d81cdd4285e5ffdd6b89730670b364fbd26c41840d93ef723ab4e73a9799277a6d904ebd224c74e2f090736018fc315f37b5edb", 0x97}, {&(0x7f0000000480)="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", 0xfb}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"/396], 0x2c8}, 0x20000091)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=@deltfilter={0x100c, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x27c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x250, 0x2, [@m_connmark={0x13c, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x4d, 0x6, 0x1, 0x3ff}, 0x80}}]}, {0xee, 0x6, "f6f50e4f1209659002552e754117d02f6a15ff482c3c396f14a1f4ac27144e0c93e17a1024f3b75c46594d18f8d55845f2172099bba57e57aa1bfd7a277fc130e4bd9b6e419a497e4332ece0da1f0f4a2f2b270dd69379e6e706dd97c6343857be0c8a8de492f828efb2f6dcce47bbc145b1707da9f1fb56830774252588a187ecef0c9e7657235fc43a5eea9754bd2907977e13f7b6506311824636ba267c23556ec56793c72708a1ced9ed89e9e5b4830fdb2b84b25c28d60b3e42179d07e8c7c135e3ca7067087d65fe82416dc1b22141cc48d4ecbb67957af7432a61d87a8ba725e4251424a70982"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x110, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0x4, 0x3, 0x0, 0x7f}}]}, {0xcd, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91f782136cdc0714b85775a04918ee4cc6888787bef8a7ea2ff8719f6ea958d1c3bf43b9dab1460884c3fd5343c0ff92e083c9c4643b86542ab19d54d274212f9a29de4e77dbd8df27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xb9, 0xa0}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_fw={{0x7}, {0xd18, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7fff}, @TCA_FW_POLICE={0x90, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc0000000, 0x6, 0x200, 0x5, 0x60000000, {0x6, 0x2, 0xa, 0xd90, 0x80, 0x5}, {0x40, 0x1, 0xc1d, 0x1, 0xf, 0x9}, 0x3, 0x2, 0x7ec}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x799b}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_ACT={0xc7c, 0x4, [@m_sample={0xb0, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x1, 0x2, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x61, 0x6, "3558972b1d9f6007bbd3a3283f577d918ef1a576dfdf58bb0d7fbb880ed8ab30a304f4ce84ca4ab5151cbc2c9cb50453f02720fc358f7785d48dc196372e0e6c46908e9b018af2f9edd2d41b1f60ed83ca61a94a8acc430fd26134690d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x84, 0x1b, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x80000, 0x6, 0x2, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x6, 0x20000004, 0x8000000, 0xb}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xd}]}, {0x1d, 0x6, "333cc4040022300168373969c5f4ec7a4a727ac432224428fc"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x110, 0x4, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x10000000, 0x7, 0x4}, 0x2}}]}, {0x89, 0x6, "4ab03eff3c68be50a991b54f4d10a72e909bd895ae854440523f5c63582897176d736301ccd734b5ec00894b91930a5ba978cef9d56f22152aa140b042d6cab7bdcfd552f074cba7b04ca004be6d645ebf3ebe56b781edc688104a02788643229584f10eb3320929ba57fe6710c668f9178c5729f52fa0bdc3c0ed3c033524727e932f5691"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x95c, 0x3, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x900}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x4, 0x1, 0x1, 0x3, 0x9, 0x9, 0x80, 0x4, 0x8, 0x3, 0x8, 0x8, 0x0, 0x3, 0x0, 0x9, 0x0, 0x4, 0x7, 0x3ff, 0xe, 0x1, 0x5cbb, 0x5, 0xfffffffb, 0x0, 0x486d, 0x3b, 0xd, 0x5921, 0x455, 0x81, 0x101, 0xce, 0x7, 0x4, 0xfffffffe, 0x4, 0x4, 0x0, 0x9, 0x7fffffff, 0xfff, 0x6a5e, 0x2, 0x6, 0x5, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0x3ff, 0x328, 0x4, 0x7, 0x1, 0xc0, 0x5, 0x8, 0x7, 0x5, 0x6, 0x8, 0xffff, 0x3, 0x6a0, 0x2, 0x300, 0xfe, 0x0, 0x2, 0x1f9e45fd, 0x80000001, 0x0, 0xfffffffe, 0xa0d, 0x7652, 0x8, 0x7d53e2f, 0x9, 0xfffff897, 0x0, 0x3, 0x2, 0x5, 0x1000, 0x6, 0x8, 0x9, 0x40, 0x3, 0x8, 0x41, 0x8, 0x8, 0x353, 0x9, 0x2726, 0x40, 0x10000, 0x5, 0x6b7a, 0xcf, 0x401, 0x7, 0x40, 0x18000000, 0xad6d, 0x6, 0x7, 0x7, 0x6, 0x5, 0x0, 0x400, 0x2e74, 0x1, 0x4, 0x5, 0x6, 0x101, 0x9, 0x2, 0x80000000, 0x8, 0x718, 0x6, 0x100, 0x2, 0x100, 0xa, 0x1, 0x1, 0x7fff, 0x1ff, 0x3, 0x9, 0xfffffffc, 0x1, 0x1, 0x9, 0xc86, 0x5, 0x10, 0x6730, 0x2, 0x3, 0x400, 0x5, 0x7, 0x3, 0x5, 0x6, 0x7, 0x6, 0x0, 0x1, 0x0, 0x7, 0x7, 0x7, 0xffff, 0xffffff96, 0x3, 0x4, 0x9, 0xe2, 0xf, 0x8000, 0x8, 0x40, 0x5, 0x10000, 0x70301c7e, 0x4, 0x650, 0x7, 0x3, 0x1, 0x7, 0x8, 0xeb20000, 0xfffffffd, 0x2, 0xd, 0x6, 0x1, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0x7fff, 0x0, 0x80000001, 0x7ff, 0x4, 0x7, 0x10, 0x0, 0x0, 0xfff, 0x3, 0xffff, 0x34274000, 0x13, 0x1000, 0x400, 0x9, 0x80, 0x0, 0x3, 0x9, 0x7, 0xe26b5720, 0x1, 0x69ef, 0x7f, 0x40, 0x9, 0x5, 0x1, 0x299d, 0xffffffff, 0x2, 0x4, 0x41c, 0xfffffeff, 0xa3, 0x7, 0xfff, 0xd1, 0x7f, 0x0, 0x7, 0x7f, 0xb, 0x5, 0xffffff98, 0x51, 0x16f3, 0x2d, 0x5, 0x9, 0x7, 0x5, 0x8, 0x9, 0x1000, 0x7ff, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc64, 0x101, 0x80000000, 0xa4b3, 0x3, 0x6, 0x0, 0x7, 0x7, 0x8, 0x9, 0x4, 0x5, 0xe, 0x5, 0x5, 0x8857, 0xf3fd, 0x9, 0x3, 0x1, 0x0, 0x577, 0xb497, 0x9, 0x5, 0x3, 0x7, 0x0, 0x5, 0x9b8, 0xa26, 0x6, 0x8, 0xfffffd33, 0x6, 0x9, 0x53, 0x80, 0x0, 0x7341, 0x1, 0x11, 0x2, 0x800, 0x8, 0x7ff, 0x8d55, 0x6, 0x1e7, 0x576, 0x1, 0x1000, 0x5, 0x6, 0x40, 0x8, 0x6, 0x7fffffff, 0x8, 0x43ed, 0x1, 0xca4, 0x2, 0x8, 0x9, 0x80000001, 0x1, 0x5, 0x3, 0x1, 0x200, 0x8, 0xfffffff9, 0x0, 0x200, 0x3, 0x9, 0x10000, 0x100, 0xdc, 0x8, 0x4, 0x2, 0x40, 0x100, 0x200, 0xffff7de8, 0xff, 0x80, 0x8de, 0x5c, 0x3, 0x0, 0x6, 0x900000, 0x8, 0x8001, 0x6, 0x2, 0xfd44, 0x9, 0xffffffc0, 0x8, 0xfffffff7, 0x3, 0x7ff, 0x8, 0x6, 0x2, 0x4, 0x5, 0x1, 0x400, 0x886e, 0x4, 0x4, 0x9, 0x868b, 0x96, 0x14, 0x9, 0x8, 0x2, 0x7ff, 0x4, 0x3, 0x2, 0x1, 0x9, 0x28a, 0xd0, 0x4fb, 0xfff, 0xfffffff8, 0x2, 0xd, 0x800080, 0x77ff, 0x8, 0x5a, 0x5, 0x388d, 0x8, 0x9, 0x80000000, 0x168, 0xb, 0x39a, 0x98, 0x7fffffff, 0x4, 0x1, 0x1, 0x9, 0x2, 0x1f5, 0x8, 0x10001, 0x9, 0x3, 0x9, 0x6, 0x3, 0x2, 0x9, 0x400, 0x4, 0x5, 0x1, 0x1cfd314a, 0x74a, 0x9, 0x1, 0x2, 0x5, 0x2, 0x2, 0x9928, 0xfffffffd, 0x9, 0x4, 0x1, 0x6, 0x3, 0x3, 0x5, 0x0, 0x8, 0x9, 0xdfa, 0x7606, 0xffffffff, 0x5, 0xdb, 0xe4e, 0x9, 0x36, 0x651cc6b7, 0x6, 0xa24b, 0x4, 0x9, 0x4, 0x40000, 0x5, 0x9, 0x5, 0x7, 0x6, 0x6, 0xfffffff9, 0x8, 0x5, 0x2, 0x16, 0x7, 0x4, 0x4, 0x4, 0x9, 0x0, 0x72, 0x9, 0xb1f, 0x0, 0x6, 0xaa, 0x8, 0x7c0000, 0xd1, 0x80, 0x5, 0x3, 0xfffffffe, 0x1, 0x9, 0x8001, 0x8, 0x3, 0x80, 0x7, 0x8001, 0x0, 0x4, 0x7, 0x1, 0xffffff47, 0x9, 0x66, 0x6, 0x7, 0xffffffff, 0x6, 0x8, 0x7ff]}]]}, {0xe9, 0x6, "1d1de7aba0713576012299beda86a04a8b4c983c930a1fae15901338446db1b203d225ce83e6a483e9e27cd13f2f39004f16516436c9eeb1c38faf575ca44fdfb1fbab8f80ee3062342a18a47e386219a9b1938e118c368b4ca4fe87c82468d976b7e18973b9cc8fa05acfdf4f7c314fe8ba6ec138bc6edca7a359eb737dd7d47519f169f72afc29fa46c29d0a4f2709c1b90d45cba2732b676d50ff5ff8d00c59cfa049aa3724399e30062cb092d5674ae07506b5fd5795f056388fdb89d06a91b0c15bf907717b5ef9c470fe5b5a4dfd9ac2f505f162999c79fc88cdd8c10a0507257cec"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_vlan={0xa8, 0x1b, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x69, 0x6, "73035b7561561fedafbe89a5a4d17a05788b504cee7dd1059948d4099054b2af7e0855020c2979cc3e16ceef5a82d6d0686cf3f9a93f87b7c1f15e0c485014d055086e7642595338e58291efc9dfe18251b71d071fb18e775fb5d317762ded344991cb2d33"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x30, 0x1b, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x100c}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
io_uring_enter(r4, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, 0x0)
add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)={0x4, 0x0, @auto=[0x37, 0x2b, 0x23, 0x35, 0x2f, 0x21, 0x26, 0x2e, 0x36]}, 0x11, r6)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x10b, 0x0, 0x80000006}]})
syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

187.104272ms ago: executing program 3 (id=641):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x400c044)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000020509400c0904080601ff8bbd020a240107000d02010205240503", @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYRESHEX=0x0], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250200000040000180060001000a000000050002000400000014000400ff020000000000000000000000000001060005"], 0xe4}, 0x1, 0x0, 0x0, 0x801}, 0x40000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb}, {0x7, 0xf}, {0xd, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000fedbdf250b000000080003000200000024000180060005004e23000008000300ac1e0101080006000200000008000700", @ANYRES32=r6, @ANYBLOB="052400e4006e7bff004e4a0000000000"], 0x50}}, 0x4000000)

0s ago: executing program 1 (id=642):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x684040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00')
exit(0xffff)
read$rfkill(r2, &(0x7f0000000440), 0x8)
r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000f53000/0x4000)=nil, 0x4000})
r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000480)={0x0, &(0x7f0000000180)=[@rdmsr={0x66, 0x18, {0x40000092}}], 0x18})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x400, 0xfbf, 0x80}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

99de99 code=0x7ffc0000
[  181.599412][   T30] audit: type=1326 audit(1785246303.285:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.339" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979099de99 code=0x7ffc0000
[  181.631541][   T30] audit: type=1326 audit(1785246303.285:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.339" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979099de99 code=0x7ffc0000
[  181.665919][   T30] audit: type=1326 audit(1785246303.285:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.339" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979099de99 code=0x7ffc0000
[  181.715435][  T996] usb 4-1: GET_CAPABILITIES returned 0
[  181.733677][  T996] usbtmc 4-1:16.0: can't read capabilities
[  181.740461][   T30] audit: type=1326 audit(1785246303.285:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.339" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f979099de99 code=0x7ffc0000
[  181.786062][   T30] audit: type=1326 audit(1785246303.285:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.339" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979099de99 code=0x7ffc0000
[  181.824891][   T30] audit: type=1326 audit(1785246303.285:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.339" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979099de99 code=0x7ffc0000
[  181.996802][ T7039] program syz.3.336 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.073743][  T996] usb 4-1: USB disconnect, device number 30
[  182.236574][   T29] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  182.327197][ T5709] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  182.386576][   T29] usb 2-1: Using ep0 maxpacket: 8
[  182.386591][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  182.401094][   T29] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  182.410357][   T29] usb 2-1: config 0 has no interface number 0
[  182.416691][   T29] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  182.427572][   T29] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  182.439383][   T29] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  182.450452][   T29] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  182.463620][   T29] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  182.472901][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.484930][   T29] usb 2-1: config 0 descriptor??
[  182.492906][ T5709] usb 6-1: config 0 has an invalid interface number: 70 but max is 0
[  182.502891][ T5709] usb 6-1: config 0 has no interface number 0
[  182.508378][   T29] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  182.509963][ T5709] usb 6-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  182.531399][ T5709] usb 6-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83
[  182.543513][ T5709] usb 6-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64
[  182.554858][   T10] usb 5-1: Using ep0 maxpacket: 32
[  182.560529][ T5709] usb 6-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  182.574344][ T5709] usb 6-1: config 0 interface 70 has no altsetting 0
[  182.583115][   T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  182.592416][   T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  182.602397][ T5709] usb 6-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[  182.616503][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.624730][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  182.638079][ T5709] usb 6-1: Product: syz
[  182.647966][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  182.666128][ T5709] usb 6-1: Manufacturer: syz
[  182.671025][ T5709] usb 6-1: SerialNumber: syz
[  182.675892][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  182.688240][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  182.702655][ T5709] usb 6-1: config 0 descriptor??
[  182.710027][ T7060] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  182.711141][   T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  182.727175][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.758566][   T10] usb 5-1: config 0 descriptor??
[  182.778238][ T5357] usb 2-1: USB disconnect, device number 26
[  182.807644][ T5357] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  183.002316][   T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  183.035773][ T5709] ti_usb_3410_5052 6-1:0.70: TI USB 3410 1 port adapter converter detected
[  183.074361][ T5709] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  183.114680][ T5709] usb 6-1: USB disconnect, device number 10
[  183.150721][ T5709] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  183.165253][ T5709] ti_usb_3410_5052 6-1:0.70: device disconnected
[  183.199247][ T7080] fuse: Bad value for 'fd'
[  183.222983][ T7080] loop4: detected capacity change from 0 to 2640
[  183.234166][ T7080] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.255850][ T7080] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.264276][ T7080] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.275345][ T7080] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.292321][ T7080] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.315045][ T7079] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.328049][ T7080] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.338381][ T7079] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.359435][ T7080] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.368904][ T7079] Buffer I/O error on dev loop4, logical block 0, async page read
[  183.377616][ T7080] ldm_validate_partition_table(): Disk read failed.
[  183.390353][ T7080] Dev loop4: unable to read RDB block 0
[  183.413331][ T7080]  loop4: unable to read partition table
[  183.428879][ T7080] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[  183.443088][ T5709] usb 5-1: USB disconnect, device number 24
[  183.462881][ T5709] usblp0: removed
[  183.638839][   T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  183.797209][   T29] usb 2-1: Using ep0 maxpacket: 32
[  183.814230][   T29] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  183.840956][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.850349][   T29] usb 2-1: Product: syz
[  183.854803][   T29] usb 2-1: Manufacturer: syz
[  183.860433][   T29] usb 2-1: SerialNumber: syz
[  183.874218][   T29] usb 2-1: config 0 descriptor??
[  183.891472][   T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  183.908732][   T29] dvb-usb: bulk message failed: -22 (4/0)
[  183.925313][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  183.941795][   T29] dvb-usb: bulk message failed: -22 (5/0)
[  183.954835][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  184.001882][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  184.019744][   T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  184.037651][   T29] usb 2-1: media controller created
[  184.095689][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  184.112707][ T7085] dvb-usb: bulk message failed: -22 (7/0)
[  184.145172][ T7085] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  184.169093][   T29] usb 2-1: selecting invalid altsetting 3
[  184.184257][   T29] ttusb2: set interface to alts=3 failed
[  184.195654][ T7085] ttusb2: i2c transfer failed.
[  184.284417][   T29] DVB: Unable to find symbol tda10086_attach()
[  184.303063][   T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  184.331025][   T29] dvb-usb: bulk message failed: -22 (4/0)
[  184.347549][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  184.376722][   T29] dvb-usb: bulk message failed: -22 (5/0)
[  184.392852][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  184.421172][   T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  184.451766][   T29] usb 2-1: USB disconnect, device number 27
[  184.544146][ T7104] vlan2: left allmulticast mode
[  184.550015][ T7104] bridge1: left allmulticast mode
[  184.583139][   T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  185.036712][ T5709] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  185.228224][ T5709] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  185.279317][ T5709] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  185.321813][ T5709] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  185.337813][   T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  185.359327][ T5709] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  185.383161][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.455892][ T7113] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.844475][ T7130] raw_sendmsg: syz.3.362 forgot to set AF_INET. Fix it!
[  186.003927][ T7132] bond1: option arp_all_targets: invalid value (1073741825)
[  186.053945][ T7132] bond1 (unregistering): Released all slaves
[  186.236529][   T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  186.399748][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[  186.410450][   T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.423285][   T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.441471][   T29] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  186.451132][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.460721][   T29] usb 4-1: Product: syz
[  186.464993][   T29] usb 4-1: Manufacturer: syz
[  186.466578][ T5627] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  186.470872][   T29] usb 4-1: SerialNumber: syz
[  186.501473][   T29] usb 4-1: selecting invalid altsetting 1
[  186.517505][   T29] usb 4-1: unit 6 not found!
[  186.573947][   T29] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  186.621795][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.646695][ T5627] usb 2-1: Using ep0 maxpacket: 32
[  186.658417][ T5627] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  186.672724][ T5627] usb 2-1: config 0 interface 0 has no altsetting 0
[  186.680494][ T5627] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  186.690271][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.708953][   T29] usb 4-1: USB disconnect, device number 31
[  186.711942][ T5627] usb 2-1: config 0 descriptor??
[  186.804823][ T7154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  186.871362][ T5709] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  186.888039][ T5709] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input11
[  187.011606][ T5709] usb 5-1: USB disconnect, device number 25
[  187.017739][    C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  187.066849][ T5688] udevd[5688]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  187.080815][ T5688] udevd[5688]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  187.292613][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  187.303977][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  187.348584][ T7164] Attempt to restore checkpoint with obsolete wellknown handles
[  187.366792][   T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  187.534703][ T5627] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[  187.543076][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  187.576879][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.629154][   T24] usb 6-1: config 0 descriptor??
[  187.644472][   T24] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  187.704027][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.729382][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.790694][ T7142] syzkaller0: entered promiscuous mode
[  187.803172][ T7142] syzkaller0: entered allmulticast mode
[  187.851877][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.879825][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.922276][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.949730][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.974905][ T5627] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -110
[  187.995855][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.034019][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.083282][   T29] usb 2-1: USB disconnect, device number 28
[  188.482848][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.521901][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.716618][   T29] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  188.890591][   T29] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  188.926281][   T29] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  188.948415][   T29] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  188.960693][   T29] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  188.978736][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.005089][ T7187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  189.077077][ T5718] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  189.133906][   T30] kauditd_printk_skb: 97 callbacks suppressed
[  189.133924][   T30] audit: type=1326 audit(1785246311.065:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cf499de99 code=0x0
[  189.179632][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'.
[  189.190620][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'.
[  189.217222][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  189.268461][ T5718] usb 2-1: Using ep0 maxpacket: 8
[  189.278967][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  189.312208][ T5718] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  189.321701][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.330962][ T5718] usb 2-1: Product: syz
[  189.335258][ T5718] usb 2-1: Manufacturer: syz
[  189.340208][ T5718] usb 2-1: SerialNumber: syz
[  189.355212][ T5718] usb 2-1: config 0 descriptor??
[  189.370610][   T24] usb 6-1: USB disconnect, device number 11
[  189.522318][ T5718] msi2500 2-1:0.0: Registered as swradio24
[  189.528493][ T5718] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  189.647975][ T7205] FAULT_INJECTION: forcing a failure.
[  189.647975][ T7205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.666381][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.3.389 Not tainted syzkaller #0 PREEMPT(full) 
[  189.666412][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  189.666424][ T7205] Call Trace:
[  189.666432][ T7205]  <TASK>
[  189.666440][ T7205]  dump_stack_lvl+0xe8/0x150
[  189.666474][ T7205]  should_fail_ex+0x40c/0x560
[  189.666502][ T7205]  _copy_to_user+0x31/0xb0
[  189.666523][ T7205]  simple_read_from_buffer+0xe1/0x170
[  189.666551][ T7205]  proc_fail_nth_read+0x1bb/0x230
[  189.666581][ T7205]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  189.666608][ T7205]  ? rw_verify_area+0x24a/0x4c0
[  189.666628][ T7205]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  189.666652][ T7205]  vfs_read+0x213/0xa80
[  189.666669][ T7205]  ? _copy_to_user+0x8a/0xb0
[  189.666687][ T7205]  ? do_sock_getsockopt+0x71a/0x7e0
[  189.666712][ T7205]  ? __pfx_vfs_read+0x10/0x10
[  189.666729][ T7205]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  189.666749][ T7205]  ? do_sys_openat2+0x14e/0x200
[  189.666772][ T7205]  ? kmem_cache_free+0x182/0x650
[  189.666811][ T7205]  ksys_read+0x150/0x270
[  189.666831][ T7205]  ? __pfx_ksys_read+0x10/0x10
[  189.666849][ T7205]  ? __x64_sys_getsockopt+0x1a4/0x240
[  189.666880][ T7205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.666901][ T7205]  do_syscall_64+0x174/0x580
[  189.666923][ T7205]  ? trace_irq_disable+0x3b/0x140
[  189.666949][ T7205]  ? clear_bhb_loop+0x40/0x90
[  189.666973][ T7205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.666991][ T7205] RIP: 0033:0x7f522c75e6ce
[  189.667009][ T7205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  189.667025][ T7205] RSP: 002b:00007f522d5acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  189.667045][ T7205] RAX: ffffffffffffffda RBX: 00007f522d5ad6c0 RCX: 00007f522c75e6ce
[  189.667058][ T7205] RDX: 000000000000000f RSI: 00007f522d5ad0a0 RDI: 0000000000000004
[  189.667070][ T7205] RBP: 00007f522d5ad090 R08: 0000000000000000 R09: 0000000000000000
[  189.667081][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.667092][ T7205] R13: 00007f522ca26038 R14: 00007f522ca25fa0 R15: 00007f522cb4fa48
[  189.667119][ T7205]  </TASK>
[  189.685924][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.905559][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.163807][ T7217] netlink: 'syz.3.391': attribute type 1 has an invalid length.
[  190.198383][ T7215] binder: 7214:7215 ioctl c0306201 200000000080 returned -14
[  190.236142][ T7215] binder: 7214:7215 ioctl c0306201 2000000003c0 returned -14
[  190.236831][ T7221] forcing mempool usage for __sg_alloc_table+0x1bb/0x700
[  190.484307][ T7219] 8021q: adding VLAN 0 to HW filter on device bond3
[  190.494409][ T7219] bond2: (slave bond3): making interface the new active one
[  190.502496][ T7219] bond2: (slave bond3): Enslaving as an active interface with an up link
[  190.516918][ T7230] netlink: 84 bytes leftover after parsing attributes in process `syz.0.394'.
[  190.526051][ T7222] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  190.586526][ T5627] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  190.756480][ T5627] usb 6-1: Using ep0 maxpacket: 8
[  190.769769][ T5627] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  190.780572][ T5627] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  190.792635][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  190.805257][ T5627] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  190.818828][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  190.832389][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  190.846331][ T5627] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  190.861691][ T5627] usb 6-1: config 168 interface 0 has no altsetting 0
[  190.870300][ T5627] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  190.883134][ T5627] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  190.894648][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  190.907028][ T5627] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  190.920637][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  190.932668][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  190.945622][ T5627] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  190.962653][ T5627] usb 6-1: config 168 interface 0 has no altsetting 0
[  190.970816][ T5718] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  190.987012][ T5627] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  190.995454][ T5627] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  191.007621][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  191.019159][ T5627] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  191.032046][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  191.045149][ T5627] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  191.059145][ T5627] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  191.073579][ T5627] usb 6-1: config 168 interface 0 has no altsetting 0
[  191.086732][ T5627] usb 6-1: string descriptor 0 read error: -22
[  191.093391][ T5627] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  191.102774][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.122092][ T5627] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  191.158192][ T5718] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  191.171265][ T5718] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  191.182894][ T5718] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  191.194540][ T5718] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  191.204311][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.217795][ T7236] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  191.386219][ T5357] usb 6-1: USB disconnect, device number 12
[  191.524237][ T6173] IPVS: starting estimator thread 0...
[  191.623915][ T7243] IPVS: using max 26 ests per chain, 62400 per kthread
[  191.659014][   T29] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  191.680558][   T29] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input12
[  191.778336][ T5357] usb 2-1: USB disconnect, device number 29
[  191.852093][   T29] usb 5-1: USB disconnect, device number 26
[  191.858346][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  191.870025][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.902314][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.989268][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[  192.050559][   T30] audit: type=1326 audit(1785246313.985:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cf499de99 code=0x0
[  192.216096][ T7257] capability: warning: `syz.1.404' uses 32-bit capabilities (legacy support in use)
[  192.259960][ T5718] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  192.292856][ T5718] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input13
[  192.361942][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  192.370730][ T5718] usb 4-1: USB disconnect, device number 32
[  192.417805][   T29] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  192.516679][ T5709] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  192.598114][   T29] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  192.609577][ T5357] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  192.620040][   T29] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  192.629614][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.639188][   T29] usb 5-1: Product: syz
[  192.643422][   T29] usb 5-1: Manufacturer: syz
[  192.649253][   T29] usb 5-1: SerialNumber: syz
[  192.662690][   T29] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  192.676560][ T5709] usb 6-1: Using ep0 maxpacket: 32
[  192.687559][ T5709] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[  192.697340][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.705411][ T5709] usb 6-1: Product: syz
[  192.709633][ T5709] usb 6-1: Manufacturer: syz
[  192.714250][ T5709] usb 6-1: SerialNumber: syz
[  192.766689][ T5357] usb 2-1: Using ep0 maxpacket: 8
[  192.774139][ T5357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  192.785725][ T5357] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  192.795441][ T5357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.808996][ T5357] usb 2-1: config 0 descriptor??
[  192.887266][ T7263] netlink: 'syz.3.406': attribute type 10 has an invalid length.
[  192.954472][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'.
[  192.985473][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.405'.
[  193.042809][ T7265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  193.066358][ T7259] netlink: 132 bytes leftover after parsing attributes in process `syz.5.405'.
[  193.067062][ T5357] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  193.104416][ T7259] netlink: 132 bytes leftover after parsing attributes in process `syz.5.405'.
[  193.120408][ T7259] netlink: 39 bytes leftover after parsing attributes in process `syz.5.405'.
[  193.180925][ T5709] ems_usb 6-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  193.193177][ T5709] ems_usb 6-1:91.0: probe with driver ems_usb failed with error -22
[  193.209558][ T5709] usb 6-1: USB disconnect, device number 13
[  193.481488][   T29] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  193.519550][   T29] usb 5-1: USB disconnect, device number 27
[  193.619199][ T7277] support for cryptoloop has been removed.  Use dm-crypt instead.
[  194.026954][ T5709] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  194.207416][ T5709] usb 6-1: Using ep0 maxpacket: 16
[  194.215790][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.231206][ T5709] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  194.240780][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.249457][ T5709] usb 6-1: Product: syz
[  194.254008][ T5709] usb 6-1: Manufacturer: syz
[  194.259232][ T5709] usb 6-1: SerialNumber: syz
[  194.269813][ T5709] usb 6-1: config 0 descriptor??
[  194.294325][ T5709] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  194.419276][ T5709] usb 2-1: USB disconnect, device number 30
[  194.556325][   T10] usb 6-1: USB disconnect, device number 14
[  194.560408][  T141] usb 6-1: Failed to submit usb control message: -71
[  194.578262][  T141] usb 6-1: unable to send the bmi data to the device: -71
[  194.590145][  T141] usb 6-1: unable to get target info from device
[  194.596760][  T141] usb 6-1: could not get target info (-71)
[  194.603473][ T7296] netlink: 132 bytes leftover after parsing attributes in process `syz.4.415'.
[  194.603473][  T141] usb 6-1: could not probe fw (-71)
[  194.620290][ T7296] netlink: 132 bytes leftover after parsing attributes in process `syz.4.415'.
[  194.647699][ T7296] netlink: 39 bytes leftover after parsing attributes in process `syz.4.415'.
[  194.991250][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.998125][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  195.022458][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'.
[  195.039230][ T7308] ip6gre1: entered promiscuous mode
[  195.045284][ T7308] ip6gre1: entered allmulticast mode
[  195.139447][ T5709] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  195.336473][ T5709] usb 4-1: Using ep0 maxpacket: 8
[  195.388861][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short
[  195.410652][ T5709] usb 4-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108
[  195.436485][ T5709] usb 4-1: config 12 interface 0 has no altsetting 0
[  195.457431][ T5709] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  195.471833][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.499256][ T5709] usb 4-1: Product: syz
[  195.515303][ T5709] usb 4-1: Manufacturer: syz
[  195.524379][ T5709] usb 4-1: SerialNumber: syz
[  195.549175][ T5718] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  195.572879][ T7303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  195.707003][ T5718] usb 2-1: Using ep0 maxpacket: 8
[  195.727115][ T5718] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  195.742233][ T5718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.753703][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  195.764157][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  195.774851][ T5718] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.794849][ T5718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  195.812909][ T5709] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  195.823253][ T5709] usb 4-1: selecting invalid altsetting 0
[  195.829179][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.999066][ T5709] usb 4-1: USB disconnect, device number 33
[  196.081296][ T5718] usb 2-1: usb_control_msg returned -32
[  196.106348][ T5718] usbtmc 2-1:16.0: can't read capabilities
[  196.174654][ T5750] udevd[5750]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.273857][ T7335] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  196.290922][ T7335] bond1 (unregistering): Released all slaves
[  196.326959][   T29] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  196.499172][   T29] usb 5-1: unable to get BOS descriptor or descriptor too short
[  196.512435][   T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[  196.536584][   T29] usb 5-1: string descriptor 0 read error: -22
[  196.549054][   T29] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  196.566709][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.631019][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.433'.
[  196.643110][ T7350] random: crng reseeded on system resumption
[  196.766575][ T5357] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  196.896833][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  196.906933][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  196.927418][ T5357] usb 4-1: too many configurations: 53, using maximum allowed: 8
[  196.948777][ T5357] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  196.966795][ T5357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.984918][ T5357] usb 4-1: Product: syz
[  196.990965][ T5357] usb 4-1: Manufacturer: syz
[  196.996120][ T5357] usb 4-1: SerialNumber: syz
[  197.191950][   T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  197.216914][   T29] usb 5-1: USB disconnect, device number 28
[  197.245254][ T5357] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  197.257628][ T5718] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  197.267226][ T5357] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  197.278504][ T5357] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  197.299193][ T5357] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  197.320786][ T5357] usb 4-1: USB disconnect, device number 34
[  197.406533][ T5718] usb 6-1: Using ep0 maxpacket: 32
[  197.418555][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short
[  197.437612][ T5718] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[  197.456535][ T5718] usb 6-1: config 3 has an invalid interface number: 25 but max is 1
[  197.476576][ T5718] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[  197.485369][ T5718] usb 6-1: config 3 has no interface number 0
[  197.498113][ T5718] usb 6-1: config 3 has no interface number 1
[  197.516571][ T5718] usb 6-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  197.537705][ T5718] usb 6-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30
[  197.556529][ T5718] usb 6-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82
[  197.571037][ T5718] usb 6-1: config 3 interface 223 has no altsetting 1
[  197.578901][ T5718] usb 6-1: config 3 interface 25 has no altsetting 0
[  197.588228][ T5718] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[  197.599319][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.607900][ T5718] usb 6-1: Product: syz
[  197.612135][ T5718] usb 6-1: Manufacturer: syz
[  197.617598][ T5718] usb 6-1: SerialNumber: syz
[  198.268803][ T5709] usb 2-1: USB disconnect, device number 31
[  198.541961][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.549653][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.560615][ T5718] usb 6-1: USB disconnect, device number 15
[  198.694196][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.705757][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.814189][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.946049][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  198.949394][ T1118] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.997591][ T1118] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.026185][ T1118] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.070042][ T1118] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.356507][ T5718] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  199.560675][ T5718] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  199.580722][ T5718] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  199.623873][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  199.674591][ T5718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  199.705081][ T7399] FAULT_INJECTION: forcing a failure.
[  199.705081][ T7399] name failslab, interval 1, probability 0, space 0, times 0
[  199.732144][ T5718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  199.733782][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) 
[  199.733807][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  199.733820][ T7399] Call Trace:
[  199.733828][ T7399]  <TASK>
[  199.733835][ T7399]  dump_stack_lvl+0xe8/0x150
[  199.733869][ T7399]  should_fail_ex+0x40c/0x560
[  199.733897][ T7399]  should_failslab+0xa8/0x100
[  199.733929][ T7399]  __kmalloc_noprof+0xfe/0x720
[  199.733955][ T7399]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  199.733983][ T7399]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  199.734017][ T7399]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  199.734051][ T7399]  genl_family_rcv_msg_doit+0xda/0x340
[  199.734084][ T7399]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  199.734118][ T7399]  ? apparmor_capable+0x126/0x170
[  199.734144][ T7399]  ? bpf_lsm_capable+0x9/0x20
[  199.734168][ T7399]  ? security_capable+0x7e/0x2c0
[  199.734194][ T7399]  genl_rcv_msg+0x614/0x7a0
[  199.734225][ T7399]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.734250][ T7399]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  199.734276][ T7399]  ? __pfx_nl80211_set_cqm+0x10/0x10
[  199.734303][ T7399]  ? __pfx_nl80211_post_doit+0x10/0x10
[  199.734329][ T7399]  ? __pfx_ref_tracker_free+0x10/0x10
[  199.734363][ T7399]  netlink_rcv_skb+0x226/0x4a0
[  199.734386][ T7399]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.734413][ T7399]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.734448][ T7399]  ? down_read+0x2be/0x330
[  199.734475][ T7399]  genl_rcv+0x28/0x40
[  199.734499][ T7399]  netlink_unicast+0x7bb/0x940
[  199.734528][ T7399]  netlink_sendmsg+0x813/0xb40
[  199.734558][ T7399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.734584][ T7399]  ? aa_sock_msg_perm+0xf1/0x1b0
[  199.734610][ T7399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.734631][ T7399]  sock_sendmsg_nosec+0x13a/0x180
[  199.734661][ T7399]  ____sys_sendmsg+0x54e/0x850
[  199.734687][ T7399]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.734716][ T7399]  ? import_iovec+0x73/0xa0
[  199.734738][ T7399]  ___sys_sendmsg+0x2a5/0x360
[  199.734757][ T7399]  ? __lock_acquire+0x683/0x2cf0
[  199.734787][ T7399]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.734841][ T7399]  ? __fget_files+0x2a/0x420
[  199.734864][ T7399]  ? __fget_files+0x3a2/0x420
[  199.734898][ T7399]  __x64_sys_sendmsg+0x1b1/0x290
[  199.734922][ T7399]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.734960][ T7399]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.734980][ T7399]  do_syscall_64+0x174/0x580
[  199.735000][ T7399]  ? trace_irq_disable+0x3b/0x140
[  199.735024][ T7399]  ? clear_bhb_loop+0x40/0x90
[  199.735045][ T7399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.735064][ T7399] RIP: 0033:0x7f522c79de99
[  199.735082][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.735097][ T7399] RSP: 002b:00007f522d5ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.735117][ T7399] RAX: ffffffffffffffda RBX: 00007f522ca25fa0 RCX: 00007f522c79de99
[  199.735130][ T7399] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  199.735142][ T7399] RBP: 00007f522d5ad090 R08: 0000000000000000 R09: 0000000000000000
[  199.735153][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.735164][ T7399] R13: 00007f522ca26038 R14: 00007f522ca25fa0 R15: 00007f522cb4fa48
[  199.735193][ T7399]  </TASK>
[  200.123329][ T5718] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  200.133142][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  200.163478][   T30] audit: type=1326 audit(1785246322.075:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.212989][ T5718] usb 2-1: Product: syz
[  200.226649][ T5718] usb 2-1: Manufacturer: syz
[  200.248724][   T30] audit: type=1326 audit(1785246322.075:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.290035][ T5718] cdc_wdm 2-1:1.0: skipping garbage
[  200.310159][ T5718] cdc_wdm 2-1:1.0: skipping garbage
[  200.362973][ T5718] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  200.370144][   T30] audit: type=1326 audit(1785246322.095:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.398028][ T5718] cdc_wdm 2-1:1.0: Unknown control protocol
[  200.440006][   T30] audit: type=1326 audit(1785246322.095:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.524012][   T30] audit: type=1326 audit(1785246322.095:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.566712][   T30] audit: type=1326 audit(1785246322.095:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.576932][   T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  200.656323][   T30] audit: type=1326 audit(1785246322.095:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.736180][   T30] audit: type=1326 audit(1785246322.095:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.800781][   T30] audit: type=1326 audit(1785246322.095:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0f79de99 code=0x7ffc0000
[  200.851100][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[  200.873270][   T29] usb 4-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice= 0.40
[  200.892250][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.921976][   T29] usb 4-1: Product: syz
[  200.930002][   T30] audit: type=1326 audit(1785246322.095:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a0f75e6ce code=0x7ffc0000
[  200.935872][   T29] usb 4-1: Manufacturer: syz
[  201.000721][ T7424] netlink: 'syz.4.457': attribute type 1 has an invalid length.
[  201.018700][   T29] usb 4-1: SerialNumber: syz
[  201.024881][ T7419] syzkaller0: entered promiscuous mode
[  201.042241][ T7419] syzkaller0: entered allmulticast mode
[  201.085504][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.457'.
[  201.239438][ T7424] bond1: entered promiscuous mode
[  201.266264][ T7424] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.446927][ T5357] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  201.616736][ T5357] usb 6-1: Using ep0 maxpacket: 8
[  201.633022][ T5357] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  201.658260][ T5357] usb 6-1: config 1 interface 2 has no altsetting 0
[  201.685349][ T5357] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  201.708534][ T5357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.734571][ T5357] usb 6-1: Product: syz
[  201.755777][ T5357] usb 6-1: Manufacturer: syz
[  201.767831][ T5357] usb 6-1: SerialNumber: syz
[  202.095825][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.122353][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.154745][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.163992][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.195806][ T5357] usb 6-1: 1:1 : format type 0 is detected, processed as PCM
[  202.204178][ T5357] usb 6-1: 1:1 : sample bitwidth 177 in over sample bytes 2
[  202.217741][ T5357] usb 6-1: 1:1: cannot set freq 137 to ep 0x1
[  202.224544][ T5357] usb 6-1: selecting invalid altsetting 0
[  202.231073][ T5357] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  202.238563][ T5357] usb 6-1: selecting invalid altsetting 0
[  202.305996][ T5357] usb 6-1: USB disconnect, device number 16
[  202.375725][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.342069][ T5709] usb 2-1: USB disconnect, device number 32
[  204.367747][ T5357] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  204.579113][ T5357] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  204.588524][ T5357] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  204.601197][ T5357] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  204.612621][ T5357] usb 6-1: config 220 has no interface number 2
[  204.619457][ T5357] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  204.636235][ T5357] usb 6-1: config 220 interface 0 has no altsetting 0
[  204.644483][ T5357] usb 6-1: config 220 interface 76 has no altsetting 0
[  204.651964][ T5357] usb 6-1: config 220 interface 1 has no altsetting 0
[  204.669374][ T5357] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  204.678921][ T5357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.688001][ T5357] usb 6-1: Product: syz
[  204.692338][ T5357] usb 6-1: Manufacturer: syz
[  204.699697][ T5357] usb 6-1: SerialNumber: syz
[  206.153166][   T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  206.263208][   T29] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  206.324689][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.122741][ T7425] bond1: entered allmulticast mode
[  207.150826][ T7446] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  207.215007][ T5709] usb 4-1: USB disconnect, device number 35
[  207.295968][ T7454] bridge0: left promiscuous mode
[  207.314141][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.344537][ T7454] 8021q: adding VLAN 0 to HW filter on device team0
[  207.395165][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.416846][ T7460] blktrace: Concurrent blktraces are not allowed on sg0
[  207.590176][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.615116][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.650269][ T7454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  207.692584][ T7454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.735673][ T7454] veth1_vlan: left promiscuous mode
[  207.742869][ T7454] veth0_vlan: left promiscuous mode
[  207.751680][ T7454] veth0_vlan: entered promiscuous mode
[  207.760704][ T7454] veth1_vlan: entered promiscuous mode
[  207.792792][ T7454] veth1_macvtap: left promiscuous mode
[  207.811215][ T7454] veth0_macvtap: left promiscuous mode
[  207.820121][ T7454] veth0_macvtap: entered promiscuous mode
[  207.837370][ T7454] veth1_macvtap: entered promiscuous mode
[  207.854126][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  207.867010][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  207.887761][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  207.922469][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  207.947722][   T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  207.977644][ T7454] ip6gre1: left promiscuous mode
[  207.999956][  T996] bridge0: entered promiscuous mode
[  208.031328][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.038755][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.090241][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.097602][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.107903][   T29] usb 5-1: Using ep0 maxpacket: 8
[  208.147477][   T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  208.192989][   T29] usb 5-1: config 1 interface 2 has no altsetting 0
[  208.226328][   T29] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  208.240083][ T5357] usb 6-1: selecting invalid altsetting 0
[  208.273072][ T5357] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  208.283934][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.305509][ T5357] uvcvideo 6-1:220.0: No valid video chain found.
[  208.315748][   T29] usb 5-1: Product: syz
[  208.329068][   T29] usb 5-1: Manufacturer: syz
[  208.340573][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.347369][   T29] usb 5-1: SerialNumber: syz
[  208.363947][ T5357] usb 6-1: selecting invalid altsetting 0
[  208.382557][ T7482] erspan0: entered promiscuous mode
[  208.387954][ T5357] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  208.421359][ T5357] usb 6-1: USB disconnect, device number 17
[  208.428567][ T7482] erspan0: left promiscuous mode
[  208.543108][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.580577][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.605317][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.681034][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.737957][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.768834][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.475'.
[  208.793364][ T7491] FAULT_INJECTION: forcing a failure.
[  208.793364][ T7491] name failslab, interval 1, probability 0, space 0, times 0
[  208.803266][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.827170][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.835011][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) 
[  208.835043][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  208.835056][ T7491] Call Trace:
[  208.835063][ T7491]  <TASK>
[  208.835072][ T7491]  dump_stack_lvl+0xe8/0x150
[  208.835110][ T7491]  should_fail_ex+0x40c/0x560
[  208.835140][ T7491]  should_failslab+0xa8/0x100
[  208.835172][ T7491]  __kmalloc_cache_noprof+0xa8/0x660
[  208.835198][ T7491]  ? nft_pernet+0x23/0x240
[  208.835217][ T7491]  ? nf_tables_newtable+0x43e/0x1950
[  208.835243][ T7491]  ? nf_tables_newtable+0x43e/0x1950
[  208.835276][ T7491]  nf_tables_newtable+0x43e/0x1950
[  208.835321][ T7491]  nfnetlink_rcv+0x1288/0x28c0
[  208.835374][ T7491]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  208.835411][ T7491]  ? ref_tracker_free+0x689/0x830
[  208.835458][ T7491]  ? skb_clone+0x246/0x3a0
[  208.835483][ T7491]  ? __netlink_deliver_tap+0x811/0x860
[  208.835512][ T7491]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.835534][ T7491]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.835560][ T7491]  netlink_unicast+0x7bb/0x940
[  208.835590][ T7491]  netlink_sendmsg+0x813/0xb40
[  208.835626][ T7491]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.835652][ T7491]  ? aa_sock_msg_perm+0xf1/0x1b0
[  208.835679][ T7491]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.835699][ T7491]  sock_sendmsg_nosec+0x13a/0x180
[  208.835729][ T7491]  ____sys_sendmsg+0x54e/0x850
[  208.835756][ T7491]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.835784][ T7491]  ? import_iovec+0x73/0xa0
[  208.835806][ T7491]  ___sys_sendmsg+0x2a5/0x360
[  208.835824][ T7491]  ? __lock_acquire+0x683/0x2cf0
[  208.835855][ T7491]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.835909][ T7491]  ? __fget_files+0x2a/0x420
[  208.835934][ T7491]  ? __fget_files+0x3a2/0x420
[  208.835968][ T7491]  __x64_sys_sendmsg+0x1b1/0x290
[  208.835992][ T7491]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.836030][ T7491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.836051][ T7491]  do_syscall_64+0x174/0x580
[  208.836072][ T7491]  ? trace_irq_disable+0x3b/0x140
[  208.836097][ T7491]  ? clear_bhb_loop+0x40/0x90
[  208.836119][ T7491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.836137][ T7491] RIP: 0033:0x7f522c79de99
[  208.836157][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.836173][ T7491] RSP: 002b:00007f522d5ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.836194][ T7491] RAX: ffffffffffffffda RBX: 00007f522ca25fa0 RCX: 00007f522c79de99
[  208.836207][ T7491] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  208.836219][ T7491] RBP: 00007f522d5ad090 R08: 0000000000000000 R09: 0000000000000000
[  208.836231][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.836242][ T7491] R13: 00007f522ca26038 R14: 00007f522ca25fa0 R15: 00007f522cb4fa48
[  208.836271][ T7491]  </TASK>
[  209.158329][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  209.158352][   T30] audit: type=1326 audit(1785246331.095:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.5.474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826af9de99 code=0x7fc00000
[  209.228986][ T7495] netlink: 'syz.0.477': attribute type 1 has an invalid length.
[  209.299515][   T29] usb 5-1: 1:1 : format type 0 is detected, processed as PCM
[  209.313303][   T29] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 2
[  209.324480][   T29] usb 5-1: 1:1: cannot set freq 137 to ep 0x1
[  209.335617][ T7495] bond1: entered promiscuous mode
[  209.347389][   T29] usb 5-1: selecting invalid altsetting 0
[  209.355378][   T29] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  209.363311][   T29] usb 5-1: selecting invalid altsetting 0
[  209.373830][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1
[  209.469777][   T29] usb 5-1: USB disconnect, device number 29
[  209.545136][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1
[  209.553848][ T7500] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  209.595527][ T7500] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  209.672246][ T7500] bond1: (slave vti0): making interface the new active one
[  209.695556][ T7500] vti0: entered promiscuous mode
[  209.745581][ T7500] bond1: (slave vti0): Enslaving as an active interface with an up link
[  209.873868][ T7511] FAULT_INJECTION: forcing a failure.
[  209.873868][ T7511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.944364][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.1.481 Not tainted syzkaller #0 PREEMPT(full) 
[  209.944404][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  209.944418][ T7511] Call Trace:
[  209.944424][ T7511]  <TASK>
[  209.944433][ T7511]  dump_stack_lvl+0xe8/0x150
[  209.944470][ T7511]  should_fail_ex+0x40c/0x560
[  209.944497][ T7511]  copy_fpstate_to_sigframe+0xa83/0xd20
[  209.944527][ T7511]  ? copy_fpstate_to_sigframe+0x188/0xd20
[  209.944557][ T7511]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  209.944588][ T7511]  ? ktime_get+0x45/0x220
[  209.944613][ T7511]  ? ktime_get+0x45/0x220
[  209.944637][ T7511]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  209.944663][ T7511]  ? ktime_get+0x1f5/0x220
[  209.944690][ T7511]  ? fpu__alloc_mathframe+0xac/0x130
[  209.944716][ T7511]  get_sigframe+0x603/0x830
[  209.944749][ T7511]  ? __pfx_get_sigframe+0x10/0x10
[  209.944785][ T7511]  x64_setup_rt_frame+0x163/0xc50
[  209.944814][ T7511]  ? lockdep_hardirqs_on+0x7a/0x110
[  209.944838][ T7511]  ? _raw_spin_unlock_irq+0x2e/0x50
[  209.944856][ T7511]  ? get_signal+0x10dd/0x12c0
[  209.944884][ T7511]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  209.944918][ T7511]  arch_do_signal_or_restart+0x456/0x860
[  209.944947][ T7511]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  209.944976][ T7511]  ? __se_sys_preadv2+0x210/0x2a0
[  209.945005][ T7511]  exit_to_user_mode_loop+0x104/0x730
[  209.945027][ T7511]  ? rcu_is_watching+0x15/0xb0
[  209.945046][ T7511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.945068][ T7511]  do_syscall_64+0x353/0x580
[  209.945091][ T7511]  ? clear_bhb_loop+0x40/0x90
[  209.945114][ T7511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.945133][ T7511] RIP: 0033:0x7f979099de97
[  209.945153][ T7511] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  209.945168][ T7511] RSP: 002b:00007f9791929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  209.945190][ T7511] RAX: 0000000000000147 RBX: 00007f9790c25fa0 RCX: 00007f979099de99
[  209.945201][ T7511] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  209.945210][ T7511] RBP: 00007f9791929090 R08: 0000000000000000 R09: 0000000000000003
[  209.945221][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.945231][ T7511] R13: 00007f9790c26038 R14: 00007f9790c25fa0 R15: 00007f9790d4fa48
[  209.945261][ T7511]  </TASK>
[  210.695519][ T7527] vlan3: entered promiscuous mode
[  210.711419][ T7527] hsr0: entered promiscuous mode
[  210.729439][ T7527] vlan3: entered allmulticast mode
[  210.777969][ T7527] hsr0: entered allmulticast mode
[  210.799546][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'.
[  210.808488][ T7527] hsr_slave_0: entered allmulticast mode
[  210.846566][ T7527] hsr_slave_1: entered allmulticast mode
[  210.992857][ T7530] hsr_slave_0: left promiscuous mode
[  211.074880][ T7530] hsr_slave_1: left promiscuous mode
[  211.470191][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'.
[  211.597349][ T5771] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  211.608640][ T7539] hub 8-0:1.0: USB hub found
[  211.630224][ T7539] hub 8-0:1.0: 1 port detected
[  211.746538][ T5771] usb 2-1: device descriptor read/64, error -71
[  211.996625][ T5771] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  212.021382][ T7551] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  212.146573][ T5771] usb 2-1: device descriptor read/64, error -71
[  212.257123][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  212.277152][ T5771] usb usb2-port1: attempt power cycle
[  212.626611][ T5771] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  212.659502][ T5771] usb 2-1: device descriptor read/8, error -71
[  212.906543][ T5771] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  212.937894][ T5771] usb 2-1: device descriptor read/8, error -71
[  212.973591][ T7564] vcan0: Master is either lo or non-ether device
[  213.056854][ T5771] usb usb2-port1: unable to enumerate USB device
[  213.136161][ T7568] sctp: [Deprecated]: syz.3.502 (pid 7568) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.136161][ T7568] Use struct sctp_sack_info instead
[  213.686974][ T6173] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  213.836617][ T6173] usb 5-1: Using ep0 maxpacket: 32
[  213.849157][ T6173] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  213.876729][ T6173] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  213.890827][ T6173] usb 5-1: config 0 interface 0 has no altsetting 0
[  213.909797][ T6173] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  213.926690][ T6173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.944303][ T6173] usb 5-1: Product: syz
[  213.953328][ T6173] usb 5-1: Manufacturer: syz
[  213.963044][ T6173] usb 5-1: SerialNumber: syz
[  213.976783][ T6173] usb 5-1: config 0 descriptor??
[  214.254789][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.508'.
[  214.400857][ T6173] gs_usb 5-1:0.0: Configuring for 47 interfaces
[  214.467574][ T5634] Bluetooth: hci1: Unknown advertising packet type: 0x70
[  214.467667][ T5634] Bluetooth: hci1: adv larger than maximum supported
[  214.478411][ T5634] Bluetooth: hci1: Malformed LE Event: 0x0d
[  214.602018][ T6173] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[  214.620215][ T6173] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121
[  214.718302][ T7595] netlink: 'syz.5.512': attribute type 1 has an invalid length.
[  214.737936][ T5709] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  214.912811][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.924017][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.934232][ T5709] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  214.943455][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.953905][ T5709] usb 4-1: config 0 descriptor??
[  215.463856][ T2367] pvrusb2: request_firmware fatal error with code=-110
[  215.472004][ T2367] pvrusb2: Failure uploading firmware1
[  215.478470][ T2367] pvrusb2: Device initialization was not successful.
[  215.488657][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  215.501228][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  215.511009][ T5702] pvrusb2: Device being rendered inoperable
[  215.511397][ T2367] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2
[  215.527089][ T2367] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw
[  215.548114][ T7595] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  215.554509][ T7595] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  215.561372][ T7595] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  215.567842][ T7595] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  215.573988][ T7595] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  215.583141][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.596966][ T5709] usbhid 4-1:0.0: can't add hid device: -71
[  215.603265][ T5709] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  215.622037][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.641233][ T5709] usb 4-1: USB disconnect, device number 36
[  215.856672][ T5771] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  216.006608][ T5771] usb 2-1: Using ep0 maxpacket: 16
[  216.013474][ T5771] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.024332][ T5771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  216.036274][ T5771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  216.046029][ T5771] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  216.055832][ T5771] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  216.070658][ T5771] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  216.079919][ T5771] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  216.088224][ T5771] usb 2-1: Manufacturer: syz
[  216.095190][ T5771] usb 2-1: config 0 descriptor??
[  216.356501][ T5771] rc_core: IR keymap rc-hauppauge not found
[  216.362896][ T5771] Registered IR keymap rc-empty
[  216.371490][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.396699][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.420244][ T5771] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  216.432122][  T996] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  216.442282][ T5771] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14
[  216.462338][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.486714][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.506568][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.529824][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.566620][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.582932][ T7622] FAULT_INJECTION: forcing a failure.
[  216.582932][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.598065][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.5.519 Not tainted syzkaller #0 PREEMPT(full) 
[  216.598093][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  216.598103][ T7622] Call Trace:
[  216.598108][ T7622]  <TASK>
[  216.598114][ T7622]  dump_stack_lvl+0xe8/0x150
[  216.598139][ T7622]  should_fail_ex+0x40c/0x560
[  216.598166][ T7622]  _copy_from_iter+0x1d3/0x1660
[  216.598192][ T7622]  ? kmem_cache_alloc_node_noprof+0x131/0x610
[  216.598229][ T7622]  ? rcu_is_watching+0x15/0xb0
[  216.598246][ T7622]  ? trace_kmem_cache_alloc+0x29/0xe0
[  216.598260][ T7622]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  216.598274][ T7622]  ? __pfx__copy_from_iter+0x10/0x10
[  216.598289][ T7622]  ? __alloc_skb+0x276/0x7a0
[  216.598300][ T7622]  ? __alloc_skb+0x276/0x7a0
[  216.598322][ T7622]  ? netlink_sendmsg+0x650/0xb40
[  216.598346][ T7622]  ? skb_put+0x112/0x210
[  216.598368][ T7622]  netlink_sendmsg+0x6c0/0xb40
[  216.598395][ T7622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.598410][ T7622]  ? aa_sock_msg_perm+0xf1/0x1b0
[  216.598434][ T7622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.598455][ T7622]  sock_sendmsg_nosec+0x13a/0x180
[  216.598484][ T7622]  ____sys_sendmsg+0x54e/0x850
[  216.598510][ T7622]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.598541][ T7622]  ? import_iovec+0x73/0xa0
[  216.598562][ T7622]  ___sys_sendmsg+0x2a5/0x360
[  216.598574][ T7622]  ? __lock_acquire+0x683/0x2cf0
[  216.598592][ T7622]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.598643][ T7622]  ? __fget_files+0x2a/0x420
[  216.598669][ T7622]  ? __fget_files+0x3a2/0x420
[  216.598696][ T7622]  __x64_sys_sendmsg+0x1b1/0x290
[  216.598712][ T7622]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  216.598733][ T7622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.598746][ T7622]  do_syscall_64+0x174/0x580
[  216.598767][ T7622]  ? trace_irq_disable+0x3b/0x140
[  216.598793][ T7622]  ? clear_bhb_loop+0x40/0x90
[  216.598817][ T7622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.598835][ T7622] RIP: 0033:0x7f826af9de99
[  216.598849][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.598859][ T7622] RSP: 002b:00007f826be90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.598871][ T7622] RAX: ffffffffffffffda RBX: 00007f826b225fa0 RCX: 00007f826af9de99
[  216.598879][ T7622] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  216.598896][ T7622] RBP: 00007f826be90090 R08: 0000000000000000 R09: 0000000000000000
[  216.598906][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.598918][ T7622] R13: 00007f826b226038 R14: 00007f826b225fa0 R15: 00007f826b34fa48
[  216.598947][ T7622]  </TASK>
[  216.606818][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.761531][ T7608] netlink: 'syz.1.516': attribute type 4 has an invalid length.
[  216.789366][  T996] usb 4-1: config 3 has an invalid interface number: 153 but max is 0
[  216.827411][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  216.844113][ T7608] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.516'.
[  216.925964][  T996] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  216.936819][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.952666][  T996] usb 4-1: config 3 has no interface number 0
[  216.969083][  T996] usb 4-1: config 3 interface 153 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  216.983288][  T996] usb 4-1: config 3 interface 153 has no altsetting 0
[  216.990603][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.002186][  T996] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=90.80
[  217.012060][  T996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.020732][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.029094][  T996] usb 4-1: Product: syz
[  217.033368][  T996] usb 4-1: Manufacturer: syz
[  217.038816][  T996] usb 4-1: SerialNumber: syz
[  217.046565][ T5771] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.070028][ T5771] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  217.089365][ T5771] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  217.192636][ T6173] usb 2-1: USB disconnect, device number 37
[  217.344498][  T996] option 4-1:3.153: GSM modem (1-port) converter detected
[  217.369609][  T996] usb 4-1: USB disconnect, device number 37
[  217.394214][  T996] option 4-1:3.153: device disconnected
[  217.429860][ T6173] usb 5-1: USB disconnect, device number 30
[  217.609973][ T7633] bond2: entered promiscuous mode
[  217.616502][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout
[  217.616765][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout
[  217.623621][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout
[  217.630966][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout
[  217.643982][ T7633] 8021q: adding VLAN 0 to HW filter on device bond2
[  217.917359][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'.
[  217.948244][ T7642] hsr_slave_0: left promiscuous mode
[  217.970607][ T7642] hsr_slave_1: left promiscuous mode
[  218.236617][ T6173] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  218.398824][ T6173] usb 4-1: Using ep0 maxpacket: 32
[  218.411667][ T6173] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  218.433571][ T6173] usb 4-1: config 0 has no interface number 0
[  218.462263][ T6173] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  218.484202][ T6173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.512342][ T6173] usb 4-1: Product: syz
[  218.523614][ T6173] usb 4-1: Manufacturer: syz
[  218.533526][ T6173] usb 4-1: SerialNumber: syz
[  218.559294][ T6173] usb 4-1: config 0 descriptor??
[  218.591130][ T6173] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  218.618878][ T6173] usb 4-1: selecting invalid altsetting 1
[  218.626143][ T6173] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  218.649760][ T6173] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  218.660953][ T6173] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  218.673222][ T6173] usb 4-1: media controller created
[  218.715336][ T6173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  218.788788][ T7664] netlink: 'syz.1.534': attribute type 6 has an invalid length.
[  219.646562][ T5771] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  219.816916][ T5771] usb 5-1: Using ep0 maxpacket: 32
[  219.827719][ T5771] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[  219.837244][ T5771] usb 5-1: config 0 has no interface number 0
[  219.843682][ T5771] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  219.856176][ T5771] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  219.869377][ T5771] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  219.880242][ T5771] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  219.900872][ T5771] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  219.911535][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.920668][ T5771] usb 5-1: Product: syz
[  219.925538][ T5771] usb 5-1: Manufacturer: syz
[  219.931637][ T5771] usb 5-1: SerialNumber: syz
[  219.947295][ T6173] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  219.951223][ T5771] usb 5-1: config 0 descriptor??
[  219.965628][ T6173] zl10353_read_register: readreg error (reg=127, ret==-110)
[  219.978944][ T7646] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  219.990922][ T5771] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input15
[  220.146991][   T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  220.169442][ T6173] usb 4-1: USB disconnect, device number 38
[  220.338944][   T29] usb 6-1: Using ep0 maxpacket: 32
[  220.350137][   T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11
[  220.372321][   T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024
[  220.385845][   T29] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.405332][   T29] usb 6-1: config 0 interface 0 has no altsetting 0
[  220.413085][   T29] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[  220.422744][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.435897][   T29] usb 6-1: config 0 descriptor??
[  220.525647][ T5771] usb 5-1: USB disconnect, device number 31
[  220.791464][   T29] usbhid 6-1:0.0: can't add hid device: -71
[  220.812170][   T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  220.859668][   T29] usb 6-1: USB disconnect, device number 18
[  221.128778][   T30] audit: type=1326 audit(1785246343.065:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.3.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522c79de99 code=0x0
[  221.369710][ T5771] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  221.410641][ T7703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.547'.
[  221.426510][   T29] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  221.537739][ T5771] usb 5-1: Using ep0 maxpacket: 8
[  221.554749][ T5771] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.584809][ T5771] usb 5-1: config 1 interface 2 has no altsetting 0
[  221.592243][   T29] usb 2-1: Using ep0 maxpacket: 16
[  221.604967][   T29] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  221.635971][ T5771] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  221.638662][   T29] usb 2-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40
[  221.651298][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.668413][ T5771] usb 5-1: Product: syz
[  221.675219][ T5771] usb 5-1: Manufacturer: syz
[  221.680496][ T5771] usb 5-1: SerialNumber: syz
[  221.699736][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.728655][   T29] usb 2-1: Product: syz
[  221.746303][   T29] usb 2-1: Manufacturer: syz
[  221.758782][   T29] usb 2-1: SerialNumber: syz
[  221.969788][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.980500][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.031983][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.058723][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.109144][ T5771] usb 5-1: 1:1 : format type 0 is detected, processed as PCM
[  222.125546][ T5771] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 2
[  222.160297][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.165874][ T5771] usb 5-1: 1:1: cannot set freq 137 to ep 0x1
[  222.211115][ T5771] usb 5-1: selecting invalid altsetting 0
[  222.228206][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.230069][ T5771] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  222.268644][ T5771] usb 5-1: selecting invalid altsetting 0
[  222.320014][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.366146][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.458415][ T5771] usb 5-1: USB disconnect, device number 32
[  222.461128][   T29] usbhid 2-1:1.0: can't add hid device: -71
[  222.489613][   T29] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  222.553465][   T29] usb 2-1: USB disconnect, device number 38
[  222.623532][ T5801] udevd[5801]: setting owner of /dev/bus/usb/002/038 to uid=0, gid=0 failed: No such file or directory
[  223.455041][   T30] audit: type=1326 audit(1785246345.385:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.5.566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f826af9de99 code=0x0
[  223.497268][   T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  223.670678][   T29] usb 5-1: Using ep0 maxpacket: 32
[  223.682213][   T29] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  223.684970][ T7755] FAULT_INJECTION: forcing a failure.
[  223.684970][ T7755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.697013][   T29] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  223.704491][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.3.569 Not tainted syzkaller #0 PREEMPT(full) 
[  223.704518][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  223.704531][ T7755] Call Trace:
[  223.704542][ T7755]  <TASK>
[  223.704552][ T7755]  dump_stack_lvl+0xe8/0x150
[  223.704587][ T7755]  should_fail_ex+0x40c/0x560
[  223.704616][ T7755]  _copy_from_user+0x2d/0xb0
[  223.704636][ T7755]  do_sock_getsockopt+0x200/0x7e0
[  223.704662][ T7755]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  223.704695][ T7755]  ? __fget_files+0x3a2/0x420
[  223.704721][ T7755]  ? __fget_files+0x2a/0x420
[  223.704752][ T7755]  __x64_sys_getsockopt+0x1a4/0x240
[  223.704778][ T7755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.704798][ T7755]  do_syscall_64+0x174/0x580
[  223.704829][ T7755]  ? trace_irq_disable+0x3b/0x140
[  223.704854][ T7755]  ? clear_bhb_loop+0x40/0x90
[  223.704878][ T7755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.704908][ T7755] RIP: 0033:0x7f522c79de99
[  223.704925][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.704941][ T7755] RSP: 002b:00007f522d5ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  223.704961][ T7755] RAX: ffffffffffffffda RBX: 00007f522ca25fa0 RCX: 00007f522c79de99
[  223.704974][ T7755] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000003
[  223.704986][ T7755] RBP: 00007f522d5ad090 R08: 0000200000000040 R09: 0000000000000000
[  223.704998][ T7755] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  223.705010][ T7755] R13: 00007f522ca26038 R14: 00007f522ca25fa0 R15: 00007f522cb4fa48
[  223.705038][ T7755]  </TASK>
[  223.916912][   T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  223.926061][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  223.935926][   T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  223.946097][   T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  223.959456][   T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  223.968740][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.980948][   T29] usb 5-1: config 0 descriptor??
[  224.036513][ T5357] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  224.098378][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.566'.
[  224.188301][ T5357] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.203524][ T5357] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  224.215140][   T29] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  224.242197][ T5357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.260274][ T5357] usb 2-1: config 0 descriptor??
[  224.271949][ T5357] pwc: Askey VC010 type 2 USB webcam detected.
[  224.446785][  T996] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  224.468774][ T5357] pwc: recv_control_msg error -32 req 02 val 2b00
[  224.482518][ T5357] pwc: recv_control_msg error -32 req 02 val 2700
[  224.490636][ T5357] pwc: recv_control_msg error -32 req 02 val 2c00
[  224.521901][ T5357] pwc: recv_control_msg error -71 req 04 val 1000
[  224.534676][ T5357] pwc: recv_control_msg error -71 req 04 val 1300
[  224.548739][ T5357] pwc: recv_control_msg error -71 req 04 val 1400
[  224.561407][ T5357] pwc: recv_control_msg error -71 req 02 val 2000
[  224.572235][ T5357] pwc: recv_control_msg error -71 req 02 val 2100
[  224.580447][ T5357] pwc: recv_control_msg error -71 req 04 val 1500
[  224.588443][ T5357] pwc: recv_control_msg error -71 req 02 val 2500
[  224.595526][ T5357] pwc: recv_control_msg error -71 req 02 val 2400
[  224.602840][ T5357] pwc: recv_control_msg error -71 req 02 val 2600
[  224.610835][ T5357] pwc: recv_control_msg error -71 req 02 val 2900
[  224.620246][ T5357] pwc: recv_control_msg error -71 req 02 val 2800
[  224.630210][ T5357] pwc: recv_control_msg error -71 req 04 val 1100
[  224.637390][ T5357] pwc: recv_control_msg error -71 req 04 val 1200
[  224.651482][ T5357] pwc: Registered as video103.
[  224.659154][  T996] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30
[  224.661268][ T5357] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16
[  224.686625][   T29] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  224.694922][  T996] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  224.715760][ T5627] usb 5-1: USB disconnect, device number 33
[  224.728366][  T996] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  224.748149][ T5357] usb 2-1: USB disconnect, device number 39
[  224.753995][ T5627] usblp0: removed
[  224.764651][  T996] usb 4-1: config 0 interface 0 has no altsetting 0
[  224.772156][  T996] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  224.784517][  T996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.814107][  T996] usb 4-1: config 0 descriptor??
[  224.824970][ T7762] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  224.860458][   T29] usb 6-1: not running at top speed; connect to a high speed hub
[  224.875182][   T29] usb 6-1: config 52 has an invalid interface number: 87 but max is 3
[  224.890461][   T29] usb 6-1: config 52 has an invalid interface number: 203 but max is 3
[  224.899817][   T29] usb 6-1: config 52 has an invalid interface number: 139 but max is 3
[  224.912323][   T29] usb 6-1: config 52 has an invalid interface number: 47 but max is 3
[  224.922542][   T29] usb 6-1: config 52 has no interface number 0
[  224.929017][   T29] usb 6-1: config 52 has no interface number 1
[  224.935367][   T29] usb 6-1: config 52 has no interface number 2
[  224.941973][   T29] usb 6-1: config 52 has no interface number 3
[  224.949168][   T29] usb 6-1: config 52 interface 87 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  224.960961][   T29] usb 6-1: config 52 interface 87 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  224.972219][   T29] usb 6-1: config 52 interface 87 altsetting 0 endpoint 0x83 has invalid maxpacket 512, setting to 64
[  224.983680][   T29] usb 6-1: config 52 interface 87 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  224.994878][   T29] usb 6-1: config 52 interface 87 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  225.007599][   T29] usb 6-1: config 52 interface 87 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  225.019029][   T29] usb 6-1: config 52 interface 203 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  225.030691][   T29] usb 6-1: config 52 interface 203 altsetting 255 endpoint 0xD has invalid maxpacket 512, setting to 64
[  225.042721][   T29] usb 6-1: config 52 interface 203 altsetting 255 endpoint 0xA has invalid maxpacket 1568, setting to 64
[  225.054696][   T29] usb 6-1: config 52 interface 203 altsetting 255 has a duplicate endpoint with address 0xB, skipping
[  225.066955][   T29] usb 6-1: config 52 interface 203 altsetting 255 has a duplicate endpoint with address 0xF, skipping
[  225.079422][   T29] usb 6-1: config 52 interface 139 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  225.091859][   T29] usb 6-1: config 52 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  225.103437][   T29] usb 6-1: config 52 interface 139 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  225.114749][   T29] usb 6-1: config 52 interface 139 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  225.126261][   T29] usb 6-1: config 52 interface 47 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  225.152651][   T29] usb 6-1: config 52 interface 47 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[  225.165314][   T29] usb 6-1: config 52 interface 47 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  225.176527][   T29] usb 6-1: config 52 interface 47 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  225.187798][   T29] usb 6-1: config 52 interface 47 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[  225.201181][   T29] usb 6-1: config 52 interface 47 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[  225.212208][   T29] usb 6-1: config 52 interface 47 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  225.223590][ T5357] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  225.232213][   T29] usb 6-1: config 52 interface 47 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  225.244191][   T29] usb 6-1: config 52 interface 203 has no altsetting 0
[  225.251713][   T29] usb 6-1: config 52 interface 47 has no altsetting 0
[  225.264888][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.266592][   T29] usb 6-1: Dual-Role OTG device on HNP port
[  225.279961][   T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=b8.3d
[  225.287015][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.290170][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.308856][   T29] usb 6-1: Product: 肿竚⯍㮀㇒엓勞봫ꦤţ饶銀꬧厢ڬ꘺ᥓ阥豦睾
[  225.346491][   T29] usb 6-1: Manufacturer: 嘸僮ᛝ뗫㈥庝
[  225.352506][   T29] usb 6-1: SerialNumber: 峠ꧨ횄ү佯⬽鹌ﲅ韽䭐⨝ώ䐹༌﵆책ꘛᢵ㷷⛶෦ጩ믿윽卧횫珦␹攞闲ﲴᗳ⥱㯉흺᷂꽊镳ꓖǷ繝亲牜ᅨઓ悎ⴑ⸌宑♔漢Ή⽖돸蚀ℐᔟ닖犾퀠㪞뭂륔䲌￣뱉嶢ᳰ⍺袙楋ࡷ爆댘䦊阷⸅雳ݻ䁱溑װ䏌暗覇䊵웽㪭窼ᝠ㓺뾴ꕘࣼ胕䎸龅䇎瘵ꅯ醬㤳帎⣩
[  225.416531][ T5357] usb 2-1: Using ep0 maxpacket: 8
[  225.422299][ T7764] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  225.433681][ T5357] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  225.443249][ T5357] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  225.453039][ T5357] usb 2-1: config 0 has no interface number 0
[  225.460710][ T5357] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  225.473466][ T5357] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  225.488257][ T5357] usb 2-1: config 0 interface 255 has no altsetting 0
[  225.500273][ T5357] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  225.510521][ T5357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.519409][ T5357] usb 2-1: Product: syz
[  225.524167][ T5357] usb 2-1: Manufacturer: syz
[  225.531600][ T5357] usb 2-1: SerialNumber: syz
[  225.553488][ T5357] usb 2-1: config 0 descriptor??
[  225.723829][ T7774] bond1: left promiscuous mode
[  225.737455][ T6173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  225.752687][ T7774] bond2: left promiscuous mode
[  225.789517][   T29] usbtest 6-1:52.87: Linux gadget zero
[  225.798945][   T29] usbtest 6-1:52.87: full-speed {control in/out iso-out int-out} tests (+alt)
[  225.827164][   T29] usbtest 6-1:52.203: couldn't get endpoints, -71
[  225.834269][   T29] usbtest 6-1:52.203: probe with driver usbtest failed with error -71
[  225.855292][   T29] usbtest 6-1:52.139: couldn't get endpoints, -22
[  225.863211][   T29] usbtest 6-1:52.139: probe with driver usbtest failed with error -22
[  225.883325][   T29] usbtest 6-1:52.47: couldn't get endpoints, -71
[  225.910997][   T29] usbtest 6-1:52.47: probe with driver usbtest failed with error -71
[  225.954900][   T29] usb 6-1: USB disconnect, device number 19
[  226.016895][ T6173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  226.057254][ T5357] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  226.073037][ T5357] usb 2-1: setting power ON
[  226.083418][ T5357] dvb-usb: bulk message failed: -22 (2/0)
[  226.111054][ T5357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  226.122035][ T5357] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  226.131298][ T5357] usb 2-1: media controller created
[  226.159377][ T5357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  226.191616][ T5357] usb 2-1: digital interface selection failed (-22)
[  226.201595][ T5357] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  226.214147][ T5357] usb 2-1: setting power OFF
[  226.224176][ T5357] dvb-usb: bulk message failed: -22 (2/0)
[  226.230701][ T5357] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  226.240290][ T5357] (NULL device *): no alternate interface
[  226.271252][ T5357] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  226.292485][ T5357] usb 2-1: USB disconnect, device number 40
[  226.405327][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.576'.
[  226.420700][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.576'.
[  226.430493][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.5.576'.
[  226.864710][  T996] usbhid 4-1:0.0: can't add hid device: -71
[  226.880415][  T996] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  226.894920][  T996] usb 4-1: USB disconnect, device number 39
[  226.901569][ T5627] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  227.057886][ T5627] usb 2-1: Using ep0 maxpacket: 16
[  227.075665][ T5627] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  227.087558][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.100696][ T5627] usb 2-1: config 0 descriptor??
[  227.118567][ T5627] gspca_main: sonixj-2.14.0 probing 0471:0327
[  227.331748][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.347105][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.382841][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.408654][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.672533][ T7797] netlink: 'syz.4.583': attribute type 10 has an invalid length.
[  227.683201][ T7797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.583'.
[  228.238736][ T5627] usb 2-1: USB disconnect, device number 41
[  229.031719][ T7819] FAULT_INJECTION: forcing a failure.
[  229.031719][ T7819] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.049210][  T996] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  229.057946][ T7819] CPU: 0 UID: 0 PID: 7819 Comm: syz.3.591 Not tainted syzkaller #0 PREEMPT(full) 
[  229.057969][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  229.057979][ T7819] Call Trace:
[  229.057984][ T7819]  <TASK>
[  229.057990][ T7819]  dump_stack_lvl+0xe8/0x150
[  229.058012][ T7819]  should_fail_ex+0x40c/0x560
[  229.058029][ T7819]  _copy_from_user+0x2d/0xb0
[  229.058041][ T7819]  ___sys_sendmsg+0x1c6/0x360
[  229.058053][ T7819]  ? __lock_acquire+0x683/0x2cf0
[  229.058072][ T7819]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.058100][ T7819]  ? __fget_files+0x2a/0x420
[  229.058114][ T7819]  ? __fget_files+0x3a2/0x420
[  229.058150][ T7819]  __x64_sys_sendmsg+0x1b1/0x290
[  229.058164][ T7819]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.058184][ T7819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.058195][ T7819]  do_syscall_64+0x174/0x580
[  229.058208][ T7819]  ? trace_irq_disable+0x3b/0x140
[  229.058221][ T7819]  ? clear_bhb_loop+0x40/0x90
[  229.058239][ T7819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.058250][ T7819] RIP: 0033:0x7f522c79de99
[  229.058260][ T7819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.058269][ T7819] RSP: 002b:00007f522d5ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.058281][ T7819] RAX: ffffffffffffffda RBX: 00007f522ca25fa0 RCX: 00007f522c79de99
[  229.058289][ T7819] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003
[  229.058296][ T7819] RBP: 00007f522d5ad090 R08: 0000000000000000 R09: 0000000000000000
[  229.058302][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.058308][ T7819] R13: 00007f522ca26038 R14: 00007f522ca25fa0 R15: 00007f522cb4fa48
[  229.058323][ T7819]  </TASK>
[  229.342625][  T996] usb 5-1: unable to get BOS descriptor or descriptor too short
[  229.352960][  T996] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.363899][  T996] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.381703][  T996] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  229.390995][  T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.399255][  T996] usb 5-1: Product: syz
[  229.403536][  T996] usb 5-1: Manufacturer: syz
[  229.408768][  T996] usb 5-1: SerialNumber: syz
[  229.418587][  T996] usb 5-1: selecting invalid altsetting 1
[  229.424867][  T996] usb 5-1: unit 6 not found!
[  229.680103][ T7826] input: syz1 as /devices/virtual/input/input17
[  229.824858][  T996] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  230.070106][ T7835] netlink: 'syz.5.595': attribute type 4 has an invalid length.
[  230.122490][  T996] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  230.134986][ T7835] netlink: 'syz.5.595': attribute type 4 has an invalid length.
[  230.156006][  T996] usb 5-1: USB disconnect, device number 34
[  230.207634][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'.
[  230.230388][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.526479][  T996] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  230.689877][  T996] usb 5-1: Using ep0 maxpacket: 16
[  230.701137][  T996] usb 5-1: unable to get BOS descriptor or descriptor too short
[  230.714712][  T996] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 233, changing to 7
[  230.727122][  T996] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7
[  230.768106][  T996] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1024
[  230.803543][  T996] usb 5-1: language id specifier not provided by device, defaulting to English
[  230.818052][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  230.837442][  T996] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  230.859364][  T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.883715][  T996] usb 5-1: Product: syz
[  230.888274][  T996] usb 5-1: Manufacturer: ⯉褮恤ဤ烔᜞ꅰ넺猳Ⅼ몭Ѣ鏍￣츏Ṟ薹ਅ쉜ƛ⹏슌뿅듲
[  230.900165][  T996] usb 5-1: SerialNumber: syz
[  231.171802][  T996] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  231.291567][ T7851] FAULT_INJECTION: forcing a failure.
[  231.291567][ T7851] name failslab, interval 1, probability 0, space 0, times 0
[  231.307305][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT(full) 
[  231.307337][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  231.307351][ T7851] Call Trace:
[  231.307359][ T7851]  <TASK>
[  231.307367][ T7851]  dump_stack_lvl+0xe8/0x150
[  231.307440][ T7851]  should_fail_ex+0x40c/0x560
[  231.307469][ T7851]  should_failslab+0xa8/0x100
[  231.307500][ T7851]  __kmalloc_noprof+0xfe/0x720
[  231.307524][ T7851]  ? rcu_is_watching+0x15/0xb0
[  231.307543][ T7851]  ? tomoyo_realpath_from_path+0xef/0x640
[  231.307566][ T7851]  ? tomoyo_realpath_from_path+0xef/0x640
[  231.307590][ T7851]  tomoyo_realpath_from_path+0xef/0x640
[  231.307618][ T7851]  ? tomoyo_path_number_perm+0x219/0x5f0
[  231.307644][ T7851]  tomoyo_path_number_perm+0x246/0x5f0
[  231.307668][ T7851]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  231.307692][ T7851]  ? __lock_acquire+0x683/0x2cf0
[  231.307726][ T7851]  ? hook_file_ioctl+0x1f0/0x5f0
[  231.307759][ T7851]  ? __fget_files+0x2a/0x420
[  231.307786][ T7851]  ? __fget_files+0x2a/0x420
[  231.307807][ T7851]  ? __fget_files+0x3a2/0x420
[  231.307827][ T7851]  ? __fget_files+0x2a/0x420
[  231.307851][ T7851]  security_file_ioctl+0xc3/0x2a0
[  231.307882][ T7851]  __se_sys_ioctl+0x47/0x170
[  231.307900][ T7851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.307917][ T7851]  do_syscall_64+0x174/0x580
[  231.307935][ T7851]  ? trace_irq_disable+0x3b/0x140
[  231.307958][ T7851]  ? clear_bhb_loop+0x40/0x90
[  231.307980][ T7851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.307998][ T7851] RIP: 0033:0x7f522c79de99
[  231.308021][ T7851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.308036][ T7851] RSP: 002b:00007f522d5ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.308054][ T7851] RAX: ffffffffffffffda RBX: 00007f522ca25fa0 RCX: 00007f522c79de99
[  231.308067][ T7851] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000007
[  231.308079][ T7851] RBP: 00007f522d5ad090 R08: 0000000000000000 R09: 0000000000000000
[  231.308090][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.308101][ T7851] R13: 00007f522ca26038 R14: 00007f522ca25fa0 R15: 00007f522cb4fa48
[  231.308128][ T7851]  </TASK>
[  231.308136][ T7851] ERROR: Out of memory at tomoyo_realpath_from_path.
[  231.318667][  T996] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  231.551521][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[  231.610439][  T996] usb 5-1: USB disconnect, device number 35
[  231.678784][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.970798][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.987918][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.186485][ T5771] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  232.197148][ T7869] sctp: [Deprecated]: syz.1.607 (pid 7869) Use of int in maxseg socket option.
[  232.197148][ T7869] Use struct sctp_assoc_value instead
[  232.361518][ T5771] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4
[  232.387010][ T5771] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4
[  232.421651][ T5771] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  232.461789][ T5771] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  232.481795][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.502882][ T5771] usb 5-1: Product: syz
[  232.521458][ T5771] usb 5-1: Manufacturer: syz
[  232.532929][ T5771] usb 5-1: SerialNumber: syz
[  232.785918][ T5771] usb 5-1: Can't get UAC3 power state for id 10
[  232.807895][ T6173] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  232.825635][ T5771] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  232.851719][ T5771] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  232.870127][ T5771] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  232.891686][ T5771] usb 5-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[  232.947438][ T6173] usb 2-1: device descriptor read/64, error -71
[  232.976156][ T5771] usb 5-1: USB disconnect, device number 36
[  233.186511][ T6173] usb 2-1: new low-speed USB device number 43 using dummy_hcd
[  233.326697][ T6173] usb 2-1: device descriptor read/64, error -71
[  233.438233][ T6173] usb usb2-port1: attempt power cycle
[  233.663195][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  233.679804][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  233.689997][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  233.699694][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  233.708358][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  233.777772][ T6173] usb 2-1: new low-speed USB device number 44 using dummy_hcd
[  233.817596][ T5771] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  233.818317][ T6173] usb 2-1: device descriptor read/8, error -71
[  233.977267][ T5771] usb 5-1: Using ep0 maxpacket: 32
[  233.994335][ T5771] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  234.011081][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.029231][ T5771] usb 5-1: Product: syz
[  234.043014][ T5771] usb 5-1: Manufacturer: syz
[  234.057205][ T5771] usb 5-1: SerialNumber: syz
[  234.090259][ T5771] usb 5-1: config 0 descriptor??
[  234.096644][ T6173] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[  234.128821][ T6173] usb 2-1: device descriptor read/8, error -71
[  234.246825][ T6173] usb usb2-port1: unable to enumerate USB device
[  234.308375][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.329451][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.444541][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.480848][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.521226][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.541815][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.556658][ T7885] bridge_slave_0: entered allmulticast mode
[  234.573752][ T7885] bridge_slave_0: entered promiscuous mode
[  234.591815][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.608137][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.623988][ T7885] bridge_slave_1: entered allmulticast mode
[  234.640368][ T7885] bridge_slave_1: entered promiscuous mode
[  234.713485][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.730697][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.810832][ T7885] team0: Port device team_slave_0 added
[  234.829467][ T7885] team0: Port device team_slave_1 added
[  234.916032][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.931629][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.980897][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.008822][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.018418][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.050696][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.151570][ T7885] hsr_slave_0: entered promiscuous mode
[  235.159246][ T7885] hsr_slave_1: entered promiscuous mode
[  235.172254][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'.
[  235.257230][  T996] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  235.306562][ T5357] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  235.373026][ T7902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (15890850168 ns). Using initial count to start timer.
[  235.431519][  T996] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.460771][ T5357] usb 6-1: Using ep0 maxpacket: 16
[  235.468288][  T996] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  235.473758][ T5357] usb 6-1: unable to get BOS descriptor or descriptor too short
[  235.493267][  T996] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  235.509713][ T5357] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 233, changing to 7
[  235.525504][ T5357] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7
[  235.556235][ T5357] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1024
[  235.570114][  T996] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  235.582299][  T996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.591715][ T5357] usb 6-1: language id specifier not provided by device, defaulting to English
[  235.603258][  T996] usb 4-1: Product: syz
[  235.608751][  T996] usb 4-1: Manufacturer: syz
[  235.613608][  T996] usb 4-1: SerialNumber: syz
[  235.618885][ T5357] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  235.633034][ T5357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.650654][ T5357] usb 6-1: Product: syz
[  235.657593][ T5357] usb 6-1: Manufacturer: ⯉褮恤ဤ烔᜞ꅰ넺猳Ⅼ몭Ѣ鏍￣츏Ṟ薹ਅ쉜ƛ⹏슌뿅듲
[  235.678828][ T7909] usb usb7: usbfs: process 7909 (syz.1.618) did not claim interface 0 before use
[  235.688189][ T5357] usb 6-1: SerialNumber: syz
[  235.723232][ T7885] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  235.737722][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  235.749432][ T7885] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  235.765064][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  235.774274][ T7885] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  235.785742][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  235.793044][ T5635] Bluetooth: hci4: command tx timeout
[  235.800079][ T7885] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  235.813344][ T7885] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  235.887715][ T7900] binder: 7898:7900 ioctl 5381 0 returned -22
[  235.956250][ T5357] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  235.997113][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.044682][ T7885] 8021q: adding VLAN 0 to HW filter on device team0
[  236.074698][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.083623][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.104172][ T5357] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  236.109409][  T996] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  236.139960][ T5357] usb 6-1: USB disconnect, device number 20
[  236.142403][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.153451][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.180347][  T996] usb 4-1: MIDIStreaming interface descriptor not found
[  236.198374][  T996] usb 4-1: 0:2 : does not exist
[  236.203686][  T996] usb 4-1: unit 4 not found!
[  236.204139][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  236.416259][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.430996][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.445761][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.460941][  T996] usb 4-1: USB disconnect, device number 40
[  236.499788][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.581221][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.590480][ T7885] veth0_vlan: entered promiscuous mode
[  236.615677][ T7261] udevd[7261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  236.645541][ T7885] veth1_vlan: entered promiscuous mode
[  236.773075][ T7885] veth0_macvtap: entered promiscuous mode
[  236.826963][ T7885] veth1_macvtap: entered promiscuous mode
[  236.837991][   T30] audit: type=1326 audit(1785246358.765:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f826af9de99 code=0x0
[  236.896722][ T7925] netlink: 'syz.5.621': attribute type 21 has an invalid length.
[  236.922938][ T7929] openvswitch: netlink: Duplicate or invalid key (type 0).
[  236.935801][ T7925] netlink: 128 bytes leftover after parsing attributes in process `syz.5.621'.
[  236.939012][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.955092][ T7929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.979229][ T7925] netlink: 3 bytes leftover after parsing attributes in process `syz.5.621'.
[  236.999793][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.036018][ T7927] syzkaller0: entered promiscuous mode
[  237.052971][ T7927] syzkaller0: entered allmulticast mode
[  237.072651][ T1118] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.091323][ T1118] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.141113][ T1118] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.153488][ T1118] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.165261][ T7934] fuse: Unknown parameter 'f`'
[  237.396158][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.430001][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.518797][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.535491][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.713286][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  237.754377][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  237.823077][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  237.858855][ T5635] Bluetooth: hci4: command tx timeout
[  237.886029][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  237.916721][ T7947] vcan0: tx drop: invalid da for name 0xfffffffffffffffc
[  237.957209][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  237.997665][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  238.082193][ T7950] FAULT_INJECTION: forcing a failure.
[  238.082193][ T7950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.090216][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  238.104115][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.4.628 Not tainted syzkaller #0 PREEMPT(full) 
[  238.104150][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  238.104178][ T7950] Call Trace:
[  238.104187][ T7950]  <TASK>
[  238.104195][ T7950]  dump_stack_lvl+0xe8/0x150
[  238.104231][ T7950]  should_fail_ex+0x40c/0x560
[  238.104259][ T7950]  fpu__restore_sig+0x207/0x1200
[  238.104294][ T7950]  ? __pfx_fpu__restore_sig+0x10/0x10
[  238.104344][ T7950]  __ia32_sys_rt_sigreturn+0x756/0x8c0
[  238.104378][ T7950]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  238.104427][ T7950]  ? rcu_is_watching+0x15/0xb0
[  238.104454][ T7950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.104473][ T7950]  do_syscall_64+0x174/0x580
[  238.104493][ T7950]  ? clear_bhb_loop+0x40/0x90
[  238.104513][ T7950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.104528][ T7950] RIP: 0033:0x7f6a0f75e6ce
[  238.104545][ T7950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  238.104560][ T7950] RSP: 002b:00007f6a106d9fe8 EFLAGS: 00000246
[  238.104577][ T7950] RAX: 0000000000000001 RBX: 00007f6a106da6c0 RCX: 00007f6a0f75e6ce
[  238.104588][ T7950] RDX: 0000000000000001 RSI: 00007f6a106da090 RDI: 0000000000000007
[  238.104599][ T7950] RBP: 00007f6a106da090 R08: 0000000000000000 R09: 0000000000000000
[  238.104609][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  238.104619][ T7950] R13: 00007f6a0fa26038 R14: 00007f6a0fa25fa0 R15: 00007f6a0fb4fa48
[  238.104643][ T7950]  </TASK>
[  238.273879][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'.
[  238.327005][   T29] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  238.367762][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.395489][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.508967][   T29] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  238.539391][   T29] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  238.567015][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.584637][   T29] usb 7-1: Product: syz
[  238.589441][   T29] usb 7-1: Manufacturer: syz
[  238.594273][   T29] usb 7-1: SerialNumber: syz
[  238.619000][   T29] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  239.116550][ T6173] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  239.277750][ T6173] usb 2-1: Using ep0 maxpacket: 8
[  239.292844][ T6173] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  239.322339][ T6173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.353554][ T6173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.391791][ T6173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  239.421936][ T6173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.442454][   T29] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  239.467212][ T6173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  239.494251][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.512046][ T6173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.532595][   T29] usb 7-1: USB disconnect, device number 2
[  239.573134][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.720993][ T7977] kvm: apic: phys broadcast and lowest prio
[  239.829830][ T6173] usb 2-1: GET_CAPABILITIES returned 0
[  239.837552][ T6173] usbtmc 2-1:16.0: can't read capabilities
[  239.906900][  T808] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  239.947657][ T5635] Bluetooth: hci4: command tx timeout
[  240.066921][  T808] usb 6-1: Using ep0 maxpacket: 16
[  240.075979][  T808] usb 6-1: config 0 has an invalid interface number: 31 but max is 2
[  240.084769][  T808] usb 6-1: config 0 has an invalid interface number: 79 but max is 2
[  240.093323][  T808] usb 6-1: config 0 has an invalid interface number: 96 but max is 2
[  240.103014][  T808] usb 6-1: config 0 has an invalid interface number: 11 but max is 2
[  240.111460][  T808] usb 6-1: config 0 has 5 interfaces, different from the descriptor's value: 3
[  240.121042][  T808] usb 6-1: config 0 has no interface number 1
[  240.127488][  T808] usb 6-1: config 0 has no interface number 2
[  240.133647][  T808] usb 6-1: config 0 has no interface number 3
[  240.140549][  T808] usb 6-1: config 0 has no interface number 4
[  240.147339][  T808] usb 6-1: config 0 interface 31 altsetting 143 endpoint 0x6 has invalid maxpacket 112, setting to 64
[  240.159195][  T808] usb 6-1: config 0 interface 31 altsetting 143 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  240.171284][  T808] usb 6-1: config 0 interface 31 altsetting 143 has an invalid descriptor for endpoint zero, skipping
[  240.183529][  T808] usb 6-1: config 0 interface 31 altsetting 143 has an invalid descriptor for endpoint zero, skipping
[  240.195056][  T808] usb 6-1: config 0 interface 31 altsetting 143 endpoint 0x7 has invalid maxpacket 50639, setting to 64
[  240.214860][  T808] usb 6-1: config 0 interface 31 altsetting 143 has an invalid descriptor for endpoint zero, skipping
[  240.226773][  T808] usb 6-1: config 0 interface 31 altsetting 143 has an invalid descriptor for endpoint zero, skipping
[  240.242328][  T808] usb 6-1: config 0 interface 31 altsetting 143 endpoint 0xB has invalid maxpacket 65397, setting to 64
[  240.254295][  T808] usb 6-1: config 0 interface 31 altsetting 143 has 10 endpoint descriptors, different from the interface descriptor's value: 15
[  240.255818][ T5718] usb 2-1: USB disconnect, device number 46
[  240.286029][  T808] usb 6-1: too many endpoints for config 0 interface 79 altsetting 91: 60, using maximum allowed: 30
[  240.298146][  T808] usb 6-1: config 0 interface 79 altsetting 91 has a duplicate endpoint with address 0xC, skipping
[  240.310341][  T808] usb 6-1: config 0 interface 79 altsetting 91 has an invalid descriptor for endpoint zero, skipping
[  240.327589][  T808] usb 6-1: config 0 interface 79 altsetting 91 has an invalid descriptor for endpoint zero, skipping
[  240.339762][  T808] usb 6-1: config 0 interface 79 altsetting 91 has 4 endpoint descriptors, different from the interface descriptor's value: 60
[  240.355155][  T808] usb 6-1: too many endpoints for config 0 interface 96 altsetting 176: 231, using maximum allowed: 30
[  240.373191][  T808] usb 6-1: config 0 interface 96 altsetting 176 has an invalid descriptor for endpoint zero, skipping
[  240.401086][  T808] usb 6-1: config 0 interface 96 altsetting 176 has 1 endpoint descriptor, different from the interface descriptor's value: 231
[  240.415188][  T808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8
[  240.428462][  T808] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  240.439720][  T808] usb 6-1: config 0 interface 11 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  240.452464][  T808] usb 6-1: config 0 interface 11 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  240.463752][  T808] usb 6-1: config 0 interface 11 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[  240.474954][  T808] usb 6-1: config 0 interface 11 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[  240.487036][  T808] usb 6-1: config 0 interface 31 has no altsetting 0
[  240.494580][  T808] usb 6-1: config 0 interface 79 has no altsetting 0
[  240.501660][  T808] usb 6-1: config 0 interface 96 has no altsetting 0
[  240.514285][  T808] usb 6-1: config 0 interface 11 has no altsetting 0
[  240.525031][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.538840][  T808] usb 6-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=64.73
[  240.548639][  T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.556765][ T5627] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  240.557582][  T808] usb 6-1: Product: ␁
[  240.575707][  T808] usb 6-1: Manufacturer: ࠖ
[  240.606496][  T808] usb 6-1: SerialNumber: 벽꾓薍ᣂ孜䂜狣딹啩㭓ρ痟븝춭趛䍧삺졤ɟ闈㈭탊ㆡ잝坌벾➇관Ƥ臨蓷끩럦ሊ䭒熘紪쨹䐵㝁㬀﫠ꂨ뿪澒௅릟㳶繈ັዞ炩쓬ᵻ죖㣡쉄輊㬚賂뻃☋५Ꮎ뿛곽툛騷縲䕒뱈ﻴݍ艣騠Ł鉙⹿⋷㠅Ṭ靠ଷ僌
[  240.641983][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.663098][  T808] usb 6-1: config 0 descriptor??
[  240.739923][ T5627] usb 7-1: config 2 has an invalid interface number: 97 but max is 0
[  240.759016][ T5627] usb 7-1: config 2 has no interface number 0
[  240.769950][ T5627] usb 7-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  240.788727][ T5627] usb 7-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64
[  240.799188][ T5627] usb 7-1: config 2 interface 97 has no altsetting 0
[  240.808434][ T5627] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  240.824136][ T5627] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.832509][ T5627] usb 7-1: Product: syz
[  240.836966][ T5627] usb 7-1: Manufacturer: syz
[  240.841704][ T5627] usb 7-1: SerialNumber: syz
[  240.850506][ T7983] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  240.871002][ T7983] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  240.936614][   T24] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  240.971843][ T7979] could not allocate digest TFM handle sha224-ssse3
[  240.990298][  T808] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  241.002990][  T808] usb 6-1: selecting invalid altsetting 0
[  241.018261][  T808] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  241.026028][  T808] usb 6-1: selecting invalid altsetting 0
[  241.038789][  T808] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  241.046779][  T808] usb 6-1: selecting invalid altsetting 0
[  241.058147][   T31] INFO: task syz.2.13:5769 blocked for more than 143 seconds.
[  241.058529][  T808] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  241.071090][   T31]       Not tainted syzkaller #0
[  241.082629][  T808] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  241.090828][   T31]       Blocked by coredump.
[  241.090900][  T808] usb 6-1: selecting invalid altsetting 0
[  241.102678][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.110006][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  241.117547][   T31] task:syz.2.13        state:D stack:26768 pid:5769  tgid:5767  ppid:5643   task_flags:0x40044c flags:0x00080001
[  241.134868][   T31] Call Trace:
[  241.134930][  T808] usb 6-1: USB disconnect, device number 21
[  241.146557][   T31]  <TASK>
[  241.149815][   T31]  __schedule+0x17d9/0x56c0
[  241.150175][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  241.154651][   T31]  ? __pfx___schedule+0x10/0x10
[  241.167934][   T31]  ? schedule+0x90/0x2b0
[  241.177352][   T31]  schedule+0x164/0x2b0
[  241.182738][   T31]  schedule_preempt_disabled+0x13/0x30
[  241.185392][   T24] usb 4-1: config 5 has an invalid interface number: 8 but max is 1
[  241.203506][   T24] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2
[  241.215424][   T31]  __mutex_lock+0x7bf/0x1550
[  241.233239][   T31]  ? __mutex_lock+0x5d4/0x1550
[  241.239724][   T31]  ? usbdev_release+0x7e/0x750
[  241.244766][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  241.250449][   T31]  ? __fsnotify_parent+0x267/0x620
[  241.254211][  T808] pvrusb2: Device being rendered inoperable
[  241.256081][   T31]  ? __pfx___fsnotify_parent+0x10/0x10
[  241.268196][   T31]  usbdev_release+0x7e/0x750
[  241.269048][   T24] usb 4-1: config 5 has no interface number 0
[  241.273026][   T31]  ? __pfx_usbdev_release+0x10/0x10
[  241.281015][   T24] usb 4-1: config 5 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 26232, setting to 64
[  241.288333][   T31]  __fput+0x418/0xa50
[  241.299844][  T808] pvrusb2: Device being rendered inoperable
[  241.302511][  T808] pvrusb2: Device being rendered inoperable
[  241.313925][   T31]  task_work_run+0x1d9/0x270
[  241.319747][   T24] usb 4-1: config 5 interface 8 has no altsetting 0
[  241.320723][  T808] pvrusb2: Device being rendered inoperable
[  241.322992][   T24] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  241.345526][   T31]  ? __pfx_task_work_run+0x10/0x10
[  241.349557][  T808] pvrusb2: Device being rendered inoperable
[  241.352589][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  241.361636][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.362942][   T31]  do_exit+0x73a/0x2360
[  241.371302][   T24] usb 4-1: Product: syz
[  241.419910][   T24] usb 4-1: Manufacturer: syz
[  241.424641][   T31]  ? __kasan_slab_free+0x5c/0x80
[  241.429794][   T24] usb 4-1: SerialNumber: syz
[  241.468075][   T31]  ? kmem_cache_free+0x182/0x650
[  241.491405][   T31]  ? do_syscall_64+0x174/0x580
[  241.496686][   T31]  ? __pfx_do_exit+0x10/0x10
[  241.501681][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  241.507346][   T31]  do_group_exit+0x22d/0x2f0
[  241.512282][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.521192][   T31]  get_signal+0x121b/0x12c0
[  241.525987][   T31]  arch_do_signal_or_restart+0xbb/0x860
[  241.532069][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  241.538726][   T31]  ? do_sys_openat2+0x14e/0x200
[  241.544018][   T31]  ? exc_page_fault+0x6a/0xc0
[  241.552575][   T31]  exit_to_user_mode_loop+0x104/0x730
[  241.558664][   T31]  ? rcu_is_watching+0x15/0xb0
[  241.564267][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.573727][   T31]  do_syscall_64+0x353/0x580
[  241.579888][   T31]  ? trace_irq_disable+0x3b/0x140
[  241.586314][   T31]  ? clear_bhb_loop+0x40/0x90
[  241.591607][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.614210][   T31] RIP: 0033:0x7fc72d75e6ce
[  241.624779][   T31] RSP: 002b:00007fc72e632b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  241.645733][   T31] RAX: 0000000000000003 RBX: 00007fc72e6336c0 RCX: 00007fc72d75e6ce
[  241.655226][   T31] RDX: 0000000000101301 RSI: 00007fc72e632c00 RDI: ffffffffffffff9c
[  241.666811][   T31] RBP: 00007fc72e632c00 R08: 0000000000000000 R09: 0000000000000000
[  241.682041][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  241.696649][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  241.709352][   T31] R13: 00007fc72da26038 R14: 00007fc72da25fa0 R15: 00007fc72db4fa48
[  241.717490][   T31]  </TASK>
[  241.721065][   T31] 
[  241.721065][   T31] Showing all locks held in the system:
[  241.729424][   T31] 3 locks held by kworker/u8:1/13:
[  241.734698][   T31]  #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  241.754487][   T31]  #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  241.785390][   T31]  #2: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  241.794714][   T31] 4 locks held by kworker/1:0/24:
[  241.800591][   T31]  #0: ffff888022e91d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  241.812233][   T31]  #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  241.824570][   T31]  #2: ffff888029e941d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  241.833628][   T31]  #3: ffff8880679ed1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  241.843398][   T31] 1 lock held by khungtaskd/31:
[  241.848469][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  241.858717][   T31] 5 locks held by kworker/u8:5/84:
[  241.863972][   T31]  #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160
[  241.874027][   T31]  #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  241.883428][   T31]  #2: ffff8880b8726058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x904/0xed0
[  241.892900][   T31]  #3: ffffffff9aa44b18 (&obj_hash[i].lock){-.-.}-{2:2}, at: nsim_dev_trap_report_work+0x19e/0xb40
[  241.904102][   T31]  #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  241.913911][   T31] 2 locks held by pvrusb2-context/2367:
[  241.919829][   T31]  #0: ffff888034204180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xe4/0x3c60
[  241.930619][   T31]  #1: ffffffff8e9f5988 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0
[  241.941842][   T31] 2 locks held by getty/5380:
[  241.946805][   T31]  #0: ffff8880354700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  241.957597][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  241.968061][   T31] 4 locks held by kworker/0:3/5627:
[  241.973649][   T31]  #0: ffff888022e91d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  241.985251][   T31]  #1: ffffc90003ddfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  241.997243][   T31]  #2: ffff888029fae1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  242.006252][   T31]  #3: ffff888029bb71d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  242.015943][   T31] 4 locks held by udevd/5679:
[  242.021189][ T5635] Bluetooth: hci4: command tx timeout
[  242.026852][   T31]  #0: ffff888035046758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  242.036027][   T31]  #1: ffff88802537dc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  242.046085][   T31]  #2: ffff888074c81f08 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  242.056196][   T31]  #3: ffff88802a0011d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  242.066105][   T31] 6 locks held by kworker/0:4/5702:
[  242.071489][   T31]  #0: ffff888022e91d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  242.083302][   T31]  #1: ffffc900041cfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  242.095384][   T31]  #2: ffff888029cf51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  242.107252][   T31]  #3: ffff88802a0011d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0
[  242.116813][   T31]  #4: ffff8880777091a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  242.127720][   T31]  #5: ffff888034204180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x4f0
[  242.138316][   T31] 1 lock held by syz.2.13/5769:
[  242.143209][   T31]  #0: ffff888029cf51d8 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7e/0x750
[  242.152481][   T31] 5 locks held by kworker/0:7/5771:
[  242.158132][   T31]  #0: ffff888022e91d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  242.169634][   T31]  #1: ffffc900044bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  242.188133][   T31]  #2: ffff888029f8b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  242.197766][   T31]  #3: ffff888029d181d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  242.207205][   T31]  #4: ffff88807c5da1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  242.216691][   T31] 4 locks held by udevd/5801:
[  242.221547][   T31]  #0: ffff88805483f098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  242.230559][   T31]  #1: ffff888067fbb480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  242.240123][   T31]  #2: ffff888044b002d8 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  242.249847][   T31]  #3: ffff888029d181d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  242.259564][   T31] 4 locks held by udevd/5807:
[  242.264297][   T31]  #0: ffff888026569518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  242.273303][   T31]  #1: ffff888068893c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  242.282879][   T31]  #2: ffff888077d46a58 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  242.292579][   T31]  #3: ffff888029bb71d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  242.302088][   T31] 1 lock held by syz.0.533/7663:
[  242.307198][   T31]  #0: ffff88802a0011d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[  242.316525][   T31] 4 locks held by udevd/7930:
[  242.321258][   T31]  #0: ffff888030d40ab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  242.330730][   T31]  #1: ffff888068b1a880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  242.341793][   T31]  #2: ffff888072eb85a8 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  242.352056][   T31]  #3: ffff8880679ed1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  242.362051][   T31] 1 lock held by syz.6.639/7981:
[  242.367245][   T31]  #0: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  242.377370][   T31] 1 lock held by syz.3.641/7988:
[  242.382463][   T31] 2 locks held by syz.3.641/7989:
[  242.387886][   T31]  #0: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810
[  242.397226][   T31]  #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  242.408705][   T31] 
[  242.411489][   T31] =============================================
[  242.411489][   T31] 
[  242.422825][   T31] NMI backtrace for cpu 0
[  242.422845][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  242.422868][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  242.422881][   T31] Call Trace:
[  242.422890][   T31]  <TASK>
[  242.422897][   T31]  dump_stack_lvl+0xe8/0x150
[  242.422944][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  242.422976][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  242.423006][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  242.423036][   T31]  sys_info+0x135/0x170
[  242.423059][   T31]  watchdog+0xfd7/0x1030
[  242.423090][   T31]  ? watchdog+0x1c7/0x1030
[  242.423118][   T31]  kthread+0x388/0x470
[  242.423144][   T31]  ? __pfx_watchdog+0x10/0x10
[  242.423165][   T31]  ? __pfx_kthread+0x10/0x10
[  242.423191][   T31]  ret_from_fork+0x514/0xb70
[  242.423221][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  242.423247][   T31]  ? __switch_to+0xc89/0x1420
[  242.423275][   T31]  ? __pfx_kthread+0x10/0x10
[  242.423303][   T31]  ret_from_fork_asm+0x1a/0x30
[  242.423336][   T31]  </TASK>
[  242.423392][   T31] Sending NMI from CPU 0 to CPUs 1:
[  242.535407][    C1] NMI backtrace for cpu 1
[  242.535426][    C1] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  242.535446][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  242.535458][    C1] RIP: 0010:__lock_acquire+0x288/0x2cf0
[  242.535490][    C1] Code: 24 20 01 00 00 00 0f 85 c8 fe ff ff 8b bc 24 38 01 00 00 4c 8b 84 24 28 01 00 00 4d 8d be a0 0b 00 00 83 fd 31 48 89 74 24 20 <0f> 83 e5 27 00 00 48 89 2c 24 48 8d 04 ad 00 00 00 00 48 01 e8 89
[  242.535509][    C1] RSP: 0018:ffffc9000391f7e8 EFLAGS: 00000083
[  242.535525][    C1] RAX: 000000000000a7f8 RBX: 0000000000000000 RCX: ffffffff9415e510
[  242.535537][    C1] RDX: 0000000000000000 RSI: 00000000000006b8 RDI: 0000000000000000
[  242.535548][    C1] RBP: 0000000000000001 R08: ffffffff89988f2f R09: 0000000000000000
[  242.535559][    C1] R10: 0000000000000000 R11: ffff88807b56e9e8 R12: 0000000000000000
[  242.535571][    C1] R13: 0000000000000000 R14: ffff8880354f9f00 R15: ffff8880354faaa0
[  242.535583][    C1] FS:  000055558e05e540(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000
[  242.535599][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  242.535610][    C1] CR2: 0000001b31324224 CR3: 0000000074950000 CR4: 00000000003526f0
[  242.535625][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  242.535638][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  242.535650][    C1] Call Trace:
[  242.535658][    C1]  <TASK>
[  242.535667][    C1]  ? __pfx_tcp_recvmsg_locked+0x10/0x10
[  242.535692][    C1]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  242.535710][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  242.535730][    C1]  ? irqentry_exit+0x218/0x8f0
[  242.535748][    C1]  ? trace_irq_disable+0x3b/0x140
[  242.535774][    C1]  ? release_sock+0x2f/0x260
[  242.535799][    C1]  lock_acquire+0x106/0x350
[  242.535822][    C1]  ? release_sock+0x2f/0x260
[  242.535847][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  242.535868][    C1]  ? release_sock+0x2f/0x260
[  242.535893][    C1]  _raw_spin_lock_bh+0x36/0x50
[  242.535910][    C1]  ? release_sock+0x2f/0x260
[  242.535963][    C1]  release_sock+0x2f/0x260
[  242.535989][    C1]  tcp_recvmsg+0x213/0x7f0
[  242.536012][    C1]  ? __pfx_aa_sk_perm+0x10/0x10
[  242.536027][    C1]  ? __pfx_tcp_recvmsg+0x10/0x10
[  242.536048][    C1]  ? sock_rps_record_flow+0x19/0x350
[  242.536067][    C1]  ? inet_recvmsg+0xb3/0x120
[  242.536082][    C1]  ? __pfx_inet_recvmsg+0x10/0x10
[  242.536098][    C1]  sock_recvmsg+0x166/0x1e0
[  242.536124][    C1]  sock_read_iter+0x22a/0x2f0
[  242.536146][    C1]  ? __pfx_sock_read_iter+0x10/0x10
[  242.536170][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  242.536190][    C1]  ? security_file_permission+0x75/0x260
[  242.536221][    C1]  vfs_read+0x595/0xa80
[  242.536238][    C1]  ? __hrtimer_setup+0x1b7/0x260
[  242.536259][    C1]  ? __pfx_vfs_read+0x10/0x10
[  242.536282][    C1]  ksys_read+0x150/0x270
[  242.536299][    C1]  ? __pfx_ksys_read+0x10/0x10
[  242.536317][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.536336][    C1]  do_syscall_64+0x174/0x580
[  242.536356][    C1]  ? clear_bhb_loop+0x40/0x90
[  242.536373][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.536389][    C1] RIP: 0033:0x7f1e11159017
[  242.536403][    C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  242.536417][    C1] RSP: 002b:00007ffe02bed020 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  242.536434][    C1] RAX: ffffffffffffffda RBX: 000055558e05e540 RCX: 00007f1e11159017
[  242.536446][    C1] RDX: 0000000000000004 RSI: 00007ffe02bed07c RDI: 0000000000000003
[  242.536457][    C1] RBP: 00007ffe02bed520 R08: 0000000000000000 R09: 0000000000000000
[  242.536468][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[  242.536479][    C1] R13: 00007ffe02bed07c R14: 00007ffe02bed110 R15: 0000000000000000
[  242.536497][    C1]  </TASK>
[  242.934239][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  242.941340][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  242.950805][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  242.961423][   T31] Call Trace:
[  242.964872][   T31]  <TASK>
[  242.967917][   T31]  vpanic+0x56c/0xa60
[  242.972245][   T31]  ? __pfx___schedule+0x10/0x10
[  242.977141][   T31]  ? __pfx_vpanic+0x10/0x10
[  242.981715][   T31]  panic+0xc5/0xd0
[  242.985492][   T31]  ? __pfx_panic+0x10/0x10
[  242.990205][   T31]  ? preempt_schedule_common+0x82/0xd0
[  242.995690][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  243.001229][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  243.007440][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  243.013643][   T31]  watchdog+0x1030/0x1030
[  243.018003][   T31]  ? watchdog+0x1c7/0x1030
[  243.022486][   T31]  kthread+0x388/0x470
[  243.026875][   T31]  ? __pfx_watchdog+0x10/0x10
[  243.031939][   T31]  ? __pfx_kthread+0x10/0x10
[  243.036988][   T31]  ret_from_fork+0x514/0xb70
[  243.041788][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  243.047549][   T31]  ? __switch_to+0xc89/0x1420
[  243.052262][   T31]  ? __pfx_kthread+0x10/0x10
[  243.057057][   T31]  ret_from_fork_asm+0x1a/0x30
[  243.061943][   T31]  </TASK>
[  243.065441][   T31] Kernel Offset: disabled
[  243.069835][   T31] Rebooting in 86400 seconds..