last executing test programs:

9.379246249s ago: executing program 0 (id=573):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf6bb789b9f161f2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf4}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fee3af9b7ca0b59bd50cac6f57d288d3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="957430f48dfaac2fbc3ee0f3e90fbae8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "55622f754f52dd64"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="25336dde8bf4db0215cbbc5426862cbb183fd833a262f5b1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002)
sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1eeb5", 0x99}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000800)=[{0xc0, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x2c, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf4, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0x98, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x50, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x3c, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0xc, 0x108, 0x8fa}], 0x310}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)
r8 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x402, 0x3, 0xda4d})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000b5c0)=ANY=[@ANYBLOB="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"], 0x5bec}}, 0x2004c000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
userfaultfd(0x801)

9.333538183s ago: executing program 2 (id=574):
r0 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
clock_gettime(0x6, &(0x7f0000000180))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x6e6bbf, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000480))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
process_madvise(r7, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

9.022094063s ago: executing program 3 (id=578):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0x7f}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10, 0x404c010}}], 0x1, 0xc004)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000002300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x90, 0x0)
write$FUSE_ENTRY(r8, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x3, {0x5, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x30311810}}}, 0x90)
recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f00000000c0)=@sg0, r9, 0x0)
gettid()
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)=0xffff0018)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x20, 0x2f, 0x400, 0x70bd29, 0x25dfdbff, {0x5}, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}]}, 0x20}, 0x1, 0x0, 0x0, 0x42944}, 0x20000090)
socket$can_j1939(0x1d, 0x2, 0x7)

8.513869122s ago: executing program 0 (id=582):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x40, 0x0, {}, {}, 0x0, 0x2, {}, 0x58603})
syz_clone(0x86000, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x3, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x3, 0x1, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4b, 0xa5, 0xbdb], 0x40000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x84)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000140)={0x3, 0x0, [{0x80000019, 0xfffffffd, 0x0, 0x4a0, 0x5, 0x9, 0x9}, {0x80000001, 0x3000000, 0x2, 0xffffffff, 0x0, 0x100, 0xfffffffc}, {0x1, 0x3, 0x2, 0x525, 0x6, 0x7, 0x4}]})
sendto$inet6(r6, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c)
getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

7.071753758s ago: executing program 3 (id=587):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in6=@empty, 0x4e21, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffe, 0x7fff, 0x1f, 0x1fe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5000000}, 0x1c)

6.972884226s ago: executing program 3 (id=588):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
close(r0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
timer_delete(0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000580))
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000a3c000/0x2000)=nil, 0x2000, 0x2800003, 0x810, r5, 0x231cf000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'bridge0\x00', 0x0}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) (async)
syz_clone(0x6004500, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x17, 0x0, &(0x7f0000000000)={0x2}, 0x0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, <r9=>r7})
ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000b00030000006700000004000000180100002020040000000000000020207b1af8ff00000000bfa100000000000057610000000000ffb702000008000000b70300000700000085000000a00000009500000000000000", @ANYRESDEC=r8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4c)

6.926393121s ago: executing program 2 (id=589):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000003000000fc000000020000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

6.755969603s ago: executing program 2 (id=590):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000100)={0x3}, 0x8, 0x0)
msgsnd(r1, &(0x7f0000007ac0)=ANY=[@ANYBLOB="01"], 0xf1, 0x0)
msgrcv(r1, &(0x7f00000080c0)={0x0, ""/84}, 0x5c, 0xda72ed5a9dc29567, 0x3800)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3)
syz_clone(0x21215000, &(0x7f0000000100)="6464644879eadbc4776b79bde104678ddf6dfc63dda6173beecea10152d970eebec7250b1cdb261787fb5d14348d66c7afd6d77bac4ac8cbd99132262c295a76858026967bde3782502ee601e86415e767e37026281f3a8638fa84b1b78fdcded02edf32edecc84321b9547bc700800000859ffeef9bcbb9cfbd9f15", 0x7c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

6.65601707s ago: executing program 3 (id=591):
userfaultfd(0x80801)
syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="b574ffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa02009078000000cde05b29ab00001100fc0100000000000000000000000000000000000000000000000000000000000000000000200000000533000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0x8, 0x67}, 0x1, 0x9, 0xfffffc01, {0x0, 0x53}, 0x1, 0x10})
fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x9})
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10)
listen(r2, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x8c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0x3f, 0x6, 0x1, 0x0, "f8db888edea6ce1cd4ec4c25b53b749da38784d8429d0942d4bcfb195fb479519d1ea77350e16676d3718313649cf8aed79ef65bcb193c557745da"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x110}}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000200"/172], 0xf8}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
syz_usbip_server_init(0x6)
listen(r3, 0x0)

6.533954191s ago: executing program 1 (id=592):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x20}}, 0x24, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x8c)
close(0x3)

6.420814399s ago: executing program 1 (id=593):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x99, 0x1}, &(0x7f0000000480)=0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f09"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b753b5086d049608ee3901020301090212000100000000"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc00000000000000a251a4f45205f1af060004400e1f00000500070088000000060005404e1f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.941952808s ago: executing program 0 (id=594):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50)
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x100, 0x2, 0x131}, &(0x7f0000000140), 0x0, &(0x7f0000000000))
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x15)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file2\x00', 0x120000, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@default_permissions}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, 't!\x06{}.Q^+/'}}, {@appraise}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '(].#][{-.!\\:!\\'}}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000a40))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}, @exit], &(0x7f0000000200)='GPL\x00', 0xfffe}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'erspan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x1, 0x3)
fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000001ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd20000000480003006465666c61746500"/216], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

4.770392799s ago: executing program 2 (id=600):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0x7f}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10, 0x404c010}}], 0x1, 0xc004)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000002300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x90, 0x0)
write$FUSE_ENTRY(r8, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x3, {0x5, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x30311810}}}, 0x90)
recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f00000000c0)=@sg0, r9, 0x0)
gettid()
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)=0xffff0018)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x20, 0x2f, 0x400, 0x70bd29, 0x25dfdbff, {0x5}, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}]}, 0x20}, 0x1, 0x0, 0x0, 0x42944}, 0x20000090)
socket$can_j1939(0x1d, 0x2, 0x7)

4.650715009s ago: executing program 4 (id=601):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0d, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x10, 0x1ff}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0)
unshare(0x2e020400)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000040)='\x00', &(0x7f00000000c0)='/dev/net/tun\x00', &(0x7f00000001c0)='/dev/net/tun\x00']}, &(0x7f0000000440)={[&(0x7f0000000240)='/dev/ppp\x00', &(0x7f0000000300)='[\x00', &(0x7f0000000340)='/dev/net/tun\x00', &(0x7f0000000380)='}&$\x00', &(0x7f00000003c0)='^\\$\x00', &(0x7f0000000400)='/dev/net/tun\x00']})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0d, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x10, 0x1ff}, 0x94) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
close(r0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff8) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) (async)
unshare(0x2e020400) (async)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000040)='\x00', &(0x7f00000000c0)='/dev/net/tun\x00', &(0x7f00000001c0)='/dev/net/tun\x00']}, &(0x7f0000000440)={[&(0x7f0000000240)='/dev/ppp\x00', &(0x7f0000000300)='[\x00', &(0x7f0000000340)='/dev/net/tun\x00', &(0x7f0000000380)='}&$\x00', &(0x7f00000003c0)='^\\$\x00', &(0x7f0000000400)='/dev/net/tun\x00']}) (async)

4.432771513s ago: executing program 4 (id=602):
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000003f00000100000000001c00090008"], 0x4c}}, 0x40000)

4.405825127s ago: executing program 4 (id=603):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x20}}, 0x24, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x8c)
close(0x3)

4.360429083s ago: executing program 0 (id=604):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000046c0)={0xcf6, "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"})
syz_usb_connect$midi(0x5, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000408205230040000102030109022c0001011998040904000002010300f709058e0b20000fd7020425110009058c0220006df78004250100"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0x3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080))
r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x11400, 0x0, 0x51}, &(0x7f0000000300)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x20, 0x0, 0xffffffffffffffff, 0xffffffff00000001, 0xffffffffffffffff, 0xbd7, 0x10, 0xd293f69c73b5f9fc, {0x758}})
io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0xa}}, 0x26)
close(0x3)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x18, r11, 0x601, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044885}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r13, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)
sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x11c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xf0, 0x7, 0x1, 0x0, "6c27293a4eac33bf4b95e41411ca9a1a0f001f42f680b55f11560eae509984ba5fded33936c58371e118ed4569954a6553175a2ffac29707890d6e2dcc6017f0ec3ae596ad61212b9229a5289bd8e0975c5204a35b94d84f6f40dc50a083250d886a8149f2e991d54a7fd55cb3f8761f70d4489555c6c54f6dd78a67372b25546544e863ac60fb7f64c04700706486315f23ae57ca37dc78dc08a3b02f3f9e3e0f071cc622630fe7d0cdafa78773a49c05e9caeaa8d460b0b389033f27fa9eb72674aa446db904271c66fb93fab8da7fc0a6ca6f1e703937953cb271eba16b010d33d7ecc94edda2aa772cb8"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x144}}, 0x20000044)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, 0x0, 0x40000)
chdir(&(0x7f0000000000)='./file0\x00')

3.629143922s ago: executing program 3 (id=605):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0x7f}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10, 0x404c010}}], 0x1, 0xc004)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000002300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x90, 0x0)
write$FUSE_ENTRY(r8, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x3, {0x5, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x30311810}}}, 0x90)
recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f00000000c0)=@sg0, r9, 0x0)
gettid()
socket$alg(0x26, 0x5, 0x0)
r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)=0xffff0018)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x20, 0x2f, 0x400, 0x70bd29, 0x25dfdbff, {0x5}, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}]}, 0x20}, 0x1, 0x0, 0x0, 0x42944}, 0x20000090)
socket$can_j1939(0x1d, 0x2, 0x7)

3.628852351s ago: executing program 4 (id=606):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

3.628002622s ago: executing program 2 (id=615):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5839, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x8000400})
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x1000, 0xc, 0x9, 0x4, <r4=>0x0}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000280)={0x53, 0x8000, 0x1, 0x80, r4}, &(0x7f00000002c0)=0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x0, 0x9}}, 0xfffffffffffffd9e)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r6}]}}}]}, 0x40}}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYBLOB="29f6"], 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r9, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0xf7ffffff, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
signalfd(r0, &(0x7f00000000c0)={[0xc, 0x8]}, 0x8)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x60, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6fb2}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20042040}, 0x4004000)

3.54264961s ago: executing program 4 (id=607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x40, 0x0, {}, {}, 0x0, 0x2, {}, 0x58603})
syz_clone(0x86000, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x3, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x3, 0x1, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4b, 0xa5, 0xbdb], 0x40000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x84)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000140)={0x3, 0x0, [{0x80000019, 0xfffffffd, 0x0, 0x4a0, 0x5, 0x9, 0x9}, {0x80000001, 0x3000000, 0x2, 0xffffffff, 0x0, 0x100, 0xfffffffc}, {0x1, 0x3, 0x2, 0x525, 0x6, 0x7, 0x4}]})
sendto$inet6(r6, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c)
getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

2.954546002s ago: executing program 1 (id=608):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0xfffffff3, 0x5, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x80000000, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x9, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x6)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x918)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
inotify_init1(0x80000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xca}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x91)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
io_uring_enter(0xffffffffffffffff, 0x68cd, 0x76c5, 0x0, &(0x7f0000000600)={[0x3ff]}, 0x8)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000040)={0x1, 0x1})
r6 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
open_by_handle_at(r6, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x5b, 0x9}}, 0x185980)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358})
r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
copy_file_range(r8, 0x0, r8, &(0x7f00000003c0)=0xffffffffffff7ffb, 0x2000000, 0x0)

2.587179257s ago: executing program 1 (id=609):
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0ccb84000400"/15, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100000000"], 0x48)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x29, 0x2, 0x100, "100000df00000000000000000000000000000000001000", 0x30314752})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ptrace$peek(0x6, 0x0, &(0x7f0000000280))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006)
r7 = socket(0x2, 0x80805, 0x0)
flistxattr(r7, &(0x7f0000000240)=""/53, 0x35)
sendmmsg$inet(r7, &(0x7f0000001080)=[{{&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000010c0)='j', 0x1}], 0x1, 0x0, 0x2b}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='+', 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000000c0)=0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)

1.177581341s ago: executing program 1 (id=610):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x20040084)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3d, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)

1.025739851s ago: executing program 0 (id=611):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100f5fa1eac000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)

786.772853ms ago: executing program 0 (id=612):
r0 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
clock_gettime(0x6, &(0x7f0000000180))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x6e6bbf, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000480))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
process_madvise(r7, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

751.684794ms ago: executing program 1 (id=613):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000300))
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e00090434"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101)

469.323792ms ago: executing program 2 (id=614):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1)

200.26326ms ago: executing program 3 (id=616):
r0 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
clock_gettime(0x6, &(0x7f0000000180))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'})
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x6e6bbf, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000480))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
process_madvise(r7, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

0s ago: executing program 4 (id=617):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x40, 0x0, {}, {}, 0x0, 0x2, {}, 0x58603})
syz_clone(0x86000, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x3, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x3, 0x1, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4b, 0xa5, 0xbdb], 0x40000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r6, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c)
getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

kernel console output (not intermixed with test programs):

.150': attribute type 1 has an invalid length.
[  121.377098][ T5719] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  121.537127][ T5719] usb 4-1: device descriptor read/64, error -71
[  121.656091][ T5719] usb usb4-port1: attempt power cycle
[  121.813691][ T6324] geneve2: entered promiscuous mode
[  121.822562][ T6324] geneve2: entered allmulticast mode
[  121.998120][ T5719] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  122.059443][ T5719] usb 4-1: device descriptor read/8, error -71
[  122.337998][ T5719] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  122.369791][ T5719] usb 4-1: device descriptor read/8, error -71
[  122.467166][ T1224] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  122.510951][ T5719] usb usb4-port1: unable to enumerate USB device
[  122.647150][ T1224] usb 1-1: device descriptor read/64, error -71
[  122.861633][ T6341] netlink: 'syz.1.158': attribute type 1 has an invalid length.
[  122.928252][ T6341] bond1: entered promiscuous mode
[  122.952094][ T6341] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.959834][ T1224] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  123.117758][ T1224] usb 1-1: device descriptor read/64, error -71
[  123.232489][ T6351] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET)
[  123.250271][ T1224] usb usb1-port1: attempt power cycle
[  123.488190][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  123.617137][ T1224] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  123.647806][ T1224] usb 1-1: device descriptor read/8, error -71
[  123.658632][   T10] usb 2-1: Using ep0 maxpacket: 8
[  123.670516][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  123.696896][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  123.745051][   T10] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  123.779197][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  123.809266][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  123.844399][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  123.860808][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  123.880879][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.947662][ T1224] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  123.998404][ T1224] usb 1-1: device descriptor read/8, error -71
[  124.104068][   T10] usb 2-1: GET_CAPABILITIES returned 0
[  124.109997][   T10] usbtmc 2-1:16.0: can't read capabilities
[  124.127393][ T1224] usb usb1-port1: unable to enumerate USB device
[  124.332356][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.350154][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.359298][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.368415][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.377513][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.451004][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.460149][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.469245][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.478342][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.487408][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.496468][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.525562][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.534716][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.543820][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.567324][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.576418][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.591332][ T1224] usb 2-1: USB disconnect, device number 4
[  125.199941][ T6373] __nla_validate_parse: 5 callbacks suppressed
[  125.199953][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'.
[  125.309948][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'.
[  125.346889][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'.
[  125.377358][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'.
[  126.157166][ T5690] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  126.308614][ T5690] usb 5-1: device descriptor read/64, error -71
[  126.597144][ T5690] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  126.817486][ T5690] usb 5-1: device descriptor read/64, error -71
[  126.980361][ T5690] usb usb5-port1: attempt power cycle
[  127.359333][ T5690] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  127.388856][ T5690] usb 5-1: device descriptor read/8, error -71
[  127.431065][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'.
[  127.449213][  T807] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  127.619468][  T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.633135][  T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.645831][ T5690] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  127.653529][  T807] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  127.663388][  T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.677707][  T807] usb 4-1: config 0 descriptor??
[  127.688773][ T5690] usb 5-1: device descriptor read/8, error -71
[  127.807580][ T5690] usb usb5-port1: unable to enumerate USB device
[  127.900459][  T807] usbhid 4-1:0.0: can't add hid device: -71
[  127.917404][  T807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  127.939812][  T807] usb 4-1: USB disconnect, device number 10
[  128.324513][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[  128.337215][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'.
[  128.374839][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[  128.398455][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'.
[  128.441870][ T3322] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.458939][ T3322] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.479030][ T6427] usb usb8: usbfs: process 6427 (syz.2.183) did not claim interface 0 before use
[  128.494846][ T3322] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.526712][ T3322] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.607433][  T807] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  128.643006][   T29] audit: type=1326 audit(1783791433.123:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  128.724337][   T29] audit: type=1326 audit(1783791433.133:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  128.790218][   T29] audit: type=1326 audit(1783791433.133:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  128.790762][  T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.886331][  T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.893845][ T6440] usb usb8: usbfs: process 6440 (syz.2.187) did not claim interface 0 before use
[  128.917266][   T29] audit: type=1326 audit(1783791433.133:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  128.971386][  T807] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  129.003524][   T29] audit: type=1326 audit(1783791433.133:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  129.042167][  T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.090087][   T29] audit: type=1326 audit(1783791433.133:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  129.129047][  T807] usb 4-1: config 0 descriptor??
[  129.169699][   T29] audit: type=1326 audit(1783791433.133:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  129.246125][   T29] audit: type=1326 audit(1783791433.133:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  129.272183][ T1224] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  129.299595][   T29] audit: type=1326 audit(1783791433.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  129.328868][   T29] audit: type=1326 audit(1783791433.133:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  129.354590][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.370900][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.415534][ T6455] netlink: 'syz.4.192': attribute type 1 has an invalid length.
[  129.468962][ T1224] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  129.515042][ T1224] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  129.575919][ T1224] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  129.599230][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.610770][  T807] usbhid 4-1:0.0: can't add hid device: -71
[  129.617582][  T807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  129.654749][  T807] usb 4-1: USB disconnect, device number 11
[  129.689974][ T1224] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1
[  129.843323][ T6463] loop7: detected capacity change from 0 to 7
[  129.881285][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.891337][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.904136][  T807] usb 1-1: USB disconnect, device number 7
[  129.927755][ T6463] Dev loop7: unable to read RDB block 7
[  129.933493][ T6463]  loop7: unable to read partition table
[  129.941682][ T6463] loop7: partition table beyond EOD, truncated
[  129.950570][ T6463] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  130.997124][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  131.067158][ T5704] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  131.157163][   T10] usb 1-1: device descriptor read/64, error -71
[  131.247137][ T5704] usb 2-1: Using ep0 maxpacket: 16
[  131.271409][ T5704] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[  131.279720][ T5704] usb 2-1: config 0 has no interface number 0
[  131.287191][ T5704] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  131.312101][ T5704] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  131.341161][ T5704] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  131.376402][ T5704] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  131.417682][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  131.432056][ T5704] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  131.443259][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.459148][ T5704] usb 2-1: Product: syz
[  131.469108][ T5704] usb 2-1: Manufacturer: syz
[  131.482493][ T5704] usb 2-1: SerialNumber: syz
[  131.494753][ T5704] usb 2-1: config 0 descriptor??
[  131.506373][ T6483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  131.587134][   T10] usb 1-1: device descriptor read/64, error -71
[  131.713045][   T10] usb usb1-port1: attempt power cycle
[  132.096479][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  132.208606][   T10] usb 1-1: device descriptor read/8, error -71
[  132.487153][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  132.637706][   T10] usb 1-1: device descriptor read/8, error -71
[  132.761352][   T10] usb usb1-port1: unable to enumerate USB device
[  132.834206][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  132.845818][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  133.435178][ T4996] Dev loop7: unable to read RDB block 7
[  133.447026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  133.457862][ T4996]  loop7: unable to read partition table
[  133.642074][ T4996] loop7: partition table beyond EOD, truncated
[  133.785406][ T5704] qcserial 2-1:0.49: Qualcomm USB modem converter detected
[  133.861920][ T5704] usb 2-1: USB disconnect, device number 5
[  133.926886][ T5704] qcserial 2-1:0.49: device disconnected
[  134.158753][ T1224] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  134.297459][ T5704] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  134.332656][ T1224] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  134.342553][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.359565][ T1224] usb 1-1: Product: syz
[  134.366559][ T1224] usb 1-1: Manufacturer: syz
[  134.373656][ T1224] usb 1-1: SerialNumber: syz
[  134.385484][ T1224] usb 1-1: config 0 descriptor??
[  134.405998][ T1224] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  134.478337][ T5704] usb 2-1: Using ep0 maxpacket: 16
[  134.490773][ T5704] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  134.513377][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.535857][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.552285][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  134.574636][ T5704] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  134.586665][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.603825][ T5704] usb 2-1: config 0 descriptor??
[  134.857788][ T6520] usb usb8: usbfs: process 6520 (syz.2.212) did not claim interface 0 before use
[  135.070791][ T5704] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0004/input/input6
[  135.117632][ T1224] gspca_sunplus: reg_w_riv err -110
[  135.141190][ T1224] sunplus 1-1:0.0: probe with driver sunplus failed with error -110
[  135.207872][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  135.237688][ T5704] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0004/input/input7
[  135.364812][ T5704] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0
[  135.417944][   T10] usb 3-1: Using ep0 maxpacket: 8
[  135.438912][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  135.454004][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  135.456291][ T5704] usb 2-1: USB disconnect, device number 6
[  135.505344][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  135.558946][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  135.572836][ T6534] fido_id[6534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  135.602494][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  135.645834][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  135.672942][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.711816][   T10] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  135.724486][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.735287][   T10] usb 3-1: Product: syz
[  135.741486][   T10] usb 3-1: Manufacturer: syz
[  135.747578][ T5718] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  135.757754][   T10] usb 3-1: SerialNumber: syz
[  135.764333][   T10] usb 3-1: config 0 descriptor??
[  135.770844][ T6523] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  135.785279][   T10] ati_remote 3-1:0.0: Initializing ati_remote hardware failed.
[  135.798965][   T10] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5
[  135.897141][ T5718] usb 4-1: device descriptor read/64, error -71
[  136.148708][ T5718] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  136.150116][ T6544] binder: 6522:6544 ioctl c018620b 0 returned -14
[  136.298658][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'.
[  136.317869][ T5718] usb 4-1: device descriptor read/64, error -71
[  136.428216][ T5718] usb usb4-port1: attempt power cycle
[  136.642651][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[  136.654030][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'.
[  136.690262][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[  136.702546][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'.
[  136.819796][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'.
[  136.847242][ T5718] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  136.855003][ T6553] netlink: 14 bytes leftover after parsing attributes in process `syz.1.222'.
[  136.892482][ T5718] usb 4-1: device descriptor read/8, error -71
[  136.916533][   T10] usb 1-1: USB disconnect, device number 12
[  136.929368][ T6555] netlink: 'syz.4.223': attribute type 1 has an invalid length.
[  137.083253][ T6555] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  137.137307][ T5718] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  137.247834][ T5718] usb 4-1: device descriptor read/8, error -71
[  137.357878][ T5718] usb usb4-port1: unable to enumerate USB device
[  137.416833][ T6564] FAULT_INJECTION: forcing a failure.
[  137.416833][ T6564] name failslab, interval 1, probability 0, space 0, times 1
[  137.433073][ T6555] macvlan2: entered promiscuous mode
[  137.439719][ T6555] macvlan2: entered allmulticast mode
[  137.445298][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) 
[  137.445313][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  137.445325][ T6564] Call Trace:
[  137.445331][ T6564]  <TASK>
[  137.445337][ T6564]  dump_stack_lvl+0xe8/0x150
[  137.445368][ T6564]  should_fail_ex+0x40c/0x560
[  137.445383][ T6564]  should_failslab+0xa8/0x100
[  137.445400][ T6564]  __kmalloc_cache_noprof+0xa8/0x660
[  137.445413][ T6564]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  137.445428][ T6564]  ? __kmalloc_cache_noprof+0x150/0x660
[  137.445439][ T6564]  ? sctp_add_bind_addr+0x8c/0x370
[  137.445452][ T6564]  ? sctp_add_bind_addr+0x8c/0x370
[  137.445467][ T6564]  sctp_add_bind_addr+0x8c/0x370
[  137.445482][ T6564]  sctp_copy_local_addr_list+0x31a/0x4e0
[  137.445496][ T6564]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  137.445509][ T6564]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  137.445523][ T6564]  ? sctp_v4_is_any+0x35/0x60
[  137.445536][ T6564]  ? sctp_copy_one_addr+0x93/0x360
[  137.445550][ T6564]  sctp_bind_addr_copy+0xb3/0x3c0
[  137.445572][ T6564]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  137.445594][ T6564]  sctp_connect_new_asoc+0x2ff/0x6b0
[  137.445614][ T6564]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  137.445633][ T6564]  ? __local_bh_enable_ip+0xd0/0x130
[  137.445644][ T6564]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  137.445656][ T6564]  ? security_sctp_bind_connect+0x7e/0x2c0
[  137.445672][ T6564]  sctp_sendmsg+0x159b/0x2d00
[  137.445694][ T6564]  ? __pfx_sctp_sendmsg+0x10/0x10
[  137.445712][ T6564]  ? aa_sk_perm+0x6d5/0x900
[  137.445729][ T6564]  ? lockdep_unlock+0x5d/0xd0
[  137.445748][ T6564]  ? sock_rps_record_flow+0x19/0x350
[  137.445764][ T6564]  ? inet_sendmsg+0x298/0x320
[  137.445779][ T6564]  ? __pfx_inet_sendmsg+0x10/0x10
[  137.445791][ T6564]  sock_sendmsg_nosec+0x10e/0x180
[  137.445806][ T6564]  ____sys_sendmsg+0x54e/0x850
[  137.445825][ T6564]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.445848][ T6564]  ___sys_sendmsg+0x2a5/0x360
[  137.445863][ T6564]  ? __lock_acquire+0x683/0x2cf0
[  137.445878][ T6564]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.445893][ T6564]  ? get_pid_task+0x20/0x1f0
[  137.445907][ T6564]  ? get_pid_task+0x20/0x1f0
[  137.445919][ T6564]  ? get_pid_task+0x20/0x1f0
[  137.445947][ T6564]  ? __fget_files+0x2a/0x420
[  137.445960][ T6564]  ? __fget_files+0x3a2/0x420
[  137.445978][ T6564]  __sys_sendmsg+0x177/0x240
[  137.445994][ T6564]  ? __pfx___sys_sendmsg+0x10/0x10
[  137.446019][ T6564]  __do_fast_syscall_32+0x23e/0x6f0
[  137.446035][ T6564]  ? do_fast_syscall_32+0x33/0x70
[  137.446049][ T6564]  ? lockdep_hardirqs_on+0x7a/0x110
[  137.446062][ T6564]  ? asm_int80_emulation+0x1a/0x20
[  137.446072][ T6564]  ? do_int80_emulation+0x29f/0x550
[  137.446086][ T6564]  ? trace_irq_disable+0x3b/0x140
[  137.446100][ T6564]  do_fast_syscall_32+0x33/0x70
[  137.446115][ T6564]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  137.446128][ T6564] RIP: 0023:0xf702f0ec
[  137.446143][ T6564] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  137.446151][ T6564] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  137.446163][ T6564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[  137.446169][ T6564] RDX: 0000000006008045 RSI: 0000000000000000 RDI: 0000000000000000
[  137.446175][ T6564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  137.446180][ T6564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  137.446186][ T6564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  137.446205][ T6564]  </TASK>
[  137.808795][ T6555] bond2: entered promiscuous mode
[  137.814019][ T6555] bridge2: entered promiscuous mode
[  137.821543][ T6555] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  137.841434][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'.
[  137.850470][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'.
[  137.860022][ T6555] bond2: left promiscuous mode
[  137.864835][ T6555] bridge2: left promiscuous mode
[  137.882456][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'.
[  137.995184][    T9] usb 3-1: USB disconnect, device number 4
[  139.222070][ T6610] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[  139.365439][ T6610] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[  139.376029][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  139.464460][ T6610] macvlan2: entered promiscuous mode
[  139.483596][ T6610] macvlan2: entered allmulticast mode
[  139.503277][ T6610] bond2: entered promiscuous mode
[  139.520335][ T6610] bridge1: entered promiscuous mode
[  139.538455][ T6610] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  139.557172][    T9] usb 1-1: Using ep0 maxpacket: 8
[  139.568814][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.583302][ T6610] bond2: left promiscuous mode
[  139.588402][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  139.600063][ T6610] bridge1: left promiscuous mode
[  139.615266][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  139.642515][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  139.667894][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  139.717783][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  139.744709][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.787489][    T9] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  139.802475][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.828415][    T9] usb 1-1: Product: syz
[  139.836579][    T9] usb 1-1: Manufacturer: syz
[  139.873427][    T9] usb 1-1: SerialNumber: syz
[  139.891815][    T9] usb 1-1: config 0 descriptor??
[  139.903863][ T6606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  139.918135][    T9] ati_remote 1-1:0.0: Initializing ati_remote hardware failed.
[  139.931123][    T9] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5
[  140.069440][ T6616] usb usb8: usbfs: process 6616 (syz.1.243) did not claim interface 0 before use
[  140.362009][ T6625] binder: 6605:6625 ioctl c018620b 0 returned -14
[  140.587539][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  140.727164][ T5719] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  140.737989][    T9] usb 4-1: device descriptor read/64, error -71
[  140.898099][ T5719] usb 3-1: Using ep0 maxpacket: 16
[  140.923153][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.939340][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.973421][ T5719] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  141.002909][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=63, SerialNumber=3
[  141.020051][ T5719] usb 3-1: Product: syz
[  141.027135][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  141.039588][ T5719] usb 3-1: Manufacturer: syz
[  141.062873][ T5719] usb 3-1: SerialNumber: syz
[  141.083764][ T5719] usb 3-1: config 0 descriptor??
[  141.101120][ T5719] appledisplay 3-1:0.0: Could not find int-in endpoint
[  141.117692][ T5719] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  141.177080][    T9] usb 4-1: device descriptor read/64, error -71
[  141.328638][    T9] usb usb4-port1: attempt power cycle
[  141.394751][   T10] usb 3-1: USB disconnect, device number 5
[  141.737557][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  141.791440][    T9] usb 4-1: device descriptor read/8, error -71
[  141.827156][ T5690] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  141.938823][ T6640] tipc: Started in network mode
[  141.960561][ T6640] tipc: Node identity ac14142f, cluster identity 4711
[  141.977538][ T5690] usb 5-1: device descriptor read/64, error -71
[  141.994419][ T6640] tipc: New replicast peer: 0.0.0.0
[  142.008782][ T6640] tipc: Enabled bearer <udp:syz2>, priority 10
[  142.025866][ T6640] l2tp_ppp: sess 2/0: no socket in recv
[  142.037109][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  142.068012][    T9] usb 4-1: device descriptor read/8, error -71
[  142.263197][    T9] usb usb4-port1: unable to enumerate USB device
[  142.299324][ T5718] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  142.327094][ T5690] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  142.357305][ T6644] __nla_validate_parse: 9 callbacks suppressed
[  142.357318][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[  142.393626][ T5719] usb 1-1: USB disconnect, device number 13
[  142.410354][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'.
[  142.410408][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[  142.474536][ T5690] usb 5-1: device descriptor read/64, error -71
[  142.519119][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'.
[  142.527121][ T5718] usb 3-1: device descriptor read/64, error -71
[  142.597527][ T5690] usb usb5-port1: attempt power cycle
[  142.767236][ T5718] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  142.907629][ T5718] usb 3-1: device descriptor read/64, error -71
[  142.947105][ T5690] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  143.001970][ T5690] usb 5-1: device descriptor read/8, error -71
[  143.027503][ T5718] usb usb3-port1: attempt power cycle
[  143.118410][ T5719] tipc: Node number set to 2886997039
[  143.247129][ T5690] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  143.278646][ T5690] usb 5-1: device descriptor read/8, error -71
[  143.344138][ T6671] netlink: 'syz.3.261': attribute type 1 has an invalid length.
[  143.377738][ T5718] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  143.389794][ T5690] usb usb5-port1: unable to enumerate USB device
[  143.428561][ T5718] usb 3-1: device descriptor read/8, error -71
[  143.458282][ T6674] bond1: (slave geneve2): making interface the new active one
[  143.495565][ T6674] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  143.518231][   T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  143.571392][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  143.587205][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  143.604827][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  143.677112][ T5718] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  143.717823][ T5718] usb 3-1: device descriptor read/8, error -71
[  143.837487][ T5718] usb usb3-port1: unable to enumerate USB device
[  144.367225][ T6683] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  144.374908][ T6683] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  144.381479][ T6683] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  144.387969][ T6683] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  144.394435][ T6683] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  144.400880][ T6683] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  144.407479][ T6683] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  144.414053][ T6683] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  144.420690][ T6683] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  144.427290][ T6683] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  144.532036][ T6685] netlink: 'syz.4.264': attribute type 1 has an invalid length.
[  145.155813][ T6694] netlink: 'syz.3.267': attribute type 1 has an invalid length.
[  145.271256][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'.
[  145.323371][ T6697] netlink: 'syz.3.267': attribute type 10 has an invalid length.
[  145.386893][ T6694] 8021q: adding VLAN 0 to HW filter on device bond2
[  145.387167][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.267'.
[  145.420175][ T6692] syzkaller0: entered promiscuous mode
[  145.438201][ T6692] syzkaller0: entered allmulticast mode
[  145.472916][ T6699] syzkaller0: tun_net_xmit 90
[  145.488750][ T6699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.546778][ T6697] dummy0: entered promiscuous mode
[  145.560046][   T34] syzkaller0: tun_net_xmit 70
[  145.566983][ T6691] tipc: Resetting bearer <eth:syzkaller0>
[  145.622623][ T6691] tipc: Disabling bearer <eth:syzkaller0>
[  146.018961][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'.
[  146.042516][ T6718] netlink: 'syz.0.273': attribute type 12 has an invalid length.
[  146.053476][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'.
[  146.504651][ T6731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.276'.
[  146.987447][ T5704] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  147.032552][ T6744] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[  147.151709][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.191701][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.227395][ T6749] usb usb8: usbfs: process 6749 (syz.3.282) did not claim interface 0 before use
[  147.245937][ T5704] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  147.270063][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.364665][ T5704] usb 2-1: config 0 descriptor??
[  147.805673][ T5704] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  147.826768][ T5704] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  147.845288][ T5704] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  147.878807][ T5704] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  147.907216][ T5704] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  147.962647][ T5704] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  148.128697][ T5690] usb 2-1: USB disconnect, device number 7
[  149.100259][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[  149.137984][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[  149.138009][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'.
[  149.179220][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[  149.179243][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'.
[  149.694280][ T6791] usb usb8: usbfs: process 6791 (syz.1.295) did not claim interface 0 before use
[  150.065108][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[  150.085035][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[  150.285864][ T6799] netlink: 312 bytes leftover after parsing attributes in process `syz.2.294'.
[  150.315331][ T6799] netlink: 'syz.2.294': attribute type 1 has an invalid length.
[  150.337395][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  150.844742][ T6824] FAULT_INJECTION: forcing a failure.
[  150.844742][ T6824] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  150.867379][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  150.909684][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.1.303 Not tainted syzkaller #0 PREEMPT(full) 
[  150.909712][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  150.909722][ T6824] Call Trace:
[  150.909730][ T6824]  <TASK>
[  150.909738][ T6824]  dump_stack_lvl+0xe8/0x150
[  150.909771][ T6824]  should_fail_ex+0x40c/0x560
[  150.909799][ T6824]  _copy_from_user+0x2d/0xb0
[  150.909827][ T6824]  get_compat_msghdr+0xb3/0x4c0
[  150.909849][ T6824]  ? __pfx_get_compat_msghdr+0x10/0x10
[  150.909880][ T6824]  ___sys_sendmsg+0x201/0x360
[  150.909907][ T6824]  ? __lock_acquire+0x683/0x2cf0
[  150.909936][ T6824]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.909969][ T6824]  ? get_pid_task+0x20/0x1f0
[  150.909995][ T6824]  ? get_pid_task+0x20/0x1f0
[  150.910017][ T6824]  ? get_pid_task+0x20/0x1f0
[  150.910066][ T6824]  ? __fget_files+0x2a/0x420
[  150.910089][ T6824]  ? __fget_files+0x3a2/0x420
[  150.910121][ T6824]  __sys_sendmsg+0x177/0x240
[  150.910151][ T6824]  ? __pfx___sys_sendmsg+0x10/0x10
[  150.910196][ T6824]  __do_fast_syscall_32+0x23e/0x6f0
[  150.910222][ T6824]  ? do_fast_syscall_32+0x33/0x70
[  150.910247][ T6824]  ? lockdep_hardirqs_on+0x7a/0x110
[  150.910271][ T6824]  ? asm_int80_emulation+0x1a/0x20
[  150.910288][ T6824]  ? do_int80_emulation+0x29f/0x550
[  150.910314][ T6824]  ? trace_irq_disable+0x3b/0x140
[  150.910339][ T6824]  do_fast_syscall_32+0x33/0x70
[  150.910366][ T6824]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  150.910388][ T6824] RIP: 0023:0xf702f0ec
[  150.910405][ T6824] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  150.910420][ T6824] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  150.910438][ T6824] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  150.910450][ T6824] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000
[  150.910460][ T6824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  150.910471][ T6824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  150.910481][ T6824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  150.910507][ T6824]  </TASK>
[  151.135535][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.162000][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  151.207179][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.287131][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.328077][    T9] usb 3-1: Product: syz
[  151.338957][    T9] usb 3-1: Manufacturer: syz
[  151.346688][    T9] usb 3-1: SerialNumber: syz
[  151.396759][    T9] cdc_mbim 3-1:1.0: skipping garbage
[  151.975000][ T6835] FAULT_INJECTION: forcing a failure.
[  151.975000][ T6835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.044017][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) 
[  152.044041][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  152.044052][ T6835] Call Trace:
[  152.044059][ T6835]  <TASK>
[  152.044070][ T6835]  dump_stack_lvl+0xe8/0x150
[  152.044103][ T6835]  should_fail_ex+0x40c/0x560
[  152.044129][ T6835]  _copy_from_user+0x2d/0xb0
[  152.044156][ T6835]  get_compat_msghdr+0xb3/0x4c0
[  152.044179][ T6835]  ? __pfx_get_compat_msghdr+0x10/0x10
[  152.044210][ T6835]  ___sys_sendmsg+0x201/0x360
[  152.044237][ T6835]  ? __lock_acquire+0x683/0x2cf0
[  152.044266][ T6835]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.044293][ T6835]  ? get_pid_task+0x20/0x1f0
[  152.044329][ T6835]  ? get_pid_task+0x20/0x1f0
[  152.044351][ T6835]  ? get_pid_task+0x20/0x1f0
[  152.044401][ T6835]  ? __fget_files+0x2a/0x420
[  152.044423][ T6835]  ? __fget_files+0x3a2/0x420
[  152.044454][ T6835]  __sys_sendmsg+0x177/0x240
[  152.044483][ T6835]  ? __pfx___sys_sendmsg+0x10/0x10
[  152.044527][ T6835]  __do_fast_syscall_32+0x23e/0x6f0
[  152.044553][ T6835]  ? do_fast_syscall_32+0x33/0x70
[  152.044577][ T6835]  ? lockdep_hardirqs_on+0x7a/0x110
[  152.044599][ T6835]  ? asm_int80_emulation+0x1a/0x20
[  152.044615][ T6835]  ? do_int80_emulation+0x29f/0x550
[  152.044641][ T6835]  do_fast_syscall_32+0x33/0x70
[  152.044666][ T6835]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  152.044688][ T6835] RIP: 0023:0xf702f0ec
[  152.044703][ T6835] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  152.044718][ T6835] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  152.044736][ T6835] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  152.044747][ T6835] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000
[  152.044757][ T6835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  152.044766][ T6835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  152.044775][ T6835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  152.044802][ T6835]  </TASK>
[  152.369856][ T6792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  152.451435][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.483977][ T6837] netlink: 'syz.4.309': attribute type 12 has an invalid length.
[  152.487477][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.492266][ T6837] netlink: 'syz.4.309': attribute type 29 has an invalid length.
[  152.512997][ T6837] netlink: 148 bytes leftover after parsing attributes in process `syz.4.309'.
[  152.524737][ T6837] netlink: 'syz.4.309': attribute type 3 has an invalid length.
[  152.532601][ T6837] netlink: 'syz.4.309': attribute type 2 has an invalid length.
[  152.541157][ T6837] netlink: 35 bytes leftover after parsing attributes in process `syz.4.309'.
[  152.553223][ T6844] netlink: 'syz.4.309': attribute type 12 has an invalid length.
[  152.561682][ T6844] netlink: 'syz.4.309': attribute type 29 has an invalid length.
[  152.569891][ T6844] netlink: 'syz.4.309': attribute type 3 has an invalid length.
[  152.586140][ T6844] netlink: 'syz.4.309': attribute type 2 has an invalid length.
[  152.678844][ T5704] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  152.825182][    T9] cdc_mbim 3-1:1.0: bind() failure
[  152.841801][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  152.844598][ T5704] usb 1-1: config index 0 descriptor too short (expected 72, got 36)
[  152.857583][    T9] cdc_ncm 3-1:1.1: bind() failure
[  152.868753][ T5704] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  152.886875][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.911461][    T9] usb 3-1: USB disconnect, device number 10
[  152.955143][ T5704] usb 1-1: config 0 has no interface number 0
[  152.992239][ T5704] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  153.030739][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.041384][ T5704] usb 1-1: Product: syz
[  153.063546][ T5704] usb 1-1: Manufacturer: syz
[  153.071491][ T5704] usb 1-1: SerialNumber: syz
[  153.082644][ T5704] usb 1-1: config 0 descriptor??
[  153.100019][ T6842] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  153.122828][ T5704] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  153.136147][ T5704] uvcvideo 1-1:0.105: No valid video chain found.
[  153.320584][ T1224] usb 1-1: USB disconnect, device number 14
[  154.784056][ T6888] usb usb8: usbfs: process 6888 (syz.1.322) did not claim interface 0 before use
[  154.949146][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  155.023582][ T6884] __nla_validate_parse: 2 callbacks suppressed
[  155.023601][ T6884] netlink: 216 bytes leftover after parsing attributes in process `syz.4.321'.
[  155.084634][ T6884] netlink: 216 bytes leftover after parsing attributes in process `syz.4.321'.
[  155.893273][ T6909] binder: 6908:6909 ioctl c0205867 80000840 returned -22
[  156.531907][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'.
[  156.797287][  T807] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  156.973934][  T807] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  156.994773][  T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.023142][  T807] usb 2-1: config 0 descriptor??
[  157.040724][  T807] cp210x 2-1:0.0: cp210x converter detected
[  157.448554][ T6921] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  157.526577][ T6925] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[  158.203030][  T807] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71
[  158.218541][  T807] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71
[  158.238381][  T807] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  158.280173][  T807] usb 2-1: cp210x converter now attached to ttyUSB0
[  158.291976][ T6932] usb usb8: usbfs: process 6932 (syz.3.334) did not claim interface 0 before use
[  158.334192][  T807] usb 2-1: USB disconnect, device number 8
[  158.383692][ T6934] fuse: Bad value for 'fd'
[  158.396749][  T807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  158.449686][  T807] cp210x 2-1:0.0: device disconnected
[  158.657115][    T9] usb 5-1: device descriptor read/64, error -71
[  158.983920][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  159.151627][    T9] usb 5-1: no configurations
[  159.181017][    T9] usb 5-1: can't read configurations, error -22
[  159.199120][    T9] usb usb5-port1: attempt power cycle
[  159.234854][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[  159.268293][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'.
[  159.306328][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[  159.333313][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'.
[  159.549807][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  159.602103][    T9] usb 5-1: no configurations
[  159.608546][    T9] usb 5-1: can't read configurations, error -22
[  159.747124][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  159.828094][    T9] usb 5-1: no configurations
[  159.840127][    T9] usb 5-1: can't read configurations, error -22
[  159.876585][    T9] usb usb5-port1: unable to enumerate USB device
[  161.017929][ T6974] usb usb8: usbfs: process 6974 (syz.2.347) did not claim interface 0 before use
[  161.067995][ T6977] netlink: 'syz.3.348': attribute type 1 has an invalid length.
[  161.206753][ T6982] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[  161.263992][ T6982] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.274282][ T6984] netlink: 600 bytes leftover after parsing attributes in process `syz.1.352'.
[  161.342598][ T6987] bond1: (slave geneve2): making interface the new active one
[  161.407615][ T6987] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  161.450470][ T6989] fuse: Unknown parameter 'grou8ùid'
[  161.555033][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'.
[  161.697120][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  161.746423][ T1224] IPVS: starting estimator thread 0...
[  161.771105][ T7000] mmap: syz.3.357 (7000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  161.814431][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'.
[  161.825797][ T7003] netlink: 14 bytes leftover after parsing attributes in process `syz.2.358'.
[  161.847654][    T9] usb 5-1: device descriptor read/64, error -71
[  161.877162][ T7001] IPVS: using max 33 ests per chain, 79200 per kthread
[  162.087186][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  162.227179][    T9] usb 5-1: device descriptor read/64, error -71
[  162.257119][  T807] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  162.337951][    T9] usb usb5-port1: attempt power cycle
[  162.419849][  T807] usb 3-1: Using ep0 maxpacket: 8
[  162.427432][  T807] usb 3-1: config 224 has an invalid interface number: 130 but max is 3
[  162.440483][  T807] usb 3-1: config 224 has an invalid interface number: 23 but max is 3
[  162.455487][  T807] usb 3-1: config 224 contains an unexpected descriptor of type 0x1, skipping
[  162.465237][  T807] usb 3-1: config 224 contains an unexpected descriptor of type 0x1, skipping
[  162.474857][  T807] usb 3-1: config 224 contains an unexpected descriptor of type 0x2, skipping
[  162.490063][  T807] usb 3-1: config 224 has an invalid interface number: 146 but max is 3
[  162.503542][  T807] usb 3-1: config 224 has an invalid interface number: 157 but max is 3
[  162.515213][  T807] usb 3-1: config 224 contains an unexpected descriptor of type 0x1, skipping
[  162.526947][  T807] usb 3-1: config 224 has an invalid interface number: 169 but max is 3
[  162.535761][  T807] usb 3-1: config 224 has 5 interfaces, different from the descriptor's value: 4
[  162.545591][  T807] usb 3-1: config 224 has no interface number 0
[  162.560620][  T807] usb 3-1: config 224 has no interface number 1
[  162.567223][  T807] usb 3-1: config 224 has no interface number 2
[  162.573538][  T807] usb 3-1: config 224 has no interface number 3
[  162.589008][ T7014] usb usb8: usbfs: process 7014 (syz.1.362) did not claim interface 0 before use
[  162.617122][  T807] usb 3-1: config 224 has no interface number 4
[  162.624513][  T807] usb 3-1: config 224 interface 130 altsetting 115 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  162.644161][  T807] usb 3-1: config 224 interface 130 altsetting 115 bulk endpoint 0x4 has invalid maxpacket 16
[  162.657641][  T807] usb 3-1: config 224 interface 23 altsetting 102 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  162.674435][  T807] usb 3-1: config 224 interface 23 altsetting 102 has a duplicate endpoint with address 0xE, skipping
[  162.685686][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  162.695058][  T807] usb 3-1: config 224 interface 23 altsetting 102 has an invalid descriptor for endpoint zero, skipping
[  162.707860][  T807] usb 3-1: config 224 interface 23 altsetting 102 has a duplicate endpoint with address 0x8, skipping
[  162.719175][    T9] usb 5-1: device descriptor read/8, error -71
[  162.726669][  T807] usb 3-1: config 224 interface 23 altsetting 102 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  162.739127][  T807] usb 3-1: config 224 interface 23 altsetting 102 has a duplicate endpoint with address 0xF, skipping
[  162.756449][  T807] usb 3-1: config 224 interface 23 altsetting 102 has a duplicate endpoint with address 0xD, skipping
[  162.787118][  T807] usb 3-1: config 224 interface 146 altsetting 4 has a duplicate endpoint with address 0xB, skipping
[  162.798281][  T807] usb 3-1: config 224 interface 146 altsetting 4 has an endpoint descriptor with address 0xA2, changing to 0x82
[  162.810434][  T807] usb 3-1: config 224 interface 146 altsetting 4 endpoint 0x82 has an invalid bInterval 251, changing to 7
[  162.822317][  T807] usb 3-1: config 224 interface 146 altsetting 4 has a duplicate endpoint with address 0xF, skipping
[  162.835008][  T807] usb 3-1: config 224 interface 146 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[  162.866201][  T807] usb 3-1: config 224 interface 146 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  162.880266][  T807] usb 3-1: config 224 interface 146 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  162.891498][  T807] usb 3-1: config 224 interface 146 altsetting 4 has a duplicate endpoint with address 0x9, skipping
[  162.905215][  T807] usb 3-1: config 224 interface 146 altsetting 4 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  162.927651][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  162.938774][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  162.950873][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  162.962798][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  162.975701][  T807] usb 3-1: config 224 interface 157 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  163.004833][  T807] usb 3-1: config 224 interface 157 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  163.017229][    T9] usb 5-1: device descriptor read/8, error -71
[  163.023680][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0xD, skipping
[  163.041272][  T807] usb 3-1: config 224 interface 157 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  163.065440][  T807] usb 3-1: config 224 interface 157 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  163.077543][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  163.089773][  T807] usb 3-1: config 224 interface 157 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  163.121235][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  163.132781][    T9] usb usb5-port1: unable to enumerate USB device
[  163.164504][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  163.175740][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0x8, skipping
[  163.186788][  T807] usb 3-1: config 224 interface 157 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  163.238703][  T807] usb 3-1: too many endpoints for config 224 interface 169 altsetting 33: 209, using maximum allowed: 30
[  163.256357][  T807] usb 3-1: config 224 interface 169 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 209
[  163.287080][  T807] usb 3-1: config 224 interface 130 has no altsetting 0
[  163.301951][  T807] usb 3-1: config 224 interface 23 has no altsetting 0
[  163.317067][  T807] usb 3-1: config 224 interface 146 has no altsetting 0
[  163.330288][  T807] usb 3-1: config 224 interface 157 has no altsetting 0
[  163.345734][ T7029] netlink: 'syz.1.367': attribute type 1 has an invalid length.
[  163.362132][  T807] usb 3-1: config 224 interface 169 has no altsetting 0
[  163.402476][  T807] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=f8.80
[  163.414338][  T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.423042][  T807] usb 3-1: Manufacturer: Ф
[  163.433276][  T807] usb 3-1: SerialNumber: 臫곪䶹瓿�ຣ뛹�鯜�￟�픂廂曇ꮇꥤᆋ牢녶㶬抉螫趴魦謇篢㉥�䈰�쿱ዽⵜ趹壭�퇶럜�亨ᛋ໾�아ᤒ쪘顳ꗷ鶛﷽ﯿഗ�鹶�맞ۻ댊錮
[  163.476230][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.365'.
[  163.494351][ T7008] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  163.717192][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.733501][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.880127][  T807] usb 3-1: USB disconnect, device number 11
[  164.699993][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  164.700028][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'.
[  164.758098][ T7047] loop7: detected capacity change from 0 to 7
[  164.883145][ T7047] Dev loop7: unable to read RDB block 7
[  164.916845][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  164.934990][ T7047]  loop7: unable to read partition table
[  164.955962][ T7047] loop7: partition table beyond EOD, truncated
[  164.968176][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'.
[  164.978609][ T7047] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  164.997416][ T7054] usb usb8: usbfs: process 7054 (syz.3.374) did not claim interface 0 before use
[  165.147902][ T5718] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  165.303504][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.317759][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.328183][ T5718] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  165.347167][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.358752][ T5718] usb 1-1: config 0 descriptor??
[  165.537269][ T5704] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  165.576423][ T5718] usbhid 1-1:0.0: can't add hid device: -71
[  165.586030][ T5718] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  165.611032][ T5718] usb 1-1: USB disconnect, device number 15
[  165.697166][ T5704] usb 2-1: Using ep0 maxpacket: 16
[  165.708091][ T5704] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  165.731772][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.754665][ T7071] netlink: 'syz.4.380': attribute type 1 has an invalid length.
[  165.763397][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.791408][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  165.817282][ T5704] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  165.841812][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.866385][ T5704] usb 2-1: config 0 descriptor??
[  166.077276][ T5718] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  166.247466][ T5718] usb 1-1: Using ep0 maxpacket: 8
[  166.259240][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.275233][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.301186][ T5718] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  166.322044][ T5704] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0006/input/input17
[  166.333874][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.384820][ T5718] usb 1-1: config 0 descriptor??
[  166.416460][ T5718] usb 1-1: selecting invalid altsetting 1
[  166.428001][ T5718] usb 1-1: Can not set alternate setting to 1, error: -22
[  166.454088][ T5718] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -22
[  166.457582][ T5704] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0006/input/input18
[  166.497897][ T7065] FAULT_INJECTION: forcing a failure.
[  166.497897][ T7065] name failslab, interval 1, probability 0, space 0, times 0
[  166.526669][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT(full) 
[  166.526685][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  166.526691][ T7065] Call Trace:
[  166.526695][ T7065]  <TASK>
[  166.526700][ T7065]  dump_stack_lvl+0xe8/0x150
[  166.526720][ T7065]  should_fail_ex+0x40c/0x560
[  166.526735][ T7065]  should_failslab+0xa8/0x100
[  166.526752][ T7065]  __kmalloc_noprof+0xfe/0x720
[  166.526766][ T7065]  ? tomoyo_encode+0x2ad/0x570
[  166.526777][ T7065]  ? tomoyo_encode+0x2ad/0x570
[  166.526790][ T7065]  tomoyo_encode+0x2ad/0x570
[  166.526803][ T7065]  tomoyo_realpath_from_path+0x5fa/0x640
[  166.526818][ T7065]  ? tomoyo_path_number_perm+0x219/0x5f0
[  166.526833][ T7065]  tomoyo_path_number_perm+0x246/0x5f0
[  166.526849][ T7065]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  166.526864][ T7065]  ? __lock_acquire+0x683/0x2cf0
[  166.526884][ T7065]  ? hook_file_ioctl_compat+0x1f0/0x5f0
[  166.526911][ T7065]  ? __fget_files+0x2a/0x420
[  166.526926][ T7065]  ? __fget_files+0x3a2/0x420
[  166.526939][ T7065]  ? __fget_files+0x2a/0x420
[  166.526953][ T7065]  security_file_ioctl_compat+0xc3/0x2a0
[  166.526988][ T7065]  __ia32_compat_sys_ioctl+0x139/0x950
[  166.527012][ T7065]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  166.527029][ T7065]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  166.527054][ T7065]  ? __fget_files+0x3a2/0x420
[  166.527082][ T7065]  ? fput+0xa0/0xd0
[  166.527104][ T7065]  ? ksys_write+0x242/0x270
[  166.527142][ T7065]  __do_fast_syscall_32+0x23e/0x6f0
[  166.527169][ T7065]  ? do_fast_syscall_32+0x33/0x70
[  166.527193][ T7065]  ? lockdep_hardirqs_on+0x7a/0x110
[  166.527216][ T7065]  ? asm_int80_emulation+0x1a/0x20
[  166.527233][ T7065]  ? do_int80_emulation+0x29f/0x550
[  166.527258][ T7065]  ? trace_irq_disable+0x3b/0x140
[  166.527283][ T7065]  do_fast_syscall_32+0x33/0x70
[  166.527309][ T7065]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  166.527332][ T7065] RIP: 0023:0xf702f0ec
[  166.527348][ T7065] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  166.527363][ T7065] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  166.527383][ T7065] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040084504
[  166.527395][ T7065] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  166.527406][ T7065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.527416][ T7065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  166.527427][ T7065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  166.527454][ T7065]  </TASK>
[  167.012244][ T7065] ERROR: Out of memory at tomoyo_realpath_from_path.
[  167.097952][ T5704] kye 0003:0458:5013.0006: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0
[  167.117452][ T5704] usb 2-1: USB disconnect, device number 9
[  167.157114][  T807] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  167.191334][ T7075] fido_id[7075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  167.318083][  T807] usb 5-1: too many configurations: 39, using maximum allowed: 8
[  167.340400][  T807] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  167.351255][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.360781][  T807] usb 5-1: Product: syz
[  167.365093][  T807] usb 5-1: Manufacturer: syz
[  167.371090][  T807] usb 5-1: SerialNumber: syz
[  167.387312][  T807] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  167.646964][    T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  167.707531][ T7089] FAULT_INJECTION: forcing a failure.
[  167.707531][ T7089] name failslab, interval 1, probability 0, space 0, times 0
[  167.729799][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.1.384 Not tainted syzkaller #0 PREEMPT(full) 
[  167.729828][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  167.729839][ T7089] Call Trace:
[  167.729846][ T7089]  <TASK>
[  167.729853][ T7089]  dump_stack_lvl+0xe8/0x150
[  167.729886][ T7089]  should_fail_ex+0x40c/0x560
[  167.729907][ T7089]  should_failslab+0xa8/0x100
[  167.729924][ T7089]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  167.729939][ T7089]  ? local_lock_release+0x9c/0x160
[  167.729956][ T7089]  ? __alloc_skb+0x1d7/0x7a0
[  167.729974][ T7089]  ? __alloc_skb+0x1d7/0x7a0
[  167.730004][ T7089]  __alloc_skb+0x1d7/0x7a0
[  167.730032][ T7089]  netlink_sendmsg+0x5d4/0xb40
[  167.730060][ T7089]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.730079][ T7089]  ? aa_sock_msg_perm+0xf1/0x1b0
[  167.730092][ T7089]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.730100][ T7089]  sock_sendmsg_nosec+0x13a/0x180
[  167.730114][ T7089]  ____sys_sendmsg+0x54e/0x850
[  167.730133][ T7089]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.730171][ T7089]  ___sys_sendmsg+0x2a5/0x360
[  167.730198][ T7089]  ? __lock_acquire+0x683/0x2cf0
[  167.730224][ T7089]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.730249][ T7089]  ? get_pid_task+0x20/0x1f0
[  167.730274][ T7089]  ? get_pid_task+0x20/0x1f0
[  167.730296][ T7089]  ? get_pid_task+0x20/0x1f0
[  167.730333][ T7089]  ? __fget_files+0x2a/0x420
[  167.730356][ T7089]  ? __fget_files+0x3a2/0x420
[  167.730389][ T7089]  __sys_sendmsg+0x177/0x240
[  167.730418][ T7089]  ? __pfx___sys_sendmsg+0x10/0x10
[  167.730456][ T7089]  __do_fast_syscall_32+0x23e/0x6f0
[  167.730472][ T7089]  ? do_fast_syscall_32+0x33/0x70
[  167.730486][ T7089]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.730502][ T7089]  ? asm_int80_emulation+0x1a/0x20
[  167.730520][ T7089]  ? do_int80_emulation+0x29f/0x550
[  167.730545][ T7089]  ? trace_irq_disable+0x3b/0x140
[  167.730571][ T7089]  do_fast_syscall_32+0x33/0x70
[  167.730598][ T7089]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  167.730614][ T7089] RIP: 0023:0xf702f0ec
[  167.730624][ T7089] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  167.730632][ T7089] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  167.730644][ T7089] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  167.730651][ T7089] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000
[  167.730656][ T7089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  167.730662][ T7089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  167.730670][ T7089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  167.730695][ T7089]  </TASK>
[  168.107035][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  168.396121][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.404799][  T807] usb 1-1: USB disconnect, device number 16
[  168.417688][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.500524][   T10] usb 5-1: USB disconnect, device number 22
[  168.544186][ T7096] usb usb8: usbfs: process 7096 (syz.0.386) did not claim interface 0 before use
[  168.753220][ T5718] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  168.769761][    T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  168.790374][    T9] ath9k_htc: Failed to initialize the device
[  168.805206][   T10] usb 5-1: ath9k_htc: USB layer deinitialized
[  168.948955][ T5718] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  168.966443][ T5718] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  168.991978][ T5718] usb 2-1: config 0 interface 0 has no altsetting 0
[  169.043781][ T5718] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  169.054297][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  169.069591][ T5718] usb 2-1: Product: syz
[  169.074390][ T5718] usb 2-1: Manufacturer: syz
[  169.086390][ T5718] usb 2-1: SerialNumber: syz
[  169.111681][ T5718] usb 2-1: config 0 descriptor??
[  169.134426][ T5718] hub 2-1:0.0: bad descriptor, ignoring hub
[  169.150736][ T5718] hub 2-1:0.0: probe with driver hub failed with error -5
[  169.186693][ T5718] usb 2-1: selecting invalid altsetting 0
[  169.187235][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  169.331104][ T7097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.342071][ T7097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.377101][   T10] usb 5-1: Using ep0 maxpacket: 16
[  169.395678][   T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  169.427998][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.459458][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.483202][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  169.526115][   T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  169.560267][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.599782][   T10] usb 5-1: config 0 descriptor??
[  169.776036][ T7119] syz.3.393: vmalloc error: size 34359742464, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  169.808594][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.3.393 Not tainted syzkaller #0 PREEMPT(full) 
[  169.808620][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  169.808630][ T7119] Call Trace:
[  169.808637][ T7119]  <TASK>
[  169.808645][ T7119]  dump_stack_lvl+0xe8/0x150
[  169.808685][ T7119]  warn_alloc+0x24c/0x270
[  169.808713][ T7119]  ? stack_depot_save_flags+0x3ec/0x800
[  169.808737][ T7119]  ? __pfx_warn_alloc+0x10/0x10
[  169.808752][ T7119]  ? kasan_save_track+0x3e/0x80
[  169.808766][ T7119]  ? __kasan_kmalloc+0x93/0xb0
[  169.808780][ T7119]  ? xsk_setsockopt+0x5e0/0x960
[  169.808791][ T7119]  ? do_sock_setsockopt+0x17c/0x1b0
[  169.808814][ T7119]  ? __ia32_sys_setsockopt+0x13d/0x1b0
[  169.808840][ T7119]  ? __do_fast_syscall_32+0x23e/0x6f0
[  169.808867][ T7119]  ? do_fast_syscall_32+0x33/0x70
[  169.808892][ T7119]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  169.808908][ T7119]  __vmalloc_node_range_noprof+0x12c/0x1730
[  169.808934][ T7119]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  169.808948][ T7119]  ? __kasan_kmalloc+0x93/0xb0
[  169.808974][ T7119]  ? __kmalloc_cache_noprof+0x32d/0x660
[  169.808998][ T7119]  ? __kmalloc_cache_noprof+0x150/0x660
[  169.809025][ T7119]  vmalloc_user_noprof+0xad/0xe0
[  169.809044][ T7119]  ? xskq_create+0xbf/0x170
[  169.809057][ T7119]  xskq_create+0xbf/0x170
[  169.809071][ T7119]  xsk_init_queue+0x8a/0xe0
[  169.809085][ T7119]  xsk_setsockopt+0x5e0/0x960
[  169.809099][ T7119]  ? __pfx_xsk_setsockopt+0x10/0x10
[  169.809125][ T7119]  ? __pfx_aa_sk_perm+0x10/0x10
[  169.809156][ T7119]  ? aa_sock_opt_perm+0xff/0x1a0
[  169.809178][ T7119]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  169.809194][ T7119]  ? __pfx_xsk_setsockopt+0x10/0x10
[  169.809207][ T7119]  do_sock_setsockopt+0x17c/0x1b0
[  169.809225][ T7119]  __ia32_sys_setsockopt+0x13d/0x1b0
[  169.809242][ T7119]  __do_fast_syscall_32+0x23e/0x6f0
[  169.809266][ T7119]  ? do_fast_syscall_32+0x33/0x70
[  169.809292][ T7119]  ? lockdep_hardirqs_on+0x7a/0x110
[  169.809317][ T7119]  ? irqentry_exit+0x10f/0x8f0
[  169.809340][ T7119]  ? trace_irq_disable+0x3b/0x140
[  169.809354][ T7119]  do_fast_syscall_32+0x33/0x70
[  169.809369][ T7119]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  169.809381][ T7119] RIP: 0023:0xf7f140ec
[  169.809392][ T7119] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  169.809403][ T7119] RSP: 002b:00000000f53b550c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  169.809423][ T7119] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000011b
[  169.809436][ T7119] RDX: 0000000000000002 RSI: 0000000080000040 RDI: 0000000000000020
[  169.809448][ T7119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  169.809459][ T7119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  169.809470][ T7119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  169.809494][ T7119]  </TASK>
[  169.810952][ T7119] Mem-Info:
[  170.105441][ T7097] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  170.195481][ T7119] active_anon:6145 inactive_anon:0 isolated_anon:0
[  170.195481][ T7119]  active_file:0 inactive_file:46230 isolated_file:0
[  170.195481][ T7119]  unevictable:768 dirty:412 writeback:0
[  170.195481][ T7119]  slab_reclaimable:10283 slab_unreclaimable:95988
[  170.195481][ T7119]  mapped:32002 shmem:1294 pagetables:1228
[  170.195481][ T7119]  sec_pagetables:0 bounce:0
[  170.195481][ T7119]  kernel_misc_reclaimable:0
[  170.195481][ T7119]  free:1328147 free_pcp:9457 free_cma:0
[  170.266657][ T7119] Node 0 active_anon:24680kB inactive_anon:0kB active_file:0kB inactive_file:184720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128108kB dirty:1648kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12632kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  170.336904][ T7119] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  170.391629][   T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0007/input/input19
[  170.414962][ T7119] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  170.520922][   T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0007/input/input20
[  170.580258][ T7119] lowmem_reserve[]: 0 2489 2489 2489 2489
[  170.586851][ T7119] Node 0 DMA32 free:1352472kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25580kB inactive_anon:0kB active_file:0kB inactive_file:184720kB unevictable:1536kB writepending:1648kB zspages:0kB present:3129332kB managed:2548736kB mlocked:0kB bounce:0kB free_pcp:36816kB local_pcp:20168kB free_cma:0kB
[  170.630606][   T10] kye 0003:0458:5013.0007: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0
[  170.733577][ T7119] lowmem_reserve[]: 0 0 0 0 0
[  170.765205][   T10] usb 5-1: USB disconnect, device number 23
[  170.840023][ T7119] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  170.913135][ T7119] lowmem_reserve[]:
[  170.951306][    T9] usb 2-1: USB disconnect, device number 10
[  171.047173][ T7119]  0 0 0 0 0
[  171.097905][ T7119] Node 1 Normal free:3944756kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:0kB free_cma:0kB
[  171.135959][ T7119] lowmem_reserve[]: 0 0 0 0 0
[  171.165533][ T7119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  171.331001][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'.
[  171.380233][ T7119] Node 0 DMA32: 
[  171.383189][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  171.383299][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'.
[  171.416968][ T7119] 1287*4kB (UME) 636*8kB (UM) 294*16kB (UME) 132*32kB (UME) 90*64kB (UME) 14*128kB (UM) 15*256kB (M) 17*512kB (UME) 7*1024kB (UM) 5*2048kB (ME) 316*4096kB (UM) = 1351004kB
[  171.505336][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  171.520865][ T7119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  171.668785][ T7119] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 6*32kB (UM) 7*64kB (UM) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3944756kB
[  171.713752][ T7119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  171.734345][ T7119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  171.759230][ T7119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  171.902317][ T7119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  171.902361][ T7119] 49208 total pagecache pages
[  171.902382][ T7119] 0 pages in swap cache
[  171.902390][ T7119] Free swap  = 124996kB
[  171.902399][ T7119] Total swap = 124996kB
[  171.902409][ T7119] 2097051 pages RAM
[  171.902417][ T7119] 0 pages HighMem/MovableOnly
[  171.902425][ T7119] 428186 pages reserved
[  171.902433][ T7119] 0 pages cma reserved
[  172.217961][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  172.410125][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  172.454196][    T9] usb 3-1: config 0 has no interface number 0
[  172.492930][ T7169] faux_driver vkms: [drm] Unknown color mode 262147; guessing buffer size.
[  172.516144][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.579943][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'.
[  172.595060][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.640238][    T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  172.654321][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.702753][    T9] usb 3-1: config 0 descriptor??
[  173.028032][    T9] usbhid 3-1:0.1: can't add hid device: -71
[  173.052656][    T9] usbhid 3-1:0.1: probe with driver usbhid failed with error -71
[  173.114685][    T9] usb 3-1: USB disconnect, device number 12
[  173.331620][ T7189] net_ratelimit: 2 callbacks suppressed
[  173.331638][ T7189] openvswitch: netlink: Flow key attr not present in new flow.
[  173.855672][ T7194] netlink: 'syz.3.413': attribute type 1 has an invalid length.
[  174.727429][ T7214] netlink: 'syz.0.419': attribute type 1 has an invalid length.
[  175.400081][ T7230] usb usb8: usbfs: process 7230 (syz.2.423) did not claim interface 0 before use
[  175.917146][ T5362] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  175.979099][ T7238] syzkaller0: entered promiscuous mode
[  176.030450][ T7238] syzkaller0: entered allmulticast mode
[  176.087101][ T5362] usb 3-1: device descriptor read/64, error -71
[  176.096710][ T7238] syzkaller0: tun_net_xmit 90
[  176.103500][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[  176.121043][ T7241] fuse: Bad value for 'fd'
[  176.127085][ T7238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.137993][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'.
[  176.154311][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[  176.163503][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'.
[  176.212765][ T7237] tipc: Resetting bearer <eth:syzkaller0>
[  176.291906][ T7237] tipc: Disabling bearer <eth:syzkaller0>
[  176.368795][ T5362] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  176.494537][ T7250] netlink: 'syz.0.432': attribute type 12 has an invalid length.
[  176.517403][ T5362] usb 3-1: device descriptor read/64, error -71
[  176.696631][ T5362] usb usb3-port1: attempt power cycle
[  176.828912][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'.
[  176.991933][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'.
[  176.992044][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'.
[  177.027878][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'.
[  177.187131][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  177.227203][ T5362] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  177.279939][ T5362] usb 3-1: device descriptor read/8, error -71
[  177.359020][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  177.374539][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.378526][ T7272] fuse: Bad value for 'fd'
[  177.389645][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.412419][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  177.428318][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  177.438580][    T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  177.446751][    T9] usb 1-1: Manufacturer: syz
[  177.483444][    T9] usb 1-1: config 0 descriptor??
[  177.527125][ T5718] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  177.557338][ T5362] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  177.598400][ T5362] usb 3-1: device descriptor read/8, error -71
[  177.683782][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'.
[  177.705762][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short
[  177.720600][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'.
[  177.734545][ T5718] usb 4-1: not running at top speed; connect to a high speed hub
[  177.751313][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'.
[  177.762506][ T5718] usb 4-1: config 160 has an invalid interface number: 168 but max is 0
[  177.767611][ T5362] usb usb3-port1: unable to enumerate USB device
[  177.783571][ T5718] usb 4-1: config 160 has no interface number 0
[  177.794001][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'.
[  177.812122][ T5718] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84
[  177.837221][ T5718] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64
[  177.868843][ T5718] usb 4-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  177.898862][ T5718] usb 4-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  177.904194][    T9] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  177.922001][ T5718] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  177.939173][ T5718] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89
[  177.954783][ T5718] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64
[  177.969237][ T5718] usb 4-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6
[  177.983840][ T5718] usb 4-1: config 160 interface 168 has no altsetting 0
[  178.000963][ T5718] usb 4-1: string descriptor 0 read error: -22
[  178.001333][    T9] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  178.032867][ T5718] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1
[  178.042822][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.059518][ T7266] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  178.069393][ T7266] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  178.084959][ T7266] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  178.104805][ T5718] io_edgeport 4-1:160.168: EPiC device converter detected
[  178.116357][ T5718] usb 4-1:   detected
[  178.428513][ T5718] usb 4-1: error in getting manufacturer descriptor: -32
[  178.446054][ T7266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.456447][ T5718] usb 4-1: error in getting boot descriptor: -32
[  178.468360][ T5718] usb 4-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information.
[  178.484159][ T7266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.504358][ T5718] usb 4-1: Direct firmware load for edgeport/down.fw failed with error -2
[  178.524647][ T5718] usb 4-1: Falling back to sysfs fallback for: edgeport/down.fw
[  178.591002][ T7259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.642120][ T5704] usb 1-1: USB disconnect, device number 17
[  178.935032][ T7305] syzkaller1: entered promiscuous mode
[  178.950166][ T7305] syzkaller1: entered allmulticast mode
[  179.321441][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.449'.
[  179.343022][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.352944][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.371213][ T7317] bridge0: entered allmulticast mode
[  180.713077][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'.
[  181.151236][ T7350] FAULT_INJECTION: forcing a failure.
[  181.151236][ T7350] name failslab, interval 1, probability 0, space 0, times 0
[  181.238712][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.4.458 Not tainted syzkaller #0 PREEMPT(full) 
[  181.238729][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  181.238737][ T7350] Call Trace:
[  181.238742][ T7350]  <TASK>
[  181.238747][ T7350]  dump_stack_lvl+0xe8/0x150
[  181.238769][ T7350]  should_fail_ex+0x40c/0x560
[  181.238784][ T7350]  should_failslab+0xa8/0x100
[  181.238801][ T7350]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  181.238814][ T7350]  ? local_lock_release+0x9c/0x160
[  181.238829][ T7350]  ? __alloc_skb+0x1d7/0x7a0
[  181.238842][ T7350]  ? __alloc_skb+0x1d7/0x7a0
[  181.238857][ T7350]  __alloc_skb+0x1d7/0x7a0
[  181.238873][ T7350]  netlink_sendmsg+0x5d4/0xb40
[  181.238889][ T7350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.238900][ T7350]  ? aa_sock_msg_perm+0xf1/0x1b0
[  181.238913][ T7350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.238922][ T7350]  sock_sendmsg_nosec+0x13a/0x180
[  181.238936][ T7350]  ____sys_sendmsg+0x54e/0x850
[  181.238954][ T7350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.238977][ T7350]  ___sys_sendmsg+0x2a5/0x360
[  181.238992][ T7350]  ? __lock_acquire+0x683/0x2cf0
[  181.239009][ T7350]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.239023][ T7350]  ? get_pid_task+0x20/0x1f0
[  181.239038][ T7350]  ? get_pid_task+0x20/0x1f0
[  181.239050][ T7350]  ? get_pid_task+0x20/0x1f0
[  181.239077][ T7350]  ? __fget_files+0x2a/0x420
[  181.239090][ T7350]  ? __fget_files+0x3a2/0x420
[  181.239110][ T7350]  __sys_sendmsg+0x177/0x240
[  181.239126][ T7350]  ? __pfx___sys_sendmsg+0x10/0x10
[  181.239150][ T7350]  __do_fast_syscall_32+0x23e/0x6f0
[  181.239167][ T7350]  ? do_fast_syscall_32+0x33/0x70
[  181.239181][ T7350]  ? lockdep_hardirqs_on+0x7a/0x110
[  181.239195][ T7350]  ? asm_int80_emulation+0x1a/0x20
[  181.239204][ T7350]  ? do_int80_emulation+0x29f/0x550
[  181.239221][ T7350]  do_fast_syscall_32+0x33/0x70
[  181.239236][ T7350]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.239248][ T7350] RIP: 0023:0xf6fef0ec
[  181.239261][ T7350] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  181.239276][ T7350] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  181.239288][ T7350] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  181.239295][ T7350] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000
[  181.239301][ T7350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.239307][ T7350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  181.239313][ T7350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.239327][ T7350]  </TASK>
[  181.877620][ T1224] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  181.896176][ T7354] netlink: 'syz.4.460': attribute type 1 has an invalid length.
[  182.048582][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.093297][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.146212][ T1224] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  182.191411][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.223624][ T1224] usb 3-1: config 0 descriptor??
[  182.457772][ T1224] usbhid 3-1:0.0: can't add hid device: -71
[  182.478169][ T1224] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  182.544984][ T1224] usb 3-1: USB disconnect, device number 17
[  182.852758][ T7362] vlan2: entered promiscuous mode
[  182.997799][ T1224] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  183.177146][ T1224] usb 3-1: Using ep0 maxpacket: 8
[  183.184385][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.200036][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.219665][ T1224] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  183.237533][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.257814][ T1224] usb 3-1: config 0 descriptor??
[  183.274100][ T1224] usb 3-1: selecting invalid altsetting 1
[  183.284662][ T1224] usb 3-1: Can not set alternate setting to 1, error: -22
[  183.297130][ T1224] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -22
[  184.148564][ T7383] netlink: 'syz.1.469': attribute type 28 has an invalid length.
[  184.979476][ T5704] usb 3-1: USB disconnect, device number 18
[  185.163267][ T7404] syzkaller1: entered promiscuous mode
[  185.189235][ T7404] syzkaller1: entered allmulticast mode
[  186.268605][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  186.420451][ T5704] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  186.437119][    T9] usb 3-1: Using ep0 maxpacket: 8
[  186.458864][    T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  186.470264][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.478909][    T9] usb 3-1: Product: syz
[  186.483632][    T9] usb 3-1: Manufacturer: syz
[  186.486856][ T5704] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  186.488858][    T9] usb 3-1: SerialNumber: syz
[  186.518651][    T9] usb 3-1: config 0 descriptor??
[  186.538160][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[  186.587131][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  186.761646][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.781058][ T7435] FAULT_INJECTION: forcing a failure.
[  186.781058][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.799434][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.819652][   T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  186.830831][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.3.486 Not tainted syzkaller #0 PREEMPT(full) 
[  186.830857][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  186.830868][ T7435] Call Trace:
[  186.830875][ T7435]  <TASK>
[  186.830883][ T7435]  dump_stack_lvl+0xe8/0x150
[  186.830917][ T7435]  should_fail_ex+0x40c/0x560
[  186.830944][ T7435]  _copy_from_user+0x2d/0xb0
[  186.830970][ T7435]  get_compat_msghdr+0xb3/0x4c0
[  186.830992][ T7435]  ? __pfx_get_compat_msghdr+0x10/0x10
[  186.831015][ T7435]  ? kfree+0x4d/0x640
[  186.831037][ T7435]  ___sys_recvmsg+0x1db/0x5a0
[  186.831071][ T7435]  ? __pfx____sys_recvmsg+0x10/0x10
[  186.831103][ T7435]  ? __fget_files+0x2a/0x420
[  186.831154][ T7435]  do_recvmmsg+0x38b/0x7f0
[  186.831180][ T7435]  ? __pfx_do_recvmmsg+0x10/0x10
[  186.831207][ T7435]  ? __mutex_unlock_slowpath+0x731/0x900
[  186.831246][ T7435]  __sys_recvmmsg+0x1a5/0x290
[  186.831266][ T7435]  ? __pfx___sys_recvmmsg+0x10/0x10
[  186.831285][ T7435]  ? ksys_write+0x242/0x270
[  186.831317][ T7435]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  186.831339][ T7435]  __do_fast_syscall_32+0x23e/0x6f0
[  186.831363][ T7435]  ? do_fast_syscall_32+0x33/0x70
[  186.831385][ T7435]  ? lockdep_hardirqs_on+0x7a/0x110
[  186.831408][ T7435]  ? asm_int80_emulation+0x1a/0x20
[  186.831425][ T7435]  ? do_int80_emulation+0x29f/0x550
[  186.831448][ T7435]  ? trace_irq_disable+0x3b/0x140
[  186.831475][ T7435]  do_fast_syscall_32+0x33/0x70
[  186.831500][ T7435]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  186.831522][ T7435] RIP: 0023:0xf7f140ec
[  186.831546][ T7435] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  186.831563][ T7435] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  186.831582][ T7435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[  186.831595][ T7435] RDX: 000000000000049e RSI: 00000000000000fe RDI: 0000000000000000
[  186.831606][ T7435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  186.831618][ T7435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  186.831629][ T7435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  186.831655][ T7435]  </TASK>
[  187.058899][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.072995][   T10] usb 5-1: config 0 descriptor??
[  187.130687][    T9] gspca_se401: Wrong descriptor type
[  187.252367][ T7438] usb usb8: usbfs: process 7438 (syz.3.487) did not claim interface 0 before use
[  187.302076][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  187.308430][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  187.318609][   T10] usb 5-1: USB disconnect, device number 24
[  187.464117][   T42] usb 3-1: USB disconnect, device number 19
[  187.543739][ T7442] netlink: 'syz.3.488': attribute type 1 has an invalid length.
[  187.818591][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  187.989728][   T10] usb 5-1: Using ep0 maxpacket: 8
[  188.014203][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.047240][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.058796][   T10] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  188.077080][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.099864][   T10] usb 5-1: config 0 descriptor??
[  188.113398][   T10] usb 5-1: selecting invalid altsetting 1
[  188.122836][   T10] usb 5-1: Can not set alternate setting to 1, error: -22
[  188.137259][   T10] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -22
[  188.867569][ T5704] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  189.027157][ T5704] usb 1-1: Using ep0 maxpacket: 16
[  189.040787][ T5704] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  189.052431][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.067171][ T5704] usb 1-1: Product: syz
[  189.076159][ T5704] usb 1-1: Manufacturer: syz
[  189.086747][ T5704] usb 1-1: SerialNumber: syz
[  189.110680][ T5704] usb 1-1: config 0 descriptor??
[  189.537851][ T5704] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  189.579076][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  189.630384][ T5704] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  189.656817][ T7482] usb usb8: usbfs: process 7482 (syz.3.498) did not claim interface 0 before use
[  189.673840][ T5704] usb 1-1: media controller created
[  189.717158][ T5690] usb 5-1: USB disconnect, device number 25
[  189.791659][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  189.809996][ T7484] binder: 7483:7484 ioctl 4018620d 0 returned -22
[  189.871188][ T7484] binder: 7483:7484 ioctl c0306201 0 returned -14
[  189.888717][ T7486] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  189.903666][ T7484] binder: 7483:7484 ioctl c0306201 0 returned -14
[  189.958579][ T5704] zl10353_read_register: readreg error (reg=127, ret==0)
[  189.997388][ T5704] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  190.014386][ T5704] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  190.054108][ T5704] usb 1-1: USB disconnect, device number 18
[  190.203762][ T5704] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  190.608722][   T29] audit: type=1326 audit(1783791495.103:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.4.509" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fef0ec code=0x0
[  190.738770][ T5704] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  190.757165][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  190.918431][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.928970][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  190.938562][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  190.939600][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.948836][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.969072][ T5704] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  190.981926][ T5704] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  190.992692][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.010119][    T9] usb 2-1: config 0 descriptor??
[  191.027333][ T7513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.509'.
[  191.041216][ T5704] usb 1-1: config 0 descriptor??
[  191.109532][ T7513] team0: Port device team_slave_0 removed
[  191.157152][ T5690] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  191.259809][ T5704] usb 2-1: USB disconnect, device number 11
[  191.268183][    T9] usb 1-1: USB disconnect, device number 19
[  191.313903][ T5690] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.329241][ T5690] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.339757][ T5690] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  191.349836][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  191.357882][ T5690] usb 3-1: SerialNumber: syz
[  191.607651][ T7515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  191.614477][ T7515] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  191.654221][ T7515] vhci_hcd vhci_hcd.0: Device attached
[  191.679493][ T7526] vhci_hcd vhci_hcd.0: port 0 already used
[  191.699846][ T7521] vhci_hcd: connection closed
[  191.703647][   T13] vhci_hcd vhci_hcd.2: stop threads
[  191.717082][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  191.728229][   T13] vhci_hcd vhci_hcd.2: release socket
[  191.729285][ T5690] usb 3-1: 0:2 : does not exist
[  191.735469][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  191.741556][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  191.854272][ T5690] usb 3-1: USB disconnect, device number 20
[  191.917893][    T9] usb 2-1: Using ep0 maxpacket: 8
[  191.927543][   T10] usb 1-1: Using ep0 maxpacket: 8
[  191.940592][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.951460][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.968900][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  191.978398][   T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  191.992286][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=39.ee
[  192.008052][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.017904][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=39.ee
[  192.032770][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.043685][    T9] usb 2-1: Product: syz
[  192.049540][    T9] usb 2-1: Manufacturer: syz
[  192.050912][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.071550][   T10] usb 1-1: Product: syz
[  192.076765][    T9] usb 2-1: SerialNumber: syz
[  192.086406][   T10] usb 1-1: Manufacturer: syz
[  192.101201][    T9] usb 2-1: config 0 descriptor??
[  192.111204][   T10] usb 1-1: SerialNumber: syz
[  192.149945][   T10] usb 1-1: config 0 descriptor??
[  192.677182][ T5704] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  192.847106][ T5704] usb 3-1: Using ep0 maxpacket: 16
[  192.862215][ T5704] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  192.881487][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.898349][ T5704] usb 3-1: Product: syz
[  192.908089][ T5704] usb 3-1: Manufacturer: syz
[  192.919029][ T5704] usb 3-1: SerialNumber: syz
[  192.932685][ T5704] usb 3-1: config 0 descriptor??
[  193.352131][ T5704] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  193.366333][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  193.367859][ T5704] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  193.367902][ T5704] usb 3-1: media controller created
[  193.384484][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  193.422088][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'.
[  193.422148][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'.
[  193.479661][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'.
[  193.488896][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'.
[  193.562030][ T5704] zl10353_read_register: readreg error (reg=127, ret==0)
[  193.572817][ T5704] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  193.583596][ T5704] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  193.600569][ T5704] usb 3-1: USB disconnect, device number 21
[  193.656509][ T5704] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  194.273775][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  194.280407][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  194.715854][ T5690] usb 1-1: USB disconnect, device number 20
[  194.731168][ T5704] usb 2-1: USB disconnect, device number 12
[  195.127268][   T42] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  195.217450][ T5704] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  195.258973][ T7579] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[  195.277124][   T42] usb 3-1: Using ep0 maxpacket: 8
[  195.284692][   T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.295566][   T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  195.304715][ T7579] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  195.308570][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  195.328026][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  195.339770][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  195.351199][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  195.361639][   T42] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.374904][ T7579] bond1: entered promiscuous mode
[  195.378498][   T42] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  195.380180][ T7579] bridge1: entered promiscuous mode
[  195.390920][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.403207][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.413754][ T5704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.423220][ T7579] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  195.423876][   T42] usb 3-1: Product: syz
[  195.434665][   T42] usb 3-1: Manufacturer: syz
[  195.439423][   T42] usb 3-1: SerialNumber: syz
[  195.439479][ T7579] bond1: left promiscuous mode
[  195.450581][ T7579] bridge1: left promiscuous mode
[  195.452003][ T5704] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  195.465562][   T42] usb 3-1: config 0 descriptor??
[  195.474747][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  195.483373][ T7573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  195.490961][ T5704] usb 2-1: SerialNumber: syz
[  195.499128][   T42] ati_remote 3-1:0.0: Initializing ati_remote hardware failed.
[  195.512491][   T42] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5
[  195.596018][ T5690] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  195.637275][ T5690] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  195.741248][ T7575] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  195.747912][ T7575] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  195.773111][ T7575] vhci_hcd vhci_hcd.0: Device attached
[  195.848017][ T7575] vhci_hcd vhci_hcd.0: port 0 already used
[  195.868860][ T7586] vhci_hcd: connection closed
[  195.870566][   T48] vhci_hcd vhci_hcd.1: stop threads
[  195.889489][ T5704] usb 2-1: 0:2 : does not exist
[  195.894448][   T48] vhci_hcd vhci_hcd.1: release socket
[  195.901492][   T48] vhci_hcd vhci_hcd.1: disconnect device
[  195.902007][ T7595] binder: 7572:7595 ioctl c018620b 0 returned -14
[  195.936345][ T7594] netlink: 'syz.3.532': attribute type 1 has an invalid length.
[  196.020344][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'.
[  196.066706][ T5704] usb 2-1: USB disconnect, device number 13
[  196.139931][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.497209][ T5690] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  196.650354][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short
[  196.670709][ T5690] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32
[  196.698319][ T5690] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40
[  196.721531][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.736747][ T5690] usb 5-1: Product: syz
[  196.744302][ T5690] usb 5-1: Manufacturer: syz
[  196.757834][ T5690] usb 5-1: SerialNumber: syz
[  196.772746][ T7582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  197.377155][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  197.489446][ T5690] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  197.504688][ T5690] usb 5-1: invalid MIDI out EP 0
[  197.541077][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.569926][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  197.588094][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  197.609765][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.630292][   T10] usb 2-1: config 0 descriptor??
[  197.804788][ T5690] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  197.845289][    T9] usb 2-1: USB disconnect, device number 14
[  197.853124][ T5690] usb 5-1: USB disconnect, device number 26
[  197.918975][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.994372][   T42] usb 3-1: USB disconnect, device number 22
[  198.297145][ T5704] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  198.467933][ T5704] usb 2-1: Using ep0 maxpacket: 8
[  198.475617][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.485254][ T7634] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  198.579017][ T5704] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  198.600684][ T5704] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=39.ee
[  198.609969][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.620102][ T5704] usb 2-1: Product: syz
[  198.637063][ T5704] usb 2-1: Manufacturer: syz
[  198.650909][ T5704] usb 2-1: SerialNumber: syz
[  198.683699][ T5704] usb 2-1: config 0 descriptor??
[  198.700199][ T7641] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[  199.122036][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'.
[  199.122072][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'.
[  199.134521][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'.
[  199.152883][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'.
[  199.651875][ T5704] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  199.837218][ T5704] usb 1-1: Using ep0 maxpacket: 16
[  199.853248][ T5704] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  199.870682][ T7657] syzkaller0: entered promiscuous mode
[  199.883998][ T7657] syzkaller0: entered allmulticast mode
[  199.894941][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.924222][ T7657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.933743][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.945317][ T7656] tipc: Resetting bearer <eth:syzkaller0>
[  199.969844][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  199.989406][ T7656] tipc: Disabling bearer <eth:syzkaller0>
[  199.997715][ T5704] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  200.019693][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.054876][ T5704] usb 1-1: config 0 descriptor??
[  200.259227][ T7659] usb usb8: usbfs: process 7659 (syz.2.550) did not claim interface 0 before use
[  200.391278][   T42] usb 2-1: USB disconnect, device number 15
[  200.544212][ T5704] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000B/input/input24
[  200.627270][ T5690] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  200.704030][ T5704] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000B/input/input25
[  200.798347][ T5690] usb 3-1: Using ep0 maxpacket: 16
[  200.811838][ T5690] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  200.855306][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.859137][ T5704] kye 0003:0458:5013.000B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0
[  200.935319][ T5704] usb 1-1: USB disconnect, device number 21
[  200.953748][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.982300][ T7674] fido_id[7674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  201.006195][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  201.056605][ T5690] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  201.114544][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.164811][ T5690] usb 3-1: config 0 descriptor??
[  201.470089][ T5638] Bluetooth: hci3: command 0x0406 tx timeout
[  201.470465][ T4946] Bluetooth: hci0: command 0x0406 tx timeout
[  201.478776][ T5638] Bluetooth: hci2: command 0x0406 tx timeout
[  201.490350][ T4946] Bluetooth: hci1: command 0x0406 tx timeout
[  201.493227][ T5638] Bluetooth: hci4: command 0x0406 tx timeout
[  201.769359][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.556'.
[  201.838669][ T5690] usbhid 3-1:0.0: can't add hid device: -71
[  201.848508][ T5690] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  201.890119][ T5690] usb 3-1: USB disconnect, device number 23
[  203.155928][ T7694] netlink: 'syz.3.559': attribute type 1 has an invalid length.
[  204.681730][ T7715] usb usb8: usbfs: process 7715 (syz.1.563) did not claim interface 0 before use
[  204.907158][   T42] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  205.111910][   T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.155901][   T42] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  205.184730][   T42] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  205.212007][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.259749][   T42] usb 5-1: config 0 descriptor??
[  205.491818][ T5704] usb 5-1: USB disconnect, device number 27
[  205.554678][ T7734] netlink: 'syz.0.568': attribute type 1 has an invalid length.
[  206.030786][ T5704] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  206.205223][ T5704] usb 5-1: Using ep0 maxpacket: 8
[  206.234739][ T5704] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  206.271929][ T5704] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=39.ee
[  206.291920][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.316270][ T5704] usb 5-1: Product: syz
[  206.357737][ T5704] usb 5-1: Manufacturer: syz
[  206.374605][ T5704] usb 5-1: SerialNumber: syz
[  206.400352][ T5704] usb 5-1: config 0 descriptor??
[  207.201974][ T7749] usb usb8: usbfs: process 7749 (syz.2.572) did not claim interface 0 before use
[  207.256757][ T7751] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[  208.162693][    T9] usb 5-1: USB disconnect, device number 28
[  209.040749][ T7802] usb usb8: usbfs: process 7802 (syz.1.585) did not claim interface 0 before use
[  209.536787][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'.
[  209.749765][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'.
[  210.127118][ T5704] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  210.307586][ T5704] usb 3-1: Using ep0 maxpacket: 16
[  210.334725][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.358413][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  210.397579][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  210.421864][ T5704] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  210.444429][ T5704] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.462960][ T5704] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  210.481312][ T5704] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  210.496305][ T5704] usb 3-1: Manufacturer: syz
[  210.517254][ T5704] usb 3-1: config 0 descriptor??
[  210.567277][   T42] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  210.739680][   T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.767719][   T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  210.795242][   T42] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  210.810720][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.829149][   T42] usb 2-1: config 0 descriptor??
[  210.847486][ T5704] rc_core: IR keymap rc-hauppauge not found
[  210.858308][ T5704] Registered IR keymap rc-empty
[  210.867722][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  210.888100][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  210.915950][ T5704] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  210.939351][ T7833] usb usb8: usbfs: process 7833 (syz.4.597) did not claim interface 0 before use
[  210.951534][ T5704] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26
[  210.985479][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.017335][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.036356][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'.
[  211.057215][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.070575][   T10] usb 2-1: USB disconnect, device number 16
[  211.077211][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.097164][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.118306][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.144564][ T7836] netlink: 'syz.4.598': attribute type 1 has an invalid length.
[  211.152732][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.177178][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.197269][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.227422][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.257202][ T5704] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  211.298024][ T5704] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  211.309168][ T5704] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  211.333508][ T5704] usb 3-1: USB disconnect, device number 24
[  211.537102][ T1224] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  211.719084][ T1224] usb 2-1: Using ep0 maxpacket: 8
[  211.732176][ T1224] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  211.760369][ T1224] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=39.ee
[  211.788104][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.817145][ T1224] usb 2-1: Product: syz
[  211.829771][ T1224] usb 2-1: Manufacturer: syz
[  211.839045][ T1224] usb 2-1: SerialNumber: syz
[  211.849552][ T1224] usb 2-1: config 0 descriptor??
[  212.280161][ T5690] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  212.301158][ T5690] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  212.807166][ T5690] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  212.970261][ T5690] usb 1-1: unable to get BOS descriptor or descriptor too short
[  212.995625][ T5690] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32
[  213.012083][ T5690] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40
[  213.024805][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.040190][ T5690] usb 1-1: Product: syz
[  213.058139][ T5690] usb 1-1: Manufacturer: syz
[  213.062927][ T5690] usb 1-1: SerialNumber: syz
[  213.075030][ T7860] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  213.488052][ T5704] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  213.607586][   T10] usb 2-1: USB disconnect, device number 17
[  213.677126][ T5704] usb 3-1: Using ep0 maxpacket: 16
[  213.730166][ T5704] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  213.767999][ T5704] usb 3-1: config 0 has no interface number 0
[  213.785210][ T5704] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  213.803505][ T7885] usb usb8: usbfs: process 7885 (syz.1.608) did not claim interface 0 before use
[  213.840061][ T5704] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  213.869205][ T5704] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  213.886877][ T5704] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  213.943631][ T5704] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  214.012767][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.068400][ T5704] usb 3-1: Product: syz
[  214.088944][ T5704] usb 3-1: Manufacturer: syz
[  214.102255][ T5704] usb 3-1: SerialNumber: syz
[  214.152870][ T5704] usb 3-1: config 0 descriptor??
[  214.192758][ T7877] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  214.209177][ T5690] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  214.309667][ T5690] usb 1-1: invalid MIDI out EP 0
[  214.922132][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[  214.922159][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'.
[  215.025455][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[  215.025497][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'.
[  215.192803][ T5690] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  215.196240][ T5690] usb 1-1: USB disconnect, device number 22
[  215.293552][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.686534][   T29] audit: type=1326 audit(1783791520.173:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  215.787162][   T29] audit: type=1326 audit(1783791520.173:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  215.812582][   T29] audit: type=1326 audit(1783791520.203:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  215.842135][   T29] audit: type=1326 audit(1783791520.203:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  215.885717][   T29] audit: type=1326 audit(1783791520.203:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000
[  216.086184][ T5704] qcserial 3-1:0.49: Qualcomm USB modem converter detected
[  216.153552][ T5704] usb 3-1: USB disconnect, device number 25
[  216.218561][ T5704] qcserial 3-1:0.49: device disconnected
[  216.337181][   T42] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  216.521118][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.557228][ T5704] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  216.582147][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.600932][   T42] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  216.619049][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.641864][   T42] usb 2-1: config 0 descriptor??
[  216.748665][ T5704] usb 3-1: Using ep0 maxpacket: 16
[  216.760991][ T5704] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  216.771511][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.780532][ T5704] usb 3-1: Product: syz
[  216.785182][ T5704] usb 3-1: Manufacturer: syz
[  216.790488][ T5704] usb 3-1: SerialNumber: syz
[  216.804834][ T5704] usb 3-1: config 0 descriptor??
[  216.864935][   T42] usbhid 2-1:0.0: can't add hid device: -71
[  216.881647][   T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  216.911115][   T42] usb 2-1: USB disconnect, device number 18
[  217.226539][ T5704] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  217.269911][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  217.287933][ T5704] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  217.320352][ T5704] usb 3-1: media controller created
[  217.358084][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  217.408788][   T42] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  217.484062][ T7901] ------------[ cut here ]------------
[  217.489940][ T7901] usb 3-1: BOGUS control dir, pipe 80001a80 doesn't match bRequestType c0
[  217.498630][ T7901] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.2.614/7901
[  217.508885][ T7901] Modules linked in:
[  217.512943][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.2.614 Not tainted syzkaller #0 PREEMPT(full) 
[  217.523176][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  217.533429][ T7901] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  217.539745][ T7901] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  217.560884][ T7901] RSP: 0000:ffffc9000cf2f6f8 EFLAGS: 00010246
[  217.566980][ T7901] RAX: 0000000000000000 RBX: ffff88802933da00 RCX: 0000000080001a80
[  217.575090][ T7901] RDX: ffff8880691fa9e0 RSI: ffffffff8ca31100 RDI: ffffffff906566b0
[  217.583176][ T7901] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  217.591460][ T7901] R10: ffffc9000cf2f7e0 R11: fffff520019e5f08 R12: 1ffff1100f44942c
[  217.599505][ T7901] R13: ffff88807a24a160 R14: ffff8880691fa9e0 R15: 0000000080001a80
[  217.599780][   T42] usb 2-1: Using ep0 maxpacket: 8
[  217.607630][ T7901] FS:  0000000000000000(0000) GS:ffff888124f58000(0063) knlGS:00000000f5486b40
[  217.622045][ T7901] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  217.628871][ T7901] CR2: 00000000800f0018 CR3: 0000000070bd4000 CR4: 00000000003526f0
[  217.636889][ T7901] Call Trace:
[  217.641067][ T7901]  <TASK>
[  217.644300][ T7901]  usb_start_wait_urb+0x13f/0x5b0
[  217.649381][ T7901]  ? trace_kmalloc+0x2a/0xf0
[  217.653971][ T7901]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  217.659586][ T7901]  usb_control_msg+0x234/0x3e0
[  217.664360][ T7901]  dtv5100_i2c_msg+0x231/0x2f0
[  217.669228][ T7901]  dtv5100_i2c_xfer+0x1a5/0x610
[  217.674100][ T7901]  __i2c_transfer+0x7be/0x1fe0
[  217.678943][ T7901]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  217.684765][ T7901]  ? lockdep_hardirqs_on+0x7a/0x110
[  217.689995][ T7901]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  217.695827][ T7901]  ? rt_mutex_lock_nested+0x156/0x1c0
[  217.701252][ T7901]  ? i2c_transfer+0xc8/0x2d0
[  217.705841][ T7901]  i2c_transfer+0x1cc/0x2d0
[  217.710411][ T7901]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  217.716068][ T7901]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  217.722329][ T7901]  ? _copy_from_user+0x94/0xb0
[  217.727167][ T7901]  i2cdev_write+0x113/0x1e0
[  217.731708][ T7901]  vfs_writev+0x4bb/0x990
[  217.734825][   T42] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  217.736058][ T7901]  ? __pfx_i2cdev_write+0x10/0x10
[  217.736095][ T7901]  ? __pfx_vfs_writev+0x10/0x10
[  217.736133][ T7901]  ? __fget_files+0x2a/0x420
[  217.759879][ T7901]  ? __fget_files+0x3a2/0x420
[  217.764586][ T7901]  ? __fget_files+0x2a/0x420
[  217.769256][ T7901]  do_writev+0x154/0x2e0
[  217.773496][ T7901]  ? __pfx_do_writev+0x10/0x10
[  217.778302][ T7901]  __do_fast_syscall_32+0x23e/0x6f0
[  217.783493][ T7901]  ? do_fast_syscall_32+0x33/0x70
[  217.788525][ T7901]  ? lockdep_hardirqs_on+0x7a/0x110
[  217.793728][ T7901]  ? asm_int80_emulation+0x1a/0x20
[  217.798859][ T7901]  ? do_int80_emulation+0x29f/0x550
[  217.804059][ T7901]  ? trace_irq_disable+0x3b/0x140
[  217.809101][ T7901]  do_fast_syscall_32+0x33/0x70
[  217.813940][ T7901]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  217.820309][ T7901] RIP: 0023:0xf7fc60ec
[  217.824366][ T7901] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  217.844590][ T7901] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092
[  217.853345][ T7901] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0
[  217.861420][ T7901] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  217.869488][ T7901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  217.877503][ T7901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  217.885464][ T7901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  217.893474][ T7901]  </TASK>
[  217.896482][ T7901] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  217.903744][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.2.614 Not tainted syzkaller #0 PREEMPT(full) 
[  217.912945][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  217.922991][ T7901] Call Trace:
[  217.926255][ T7901]  <TASK>
[  217.929185][ T7901]  vpanic+0x56c/0xa60
[  217.933178][ T7901]  ? __pfx__printk+0x10/0x10
[  217.937763][ T7901]  ? __pfx_vpanic+0x10/0x10
[  217.942280][ T7901]  ? is_bpf_text_address+0x292/0x2b0
[  217.947594][ T7901]  ? is_bpf_text_address+0x26/0x2b0
[  217.952810][ T7901]  panic+0xc5/0xd0
[  217.956532][ T7901]  ? __pfx_panic+0x10/0x10
[  217.960953][ T7901]  __warn+0x315/0x4c0
[  217.964923][ T7901]  ? usb_submit_urb+0x1057/0x18b0
[  217.969944][ T7901]  ? usb_submit_urb+0x1057/0x18b0
[  217.975025][ T7901]  __report_bug+0x331/0x530
[  217.979539][ T7901]  ? usb_submit_urb+0x1057/0x18b0
[  217.984573][ T7901]  ? __pfx___report_bug+0x10/0x10
[  217.989588][ T7901]  ? stack_trace_save+0xa9/0x100
[  217.994673][ T7901]  ? __kmalloc_noprof+0x1ad/0x720
[  217.999708][ T7901]  ? kasan_save_track+0x4f/0x80
[  218.004557][ T7901]  report_bug_entry+0x19a/0x290
[  218.009400][ T7901]  ? usb_submit_urb+0x1100/0x18b0
[  218.014410][ T7901]  ? usb_submit_urb+0x1105/0x18b0
[  218.019423][ T7901]  handle_bug+0xce/0x200
[  218.023659][ T7901]  exc_invalid_op+0x1a/0x50
[  218.028160][ T7901]  asm_exc_invalid_op+0x1a/0x20
[  218.033086][ T7901] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  218.038706][ T7901] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  218.058303][ T7901] RSP: 0000:ffffc9000cf2f6f8 EFLAGS: 00010246
[  218.064363][ T7901] RAX: 0000000000000000 RBX: ffff88802933da00 RCX: 0000000080001a80
[  218.072322][ T7901] RDX: ffff8880691fa9e0 RSI: ffffffff8ca31100 RDI: ffffffff906566b0
[  218.080283][ T7901] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  218.088263][ T7901] R10: ffffc9000cf2f7e0 R11: fffff520019e5f08 R12: 1ffff1100f44942c
[  218.096253][ T7901] R13: ffff88807a24a160 R14: ffff8880691fa9e0 R15: 0000000080001a80
[  218.104228][ T7901]  ? usb_submit_urb+0x1091/0x18b0
[  218.109373][ T7901]  usb_start_wait_urb+0x13f/0x5b0
[  218.114405][ T7901]  ? trace_kmalloc+0x2a/0xf0
[  218.118990][ T7901]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  218.124541][ T7901]  usb_control_msg+0x234/0x3e0
[  218.129389][ T7901]  dtv5100_i2c_msg+0x231/0x2f0
[  218.134156][ T7901]  dtv5100_i2c_xfer+0x1a5/0x610
[  218.138997][ T7901]  __i2c_transfer+0x7be/0x1fe0
[  218.143753][ T7901]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  218.149551][ T7901]  ? lockdep_hardirqs_on+0x7a/0x110
[  218.154796][ T7901]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  218.160595][ T7901]  ? rt_mutex_lock_nested+0x156/0x1c0
[  218.165959][ T7901]  ? i2c_transfer+0xc8/0x2d0
[  218.170535][ T7901]  i2c_transfer+0x1cc/0x2d0
[  218.175025][ T7901]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  218.180673][ T7901]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  218.186821][ T7901]  ? _copy_from_user+0x94/0xb0
[  218.191578][ T7901]  i2cdev_write+0x113/0x1e0
[  218.196092][ T7901]  vfs_writev+0x4bb/0x990
[  218.200429][ T7901]  ? __pfx_i2cdev_write+0x10/0x10
[  218.205452][ T7901]  ? __pfx_vfs_writev+0x10/0x10
[  218.210390][ T7901]  ? __fget_files+0x2a/0x420
[  218.215001][ T7901]  ? __fget_files+0x3a2/0x420
[  218.219839][ T7901]  ? __fget_files+0x2a/0x420
[  218.224424][ T7901]  do_writev+0x154/0x2e0
[  218.228655][ T7901]  ? __pfx_do_writev+0x10/0x10
[  218.233413][ T7901]  __do_fast_syscall_32+0x23e/0x6f0
[  218.238609][ T7901]  ? do_fast_syscall_32+0x33/0x70
[  218.243666][ T7901]  ? lockdep_hardirqs_on+0x7a/0x110
[  218.248865][ T7901]  ? asm_int80_emulation+0x1a/0x20
[  218.253975][ T7901]  ? do_int80_emulation+0x29f/0x550
[  218.259180][ T7901]  ? trace_irq_disable+0x3b/0x140
[  218.264218][ T7901]  do_fast_syscall_32+0x33/0x70
[  218.269062][ T7901]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.275405][ T7901] RIP: 0023:0xf7fc60ec
[  218.279474][ T7901] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  218.299177][ T7901] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092
[  218.307600][ T7901] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0
[  218.315746][ T7901] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  218.323715][ T7901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  218.331682][ T7901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  218.339729][ T7901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  218.347715][ T7901]  </TASK>
[  218.350960][ T7901] Kernel Offset: disabled
[  218.355353][ T7901] Rebooting in 86400 seconds..